Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/Rg15gC_BVOCJbyHqdQecfsZNcBM.roa
File: Rg15gC_BVOCJbyHqdQecfsZNcBM.roa (raw, json)
Hash identifier: u0bxj7rVQo58SXpQL0VfIVCl7gbeduFlOI5yLZye5kE=
Subject key identifier: 46:0D:79:80:2F:C1:54:E0:89:6F:21:EA:75:07:9C:7E:C6:4D:70:13
Certificate issuer: /CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Certificate serial: 01856C0A6B8A1EF1418AE426920FE9D5B50C
Authority key identifier: 44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/Rg15gC_BVOCJbyHqdQecfsZNcBM.roa
Signing time: Sun 01 Jan 2023 06:35:00 +0000
ROA not before: Sun 01 Jan 2023 06:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211510
IP address blocks: 185.54.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Mar 2023 10:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:6b:8a:1e:f1:41:8a:e4:26:92:0f:e9:d5:b5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Validity
Not Before: Jan 1 06:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=460d79802fc154e0896f21ea75079c7ec64d7013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a7:ea:a2:74:6f:ca:a6:ec:a4:e2:25:0b:e3:
04:65:5d:cd:14:3e:10:5c:c4:8e:cf:a4:aa:58:3b:
bc:41:d9:7b:ea:78:99:02:bd:75:b6:03:a7:15:04:
9e:41:c9:a2:f7:42:c1:a3:83:c3:86:c0:a0:57:23:
bf:1e:3d:d6:50:46:30:5a:d2:5b:79:2d:51:f3:83:
85:1f:f1:9d:72:bf:79:fc:35:af:b0:84:c1:67:5c:
da:33:70:3d:ef:c8:2a:27:58:ce:cc:29:73:55:a6:
48:fc:c9:df:b7:ee:f4:3e:cb:d1:af:58:7c:e7:9e:
44:7f:e5:e6:a8:a9:a5:f6:f1:00:10:21:49:6a:56:
02:a1:ca:2e:5d:a8:67:27:39:91:6a:6c:8c:41:88:
f6:b6:12:cd:2c:3c:3e:f8:75:b2:80:fa:55:1c:84:
b1:e8:5a:b4:7f:d0:b8:e7:1a:ea:3b:88:2f:42:0a:
79:ab:4e:90:d0:8b:47:2a:08:4d:14:b1:d4:11:5c:
b9:2d:9c:12:b4:f9:d2:95:d4:9e:76:5a:a2:a8:40:
11:1a:68:33:16:e6:6b:51:66:70:87:51:88:9e:b8:
40:80:ac:5e:a1:99:14:73:30:d2:4d:94:64:1b:d2:
27:c3:58:74:a3:83:22:9f:72:8a:2b:99:08:bf:ee:
1f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0D:79:80:2F:C1:54:E0:89:6F:21:EA:75:07:9C:7E:C6:4D:70:13
X509v3 Authority Key Identifier:
keyid:44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/Rg15gC_BVOCJbyHqdQecfsZNcBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.211.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:66:d9:07:91:b8:69:cc:d2:8a:bf:7e:53:ca:5d:b5:c8:cf:
13:af:95:25:71:3f:67:b7:93:e3:3f:e3:e5:5d:7a:22:65:85:
cc:60:ff:1a:17:97:aa:12:34:9a:15:dd:04:51:40:38:9d:9c:
8a:ac:fd:ec:02:19:fa:22:12:ea:bb:6b:7f:8e:18:76:a1:09:
db:ee:fb:c2:41:74:bb:4e:df:1f:72:60:78:a1:10:66:f0:d8:
13:92:7d:31:ee:1f:4d:1a:88:d4:47:d1:2a:b1:e3:fd:f8:4c:
f3:ed:ad:9c:1a:95:f5:d0:43:6e:8b:c4:dd:be:96:e0:2a:5b:
6a:e1:87:20:67:02:85:b5:b2:47:18:d3:5c:e9:d1:15:20:1d:
35:36:00:8a:3e:9a:94:39:9b:19:85:83:04:d0:79:0f:89:b6:
4a:8b:de:3f:cd:5e:92:d9:b2:0e:cf:24:d9:55:0e:63:07:ec:
67:51:10:1b:dd:68:e8:40:c2:10:fb:c7:29:30:0a:7b:ca:66:
bc:c3:a0:67:90:b7:df:d3:85:00:ea:9a:4a:10:8d:b8:44:29:
51:6a:dc:ab:0f:49:49:cb:5d:bc:7b:6f:ad:0b:62:96:a2:4c:
83:17:53:26:a5:3a:c9:b6:5b:d9:71:91:2e:94:4d:fa:7a:c9:
e6:05:ec:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:58 2024 by rpki-client on console-fra.rpki-client.org