Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/041SalaIbllPy0r12lxLEFEj-mY.roa
File: 041SalaIbllPy0r12lxLEFEj-mY.roa (raw, json)
Hash identifier: RXc3PE4DLfo+qb91z8h5yO3NOXYjXIVLSrlGybKknfs=
Subject key identifier: D3:8D:52:6A:56:88:6E:59:4F:CB:4A:F5:DA:5C:4B:10:51:23:FA:66
Certificate issuer: /CN=a45ded68e2260321bca39e8465b49c25d58a56e6
Certificate serial: 0186C76420428642FD4B39432DC971CD8309
Authority key identifier: A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/041SalaIbllPy0r12lxLEFEj-mY.roa
Signing time: Thu 09 Mar 2023 17:21:13 +0000
ROA not before: Thu 09 Mar 2023 17:21:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206216
IP address blocks: 185.128.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c7:64:20:42:86:42:fd:4b:39:43:2d:c9:71:cd:83:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45ded68e2260321bca39e8465b49c25d58a56e6
Validity
Not Before: Mar 9 17:21:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d38d526a56886e594fcb4af5da5c4b105123fa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:98:ef:6d:10:a9:ad:e6:5a:52:f2:ad:dc:c2:
b2:9f:0c:65:28:4c:fe:99:c4:92:5f:15:02:2a:cc:
d6:23:fb:d0:f8:7a:12:32:df:1f:8d:1d:e9:06:4b:
3f:b0:45:11:c3:19:18:35:48:45:97:ac:43:a6:1f:
b8:88:ec:96:aa:34:db:5c:0c:07:ed:5a:a0:a1:7b:
7f:86:6a:ff:43:71:6c:a2:51:7c:37:78:92:73:78:
8f:1a:c5:91:ea:89:24:d4:3a:03:2e:5f:e1:ce:6f:
dc:4a:f5:ad:c0:fe:46:98:34:ac:88:14:9c:8d:86:
e5:9f:34:8d:63:f3:ca:c8:84:4f:2b:10:d0:70:7b:
f2:89:fb:c4:85:19:43:22:96:69:94:79:d2:dc:bd:
3e:5f:59:f9:51:36:a4:6f:39:08:d5:4f:ab:46:68:
5b:34:84:c2:9e:f1:ca:20:29:ff:0f:5c:41:9b:f3:
1a:3b:42:db:c1:7f:c4:25:83:73:bb:3d:b1:6f:45:
82:5d:1d:8d:70:d3:29:d2:b2:58:ab:19:b1:24:e8:
3e:df:2f:9d:ad:6a:78:9a:81:11:ad:c3:ea:87:65:
73:91:15:16:a2:1f:77:e6:d6:c0:b7:4a:3c:81:2a:
48:a8:63:fd:28:30:70:58:f3:df:dd:56:11:1e:5a:
93:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8D:52:6A:56:88:6E:59:4F:CB:4A:F5:DA:5C:4B:10:51:23:FA:66
X509v3 Authority Key Identifier:
keyid:A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/041SalaIbllPy0r12lxLEFEj-mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.227.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:ad:67:cc:35:7c:df:b1:1f:80:1e:68:c3:4f:36:70:51:de:
55:7f:49:b7:6b:7a:6e:a8:36:b0:5a:9c:89:c5:35:ae:a9:f9:
a5:6a:fb:41:86:82:74:29:f8:9f:26:f8:6f:05:4a:69:99:93:
0c:dd:f4:2e:e6:02:41:b2:aa:2c:b8:e1:bc:9c:90:84:33:10:
4f:b8:d9:c4:c7:97:f5:17:5c:cb:d1:44:ef:cb:fa:52:0c:c5:
43:26:c8:de:ab:3b:04:4e:66:46:fa:d0:94:ca:1d:ce:97:62:
70:2c:18:1b:8c:0e:14:b9:c7:99:61:05:4b:97:eb:28:b1:82:
89:bc:d4:31:04:0b:ea:26:a4:75:a1:f5:8e:bb:97:53:6f:82:
1c:5a:48:b7:a4:e3:bd:2d:f5:a8:66:72:cb:a7:a5:51:78:23:
24:d1:fd:c9:9e:be:b4:0c:7f:f8:e6:46:6b:34:a8:8f:d1:a5:
e4:22:da:74:41:e8:73:04:e6:18:93:b6:b3:fc:86:c4:e2:7b:
07:e1:be:4e:5c:42:7a:87:d6:ee:c2:74:3a:e4:4e:5a:9e:87:
b2:46:1f:76:c5:20:00:43:0c:76:8f:9e:c3:5e:41:09:4b:5c:
08:e2:fe:b5:66:0b:30:01:bb:3d:df:9b:1d:c6:37:62:66:fa:
37:cd:76:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:28 2024 by rpki-client on console-ams.rpki-client.org