Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/3laN53LulLUOJJMo92-mJjepjPo.roa
File: 3laN53LulLUOJJMo92-mJjepjPo.roa (raw, json)
Hash identifier: 0/MgNKrbztGlcgNNcWx+T2/21Z7fjXYc75M0z+elJh0=
Subject key identifier: DE:56:8D:E7:72:EE:94:B5:0E:24:93:28:F7:6F:A6:26:37:A9:8C:FA
Certificate issuer: /CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Certificate serial: 018CC8010A2977678B3A73DFDC442062BB60
Authority key identifier: 15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/3laN53LulLUOJJMo92-mJjepjPo.roa
Signing time: Tue 02 Jan 2024 02:29:20 +0000
ROA not before: Tue 02 Jan 2024 02:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 185.13.226.0/24 maxlen: 24
185.13.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 08:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0a:29:77:67:8b:3a:73:df:dc:44:20:62:bb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de568de772ee94b50e249328f76fa62637a98cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:78:33:2a:ad:d5:10:0b:d1:57:b6:40:73:
b4:9d:37:50:0d:68:5a:e1:e2:4b:ec:47:30:47:18:
de:63:46:21:8f:22:1c:dc:1c:a2:5a:69:bf:00:84:
98:be:2f:53:a6:91:21:bd:ec:e7:9d:90:a1:84:1c:
27:89:fe:0d:41:a5:b6:fe:ae:89:dc:80:48:b6:ad:
18:16:72:03:b0:43:23:ee:da:bf:e6:09:42:15:96:
a5:68:a1:7e:68:82:63:88:44:46:f3:5b:8c:e4:7a:
de:7d:60:f8:0e:48:2d:85:6b:17:b5:93:81:6e:5f:
24:b0:5a:7f:ff:5f:5a:ca:f7:da:9c:25:b3:5d:a2:
47:af:0e:8d:10:7f:e5:8c:06:57:c8:5b:88:cd:8c:
aa:c5:84:a4:44:1d:f5:62:36:83:f0:cd:17:21:03:
a6:39:37:ca:96:6b:6d:34:a5:cf:75:e4:9c:f4:55:
4e:68:f4:cb:54:55:c1:1a:5f:e6:5f:ba:0d:c2:d9:
42:ae:e6:25:19:a9:a5:c8:58:c9:4c:1e:8a:e8:aa:
63:91:e2:81:9f:1d:6e:7a:74:2d:79:f9:bf:35:3e:
17:ed:c3:3d:22:7a:cc:3b:19:5c:ef:94:76:aa:b7:
a8:0b:28:35:a4:5a:b5:d5:25:a8:2d:00:ec:02:53:
60:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:56:8D:E7:72:EE:94:B5:0E:24:93:28:F7:6F:A6:26:37:A9:8C:FA
X509v3 Authority Key Identifier:
keyid:15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/3laN53LulLUOJJMo92-mJjepjPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.226.0/23
Signature Algorithm: sha256WithRSAEncryption
64:a7:9c:63:ab:b3:f8:79:72:9d:0a:38:54:e7:2d:d1:08:a8:
a7:93:18:51:dc:fc:67:83:dc:1b:e3:c1:39:c5:67:28:5b:1d:
e5:aa:c2:61:4f:c5:c7:54:4f:c0:ae:28:c3:91:1f:df:30:3d:
61:39:99:8a:bd:4e:51:62:4e:bc:20:91:31:ca:b7:0a:26:ce:
37:f5:8e:62:95:af:9a:f7:df:6f:ca:50:09:a0:68:2b:7b:9d:
6b:99:c6:5f:a0:26:d3:16:f8:2c:b1:1a:80:f7:87:32:b7:b7:
a9:38:50:1b:df:ff:6f:a4:d6:ee:72:eb:27:04:d8:e0:9e:5d:
85:65:ba:12:59:27:09:a2:f5:88:16:f5:a9:cd:88:10:67:9b:
8a:91:ae:2d:c0:7e:f1:08:56:34:d6:c7:3a:ce:55:4a:53:f0:
3e:ad:ef:df:4b:9d:f0:25:68:d3:99:5e:95:14:ef:93:93:2b:
29:01:20:42:59:52:f5:d8:79:fd:bf:6c:e8:68:0f:72:4a:11:
f0:de:e6:4d:1e:c3:5a:51:d6:21:4b:a6:82:9c:55:61:c8:64:
a2:03:be:06:fb:76:b8:30:53:8d:78:a7:a3:16:45:b7:92:71:
c1:24:8c:94:2e:09:8f:3f:91:d7:69:65:8c:4f:a8:8e:9d:00:
bd:37:ab:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 11:00:55 2024 by rpki-client on console-ams.rpki-client.org