Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/azepeu9L4xBW2v8p-C3hxQDoA-o.roa
File: azepeu9L4xBW2v8p-C3hxQDoA-o.roa (raw, json)
Hash identifier: gHOOy4Aslt84hCOm1iQ3vNPVP6bJqiBXptMEJz1SsYU=
Subject key identifier: 6B:37:A9:7A:EF:4B:E3:10:56:DA:FF:29:F8:2D:E1:C5:00:E8:03:EA
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 018673A9DE0C71116C6074367A6D8638CE7A
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/azepeu9L4xBW2v8p-C3hxQDoA-o.roa
Signing time: Tue 21 Feb 2023 11:09:17 +0000
ROA not before: Tue 21 Feb 2023 11:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.155.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Apr 2023 13:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:a9:de:0c:71:11:6c:60:74:36:7a:6d:86:38:ce:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Feb 21 11:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b37a97aef4be31056daff29f82de1c500e803ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f7:e7:d5:e8:e4:28:d6:b3:c5:20:33:bb:d0:
53:5c:07:34:b2:5c:de:84:c0:29:cc:05:e8:d0:0a:
f7:f5:93:9b:ef:e5:bb:85:f0:05:8a:3a:10:ac:bb:
f3:d9:d9:af:17:3c:3a:fa:8a:60:7c:2e:23:f5:79:
de:c9:42:02:71:43:4d:82:20:41:a6:41:18:d4:61:
a0:8d:02:cb:e6:ac:79:50:61:48:0d:73:36:18:15:
7f:ce:cd:5c:64:92:b6:dd:0d:a7:7a:2b:71:63:98:
bd:5c:cf:4f:51:3e:82:2b:6f:f2:93:27:11:51:a4:
f1:7b:6a:3d:e3:39:cb:36:95:f7:b6:6e:93:fb:a2:
eb:ce:4b:c4:54:bd:37:f2:52:be:49:22:ad:79:b0:
e3:04:c1:a3:47:b0:cc:d3:47:57:25:c1:4a:1c:7a:
aa:d9:a9:b9:ac:89:b3:3a:0d:e0:f5:5e:6e:c4:fa:
c7:c6:f9:2f:fc:4c:48:b2:dd:08:44:cf:e1:10:d6:
90:ff:52:f2:e1:fa:8a:ba:43:0c:f7:7a:56:3a:c8:
47:f5:bf:28:12:9b:f7:f5:3c:6e:43:7c:ff:0e:db:
2b:dd:09:9e:27:94:48:63:2d:d9:1f:e4:e0:95:bd:
d2:d7:7a:05:ef:da:c5:7c:5b:6e:bf:bc:bd:71:7c:
bc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:37:A9:7A:EF:4B:E3:10:56:DA:FF:29:F8:2D:E1:C5:00:E8:03:EA
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/azepeu9L4xBW2v8p-C3hxQDoA-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.52.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e8:eb:46:49:b9:e8:eb:29:9b:3e:b5:36:84:b4:09:3a:da:
d1:ed:8e:9a:df:51:72:72:d4:c8:ab:35:8b:99:65:a5:40:a0:
ae:45:66:02:04:16:99:f6:00:ed:1c:2e:0b:1a:18:08:c6:07:
1c:86:63:6d:74:42:e4:52:be:e9:0d:d5:f1:ab:e3:fa:cf:80:
a5:32:57:18:27:5e:ab:ac:4b:a0:b2:37:4d:42:84:05:38:8b:
43:84:c7:db:9e:92:f8:08:7a:b6:1c:7d:d0:ce:29:49:d7:44:
b8:87:14:dd:6f:9d:2b:90:72:e9:2a:bd:3b:00:ee:1a:d1:df:
c0:9c:a7:7d:cd:7a:0c:9e:90:48:e6:07:bd:87:75:98:cd:61:
71:a3:3c:35:5b:df:6e:df:4a:3f:06:e5:61:9f:0b:9c:96:91:
d0:6f:86:8a:19:e7:16:30:5e:64:de:dd:82:f7:4e:67:ee:9d:
d4:b4:e0:ad:fb:a7:d3:18:fd:1d:2b:6a:45:a8:8e:23:4b:53:
ba:5c:97:b4:e1:43:35:62:39:94:0c:da:6e:a6:02:39:c5:de:
8f:53:b7:67:36:1e:56:3c:5c:6d:57:73:bc:63:4e:c7:9c:47:
2f:e8:47:8c:d7:38:1e:40:aa:4e:16:61:61:fb:f1:64:7c:1f:
cc:7e:1b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:17 2024 by rpki-client on console-fra.rpki-client.org