Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/SSZVJnWTdZJySu2Zc-ul7AKWU58.roa
File: SSZVJnWTdZJySu2Zc-ul7AKWU58.roa (raw, json)
Hash identifier: gg+dHqBloviX9Im77dAdFdrU4tCNubaulyrA0DOoRWc=
Subject key identifier: 49:26:55:26:75:93:75:92:72:4A:ED:99:73:EB:A5:EC:02:96:53:9F
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 01856E942C929021146D70CEE11C21886373
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/SSZVJnWTdZJySu2Zc-ul7AKWU58.roa
Signing time: Sun 01 Jan 2023 18:24:42 +0000
ROA not before: Sun 01 Jan 2023 18:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 185.204.17.0/24 maxlen: 24
185.204.19.0/24 maxlen: 24
185.204.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Sep 2023 16:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:94:2c:92:90:21:14:6d:70:ce:e1:1c:21:88:63:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 1 18:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4926552675937592724aed9973eba5ec0296539f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:a5:b1:3f:ae:68:a9:36:24:7c:05:83:a2:
6c:97:a7:c4:fb:35:46:35:f9:df:0c:ba:84:3a:c1:
84:b8:a4:43:21:23:03:f1:92:50:73:4c:bf:ef:28:
16:ea:14:40:69:5d:6c:cb:f0:85:dd:5a:98:0e:fa:
6f:00:b5:a8:76:e8:73:85:c9:a7:2a:ac:3e:1b:82:
20:09:29:26:22:5b:5f:24:a3:57:bb:da:c3:b7:64:
75:9e:7f:69:c8:96:47:93:80:8d:30:df:77:44:ab:
ca:25:17:ea:84:be:05:a1:a5:e9:ac:f1:89:3d:39:
1e:0f:76:eb:96:f4:f7:d9:81:34:a1:1e:cd:cd:03:
82:06:85:34:0e:d8:30:43:f1:29:cb:56:a3:b7:5d:
2c:66:3c:24:34:f5:c6:af:5f:c3:86:6f:fa:a4:27:
49:28:2b:fd:e2:d2:95:b5:c3:9f:1a:05:61:8d:42:
4c:ca:b1:ee:aa:71:10:96:84:7b:06:d2:f9:ac:80:
46:e0:a4:04:d6:4b:5e:12:3e:28:f4:d3:9a:20:8a:
16:ec:30:7d:a2:63:f7:32:cf:65:61:ff:90:bf:9d:
b8:d1:69:1b:bc:5e:e3:55:50:b9:bb:c9:2a:f6:c1:
e7:e4:9b:47:1a:e2:da:52:62:15:05:7b:2d:95:ed:
ec:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:26:55:26:75:93:75:92:72:4A:ED:99:73:EB:A5:EC:02:96:53:9F
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/SSZVJnWTdZJySu2Zc-ul7AKWU58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.17.0-185.204.19.255
Signature Algorithm: sha256WithRSAEncryption
b7:dc:2c:a9:ce:1f:7c:5f:7e:1a:4c:b9:f5:88:d5:e4:55:19:
64:7c:32:76:5d:13:fc:21:de:a0:91:0f:32:88:8c:69:3e:0a:
8d:c4:db:5d:d5:22:58:b1:73:05:45:36:89:13:66:05:80:76:
07:e9:a8:e5:36:79:d2:74:0e:3b:3c:43:7d:e3:a1:3f:63:88:
f4:db:ba:1b:d8:61:dd:ba:e7:6f:8d:37:fc:1c:67:5f:e2:fa:
eb:48:4a:13:c8:17:b8:d2:95:a3:db:d8:cf:d9:f4:f7:a1:ad:
28:4a:5e:df:c4:aa:6f:77:fc:ae:a3:a8:57:75:25:e3:14:cc:
75:bf:3e:eb:92:b1:f1:07:67:7d:a7:d1:08:6d:60:45:4a:2b:
ac:f0:09:1e:d5:93:89:e6:03:f5:12:0f:06:7b:c5:cb:62:24:
b7:c6:ec:a2:8f:c0:ea:f7:29:5c:54:5e:f4:68:9e:10:ba:9c:
ef:4e:eb:0b:bb:71:18:20:d5:31:b3:34:2c:eb:b4:ad:71:c3:
4a:a7:94:aa:c6:6c:4f:ee:60:19:81:e9:9b:93:b3:b2:dd:51:
68:e3:34:79:70:60:a2:f7:7f:6b:7e:d6:07:c2:ff:80:7d:be:
d8:5e:9e:f6:3c:59:82:6d:fc:74:4a:6f:93:39:42:5a:fb:cd:
15:45:3d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:05 2024 by rpki-client on console-fra.rpki-client.org