Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/s9anvP5Wv-tpdpkyc3-0kbIEjYA.roa
File: s9anvP5Wv-tpdpkyc3-0kbIEjYA.roa (raw, json)
Hash identifier: rsJWBzYjdx39C3rclUMlVkrQENinY38bWHe15uiJgL4=
Subject key identifier: B3:D6:A7:BC:FE:56:BF:EB:69:76:99:32:73:7F:B4:91:B2:04:8D:80
Certificate issuer: /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial: 018570798FB180EE9B25C4A3B3C6F8485655
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/s9anvP5Wv-tpdpkyc3-0kbIEjYA.roa
Signing time: Mon 02 Jan 2023 03:14:52 +0000
ROA not before: Mon 02 Jan 2023 03:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4755
IP address blocks: 185.156.186.0/24 maxlen: 24
185.156.184.0/24 maxlen: 24
185.156.185.0/24 maxlen: 24
185.156.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:8f:b1:80:ee:9b:25:c4:a3:b3:c6:f8:48:56:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Validity
Not Before: Jan 2 03:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3d6a7bcfe56bfeb69769932737fb491b2048d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:36:aa:40:2d:88:62:c5:0d:6d:d2:59:51:83:
44:92:45:31:a8:86:fe:2e:20:9b:10:1b:86:af:98:
e3:36:19:8d:e4:37:7e:42:8a:12:9d:19:05:bc:14:
07:f0:cc:49:ec:ee:d6:19:e4:a0:16:d3:75:a1:2f:
8d:b8:d2:dc:20:e2:c3:f8:f1:10:94:f5:67:2d:a4:
72:18:71:48:c6:62:10:96:3a:3d:01:10:20:75:c9:
31:d2:43:03:e9:d2:fd:65:86:2e:3d:40:20:44:6f:
f2:09:fa:e4:83:77:a3:83:2d:bb:1b:3f:84:14:96:
25:f9:c6:8d:c7:bc:ef:b7:d9:d0:86:13:0c:89:48:
42:1c:24:b8:0a:bd:8c:82:4c:b8:2e:18:c2:b4:b7:
5d:0b:ca:ec:1a:b2:d7:1e:5f:99:1a:36:35:4f:92:
40:37:9d:9c:ec:a5:6c:d1:4d:84:15:58:58:3f:35:
5f:60:f0:61:38:d8:8a:c8:8a:bf:f9:dd:cf:dd:97:
85:90:1f:be:3e:9a:39:20:ff:c0:f0:f9:c3:55:31:
ee:1d:15:5d:73:3f:93:bf:90:bc:be:30:23:e2:12:
e4:51:e8:a9:59:0f:32:29:cb:8a:c0:3a:d3:63:47:
3a:9e:06:ef:d8:41:f0:cb:9f:b1:f8:b7:54:58:73:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D6:A7:BC:FE:56:BF:EB:69:76:99:32:73:7F:B4:91:B2:04:8D:80
X509v3 Authority Key Identifier:
keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/s9anvP5Wv-tpdpkyc3-0kbIEjYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.184.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:24:bb:61:ae:dc:96:95:37:c8:40:d0:19:23:65:d0:84:1d:
e9:65:af:b5:9d:2e:cc:43:2a:e3:0a:45:77:81:18:95:e4:94:
60:77:a6:cd:a8:a6:b4:4a:13:3b:70:85:83:94:d3:9e:bc:0c:
fd:bc:01:f7:97:81:ff:6e:ed:c4:54:6a:c2:c2:fc:6a:15:a2:
02:4e:c2:b5:d9:f6:fa:d1:11:83:ca:31:bf:18:d1:e7:d3:5c:
be:ee:b3:b3:a2:f9:bc:42:e2:06:5d:5f:97:3d:b9:1b:53:86:
b0:f4:8a:be:5f:52:70:7b:2e:50:f1:72:65:da:99:81:72:54:
4d:0a:51:a0:e3:b8:3f:b4:c0:78:28:78:06:55:17:20:3a:7f:
c5:97:19:1d:d5:33:8d:62:c9:3f:f5:89:02:00:9b:58:83:fc:
95:9e:c5:97:22:72:a3:1a:1e:b2:78:19:fb:44:1e:45:ef:1e:
72:b7:bc:3f:cf:c3:ab:f9:09:9d:7d:55:73:15:20:4b:8c:1f:
17:36:f4:dd:c6:d7:69:cc:be:63:16:7d:29:fb:85:b2:ef:e9:
16:78:98:08:02:01:53:5c:8b:ae:f1:f4:0d:1f:e3:4e:46:48:
c6:a1:a1:c0:8f:e0:58:f9:27:11:63:b8:ae:77:8f:18:39:10:
dd:86:52:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-fra.rpki-client.org