Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/RpJsg19K8GU2-1YJYQKgWnDtgLc.roa
File: RpJsg19K8GU2-1YJYQKgWnDtgLc.roa (raw, json)
Hash identifier: 1CoYzcD0hdW6Kycd5AAvfGrQdNjyrICAOc9z4ugEDxU=
Subject key identifier: 46:92:6C:83:5F:4A:F0:65:36:FB:56:09:61:02:A0:5A:70:ED:80:B7
Certificate issuer: /CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Certificate serial: 018CCA2B86B437295F37F6803224DEFB1F5A
Authority key identifier: B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/RpJsg19K8GU2-1YJYQKgWnDtgLc.roa
Signing time: Tue 02 Jan 2024 12:34:59 +0000
ROA not before: Tue 02 Jan 2024 12:34:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207799
IP address blocks: 185.73.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 04 Jun 2024 12:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:86:b4:37:29:5f:37:f6:80:32:24:de:fb:1f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Validity
Not Before: Jan 2 12:34:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46926c835f4af06536fb56096102a05a70ed80b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:53:11:9f:b8:6e:82:47:88:84:f1:81:71:
89:d9:38:00:9f:c8:05:ee:c5:20:47:14:88:a8:7f:
fe:2d:98:4c:ab:bb:4b:f0:34:62:f8:95:78:aa:85:
32:0a:cd:93:89:68:6f:1a:29:af:42:37:df:7c:37:
bb:c9:23:58:5f:21:b9:a3:9b:a6:fd:fb:bd:b1:b5:
e9:d0:6e:59:08:66:22:27:8e:f2:e9:07:3d:bb:6b:
4c:1b:e0:42:59:fc:64:aa:25:b0:0c:08:82:88:36:
ee:c6:af:1b:11:84:28:8d:b8:4f:b6:4a:33:74:15:
59:f1:89:d7:19:ce:0e:20:a3:d8:63:34:ca:ea:e3:
2f:5e:68:74:c3:20:bd:da:9d:5a:32:f0:b8:22:76:
0c:6d:b6:b4:59:16:20:e1:f2:d5:7f:06:d4:bc:dc:
8a:ec:84:b8:49:0f:75:05:34:80:9e:51:aa:e4:d6:
85:67:43:50:46:5c:6d:ec:ba:52:c6:1c:6f:b0:a7:
60:40:e7:79:50:b4:22:de:52:62:eb:8d:da:10:5c:
35:75:1a:eb:ef:a1:27:25:53:1c:d5:66:0d:7f:3d:
82:1c:6a:f0:07:22:d5:22:66:5c:98:d5:03:2c:81:
1c:39:64:5a:c4:36:47:18:3a:4c:ce:96:70:46:3c:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:92:6C:83:5F:4A:F0:65:36:FB:56:09:61:02:A0:5A:70:ED:80:B7
X509v3 Authority Key Identifier:
keyid:B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/RpJsg19K8GU2-1YJYQKgWnDtgLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.136.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:b8:06:41:d9:1b:f9:78:4b:1e:8d:9d:88:f5:88:46:48:6b:
36:5a:46:7a:ba:28:77:24:24:04:dd:3b:b4:e0:b9:e7:f6:bc:
3c:1b:3b:47:84:d6:8a:d5:a4:2e:57:3d:20:d2:90:84:76:45:
54:ba:52:b7:a5:e5:42:64:a2:4c:b9:09:f8:e9:e5:60:12:63:
d2:c0:5d:f5:0c:73:57:3f:05:21:b1:a0:74:c0:79:54:00:45:
a9:86:ec:cd:c3:29:2d:c7:b7:db:1c:51:cb:4a:9a:e0:59:b9:
f0:8d:36:87:fe:87:56:16:8d:a5:70:4a:63:06:48:69:d7:5f:
eb:b1:7c:3b:e0:d9:c1:2d:75:80:8f:44:4d:65:c3:4a:fb:81:
f5:e1:9b:47:1c:ef:d1:f6:1f:a3:25:fe:5e:a8:04:e0:7e:be:
4c:03:58:03:0f:64:6b:8b:bf:e4:df:45:9b:f3:b4:d7:33:ef:
f1:54:f3:05:98:f3:df:71:73:44:27:0f:97:7f:7f:20:a4:0c:
37:30:3c:65:66:8a:32:53:93:1c:1d:45:95:1d:de:a3:4a:1f:
0f:50:60:a7:96:55:37:c0:0f:3e:7c:c4:32:14:46:ad:6e:51:
48:f1:5e:01:7f:11:1f:00:63:50:55:f7:c9:7f:4e:e1:e0:b8:
42:c6:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:04 2024 by rpki-client on console-fra.rpki-client.org