Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/brFImHe7pAsQHUlTX4MIErtmPVc.roa
File: brFImHe7pAsQHUlTX4MIErtmPVc.roa (raw, json)
Hash identifier: E9vBO/uc/BaMY/67lvgQAjUn2OlCviMqKD7oIMdhch8=
Subject key identifier: 6E:B1:48:98:77:BB:A4:0B:10:1D:49:53:5F:83:08:12:BB:66:3D:57
Certificate issuer: /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Certificate serial: 01856DD42271CF52DCE94825995DC89845F0
Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/brFImHe7pAsQHUlTX4MIErtmPVc.roa
Signing time: Sun 01 Jan 2023 14:54:57 +0000
ROA not before: Sun 01 Jan 2023 14:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4755
IP address blocks: 185.132.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:22:71:cf:52:dc:e9:48:25:99:5d:c8:98:45:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Validity
Not Before: Jan 1 14:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eb1489877bba40b101d49535f830812bb663d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:96:3c:b1:25:8b:1f:a2:f3:d1:7e:af:f6:
64:58:52:a6:80:01:c9:62:df:fb:9a:51:b7:d9:a1:
ca:49:d1:0f:5d:b9:28:71:1e:0f:c4:4f:71:b7:ac:
37:d1:aa:51:b3:f3:ae:48:48:c8:0c:18:d6:c9:a6:
cf:11:9b:ca:b0:8f:0d:4f:d6:57:5f:fd:ca:fd:04:
80:6b:2e:ff:00:21:d7:16:85:0f:54:73:50:4f:96:
58:01:61:a2:06:45:d7:3d:e6:50:5a:c3:cb:5a:1f:
82:58:d9:f8:de:1f:61:12:22:ff:44:78:07:ec:d5:
57:7d:ed:22:87:24:9a:61:5b:72:e7:37:01:e0:ea:
51:69:3a:cb:47:4b:97:cf:e6:61:5a:6b:8d:df:f3:
e8:d4:fd:bc:c0:d1:53:5e:81:5a:64:e0:66:0d:79:
b7:4d:58:48:bc:68:b8:ac:30:80:cb:98:14:ee:79:
3d:ea:64:0e:3d:ca:93:93:72:f8:83:0a:23:35:fb:
b6:3d:77:50:13:6e:d3:4d:65:68:80:5b:8c:f2:7d:
6c:2b:e4:60:8c:aa:17:e2:b1:df:63:27:a2:28:b7:
34:3f:fa:f4:58:d2:bc:84:a6:2d:b3:03:5a:2a:b6:
75:46:1d:92:54:fd:7d:f0:e0:53:16:b7:4b:76:4f:
64:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B1:48:98:77:BB:A4:0B:10:1D:49:53:5F:83:08:12:BB:66:3D:57
X509v3 Authority Key Identifier:
keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/brFImHe7pAsQHUlTX4MIErtmPVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.148.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:96:91:b7:fc:ef:04:51:b5:53:21:16:49:20:6a:dd:fe:63:
b7:18:cd:b5:e5:16:a0:b9:a1:cd:ef:24:69:62:43:27:d5:74:
09:79:44:11:12:d3:8e:d2:db:08:8a:e8:4a:cc:ef:48:03:35:
ba:db:ce:fa:16:bb:02:53:54:73:7f:d2:7c:a9:8e:96:62:a3:
4e:66:75:9f:c5:c2:6a:c3:1f:3b:a0:a5:09:ef:af:e9:4c:05:
e1:af:44:97:43:f4:57:84:d9:07:fe:fc:66:1e:bc:8c:52:13:
c1:39:9d:cc:d9:db:3f:5a:59:7a:29:67:a2:8f:d4:df:44:1d:
45:fc:da:98:2f:ab:c9:fc:6a:18:d8:e8:70:f2:d4:db:97:07:
9b:10:02:9c:54:13:63:50:46:3d:a6:45:a3:45:13:c1:04:ef:
90:bb:9d:5e:83:37:22:af:8b:58:a1:ae:8c:87:1a:dd:b8:fd:
25:55:a4:e8:83:1f:1d:f3:59:2a:94:e2:dc:53:7e:d8:2c:92:
d5:d3:cf:16:3d:df:21:d1:ad:e9:89:24:18:57:cb:d9:f8:72:
fe:13:7f:a5:58:61:37:d8:0d:54:37:da:73:9f:74:ee:cc:d9:
16:35:b9:2a:0d:38:84:31:fd:30:45:67:6f:6b:f4:ca:17:61:
c9:98:b1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:06 2024 by rpki-client on console-ams.rpki-client.org