Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/IPPuT4taZ-kjkbaIkai7c8KMCr0.roa
File: IPPuT4taZ-kjkbaIkai7c8KMCr0.roa (raw, json)
Hash identifier: 46QQCt9igu1AMtg26hVFfX1irwoizkmgudXkKdvmXqE=
Subject key identifier: 20:F3:EE:4F:8B:5A:67:E9:23:91:B6:88:91:A8:BB:73:C2:8C:0A:BD
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01856FF96FC300BC7F22115EE0305A93DBF9
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/IPPuT4taZ-kjkbaIkai7c8KMCr0.roa
Signing time: Mon 02 Jan 2023 00:54:56 +0000
ROA not before: Mon 02 Jan 2023 00:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49755
IP address blocks: 185.177.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:6f:c3:00:bc:7f:22:11:5e:e0:30:5a:93:db:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 2 00:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20f3ee4f8b5a67e92391b68891a8bb73c28c0abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:11:b2:84:c4:bc:8b:25:55:53:ce:93:ee:
92:37:23:8b:57:3b:09:af:fd:66:2d:e8:e5:67:35:
21:d3:c0:d8:40:be:25:10:75:4b:40:29:30:40:9f:
09:4f:2c:22:96:89:6a:5a:cc:d8:ba:60:fc:7b:6b:
c6:d0:6b:6a:11:31:3d:4e:87:6e:bd:65:e1:72:8c:
cc:10:40:41:08:41:36:f4:2e:93:e8:07:de:48:12:
5c:1e:c2:f2:c0:7f:8b:83:d8:b0:de:7a:09:b3:02:
f4:d9:10:ab:96:c0:04:2b:79:b0:6b:7f:94:26:86:
43:33:18:d4:02:46:88:08:76:35:9c:83:ee:7a:1e:
48:07:8f:aa:d3:da:91:3e:8e:a3:49:e9:92:8b:41:
c4:1c:d6:03:f7:62:f4:78:e3:31:76:a2:44:6c:ca:
c2:43:b8:1a:73:61:07:55:a3:8d:7b:6a:ab:94:5c:
ab:8b:f9:f1:c3:78:97:36:2d:29:7d:df:9d:52:35:
a7:b9:f8:74:20:f6:a8:0a:bd:71:30:14:ae:b7:51:
4b:9f:ad:89:0c:39:1f:e4:1a:68:e8:e7:b8:c0:cb:
56:c8:ec:dc:32:01:bf:55:d1:bb:b3:6c:87:0e:42:
70:a2:39:63:ae:86:90:bb:f3:65:3b:15:61:d7:7f:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F3:EE:4F:8B:5A:67:E9:23:91:B6:88:91:A8:BB:73:C2:8C:0A:BD
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/IPPuT4taZ-kjkbaIkai7c8KMCr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.112.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e1:bd:ac:f7:fa:d9:a8:65:46:ba:cd:d3:65:ca:3b:64:3f:
4b:6d:f0:a7:be:5c:c0:48:54:40:eb:30:9d:1f:98:e2:56:ec:
67:4f:08:6a:81:1c:d4:5a:36:01:b6:7f:4b:03:ea:2e:09:07:
e8:38:f0:0d:93:49:e3:bf:75:7b:eb:1a:07:d2:ca:cf:5c:33:
68:b9:12:0b:d5:cb:0e:a5:d2:55:52:b6:74:fb:bc:b1:4d:8c:
b3:fb:a1:6a:88:38:ee:3d:58:a6:18:92:bf:0c:87:63:0c:c3:
93:ba:33:b7:00:e5:3d:1f:de:15:b7:08:aa:b8:df:bd:d8:fb:
06:ca:a6:6b:bb:fb:59:03:50:e8:3c:a4:92:da:a0:cc:da:35:
8c:8e:5f:63:4c:4e:99:88:12:6b:6e:a6:39:40:27:45:87:5a:
65:e3:79:83:58:ed:82:2a:0a:7e:3e:29:dc:6f:32:21:21:46:
df:08:37:c0:d3:7c:ad:85:5d:ec:28:ee:4d:92:df:7c:a0:31:
1c:6d:9e:a2:bb:cb:34:8d:ee:7d:c8:05:55:55:4d:61:f1:3d:
32:e0:61:7f:d0:41:d3:c5:e9:c0:a1:fd:2c:8b:33:26:49:50:
9c:e0:31:39:ec:7d:58:b8:03:a5:f2:06:27:be:8e:33:8c:5c:
b3:64:9c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org