Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/c-pT7mr2eROQ2M-nomIy8tbC2ag.roa
File: c-pT7mr2eROQ2M-nomIy8tbC2ag.roa (raw, json)
Hash identifier: SAKwYgFYHaM5E2mUCkeQ0ziB6ZkUMMsMWNYreVnq90M=
Subject key identifier: 73:EA:53:EE:6A:F6:79:13:90:D8:CF:A7:A2:62:32:F2:D6:C2:D9:A8
Certificate issuer: /CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Certificate serial: 018CF1AA534B1241BFF70E3671663B40C598
Authority key identifier: 5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/c-pT7mr2eROQ2M-nomIy8tbC2ag.roa
Signing time: Wed 10 Jan 2024 04:38:40 +0000
ROA not before: Wed 10 Jan 2024 04:38:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13335
IP address blocks: 185.23.228.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 10 Jan 2024 12:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f1:aa:53:4b:12:41:bf:f7:0e:36:71:66:3b:40:c5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Validity
Not Before: Jan 10 04:38:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73ea53ee6af6791390d8cfa7a26232f2d6c2d9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:1f:45:27:f8:11:64:9a:a8:c7:cc:1d:da:36:
50:49:bc:f1:25:a5:ca:1b:84:a5:6e:44:9c:d0:ef:
bd:6b:be:b2:75:b9:5b:14:57:23:82:29:13:c8:e1:
4e:8d:72:08:01:da:ad:a7:18:02:31:1a:7d:f5:5c:
87:be:b7:ed:d4:29:fb:cd:d2:74:74:91:3a:c3:d3:
9c:4d:a1:73:40:8a:3d:e5:a5:54:3e:00:ee:c3:d0:
28:eb:9f:6c:cc:4b:ed:6f:28:5c:02:06:d7:3f:51:
5a:ae:ec:1f:27:fb:24:bf:db:6d:1b:29:23:43:48:
42:10:18:d4:97:04:d9:5f:77:c0:84:5e:f3:43:c6:
fd:df:e9:c8:85:95:88:ee:35:11:93:e5:98:40:73:
ac:76:29:69:49:7e:98:cc:60:14:07:b2:3e:60:51:
42:47:a8:73:9a:a8:bf:77:07:50:b1:0e:ae:22:3e:
28:42:91:09:35:f0:ab:1c:f0:fe:a5:62:8a:ea:03:
51:46:f9:bd:aa:46:6f:95:ed:a8:b5:56:35:7a:ef:
7a:0c:e1:5f:44:ce:9a:2e:6f:b2:dc:f8:8a:99:aa:
d8:91:b9:f2:b7:74:0a:b7:2f:a6:c3:51:70:9f:0b:
04:fc:a3:d2:10:90:11:6b:ac:26:c8:41:24:48:cb:
a4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EA:53:EE:6A:F6:79:13:90:D8:CF:A7:A2:62:32:F2:D6:C2:D9:A8
X509v3 Authority Key Identifier:
keyid:5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/c-pT7mr2eROQ2M-nomIy8tbC2ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.228.0/23
Signature Algorithm: sha256WithRSAEncryption
00:b2:e8:fe:b7:c6:87:88:a8:53:43:9b:a4:2b:da:19:93:7c:
d3:e6:74:5a:d3:6e:d0:8d:c5:46:ae:be:12:30:9f:df:dd:f8:
84:83:83:f1:78:98:a2:a0:d7:f2:21:bb:d1:7b:07:4d:0e:d3:
8b:d5:bb:4a:69:1f:4f:7f:42:99:d7:c5:ba:82:3e:68:3a:1a:
af:bb:8d:34:c8:67:af:c3:49:2c:ea:8c:84:c0:b3:9d:be:b5:
e7:1d:29:59:99:c6:b2:79:6c:c5:41:6d:a9:39:b2:77:bd:8b:
23:a4:29:9f:76:42:dd:c3:8a:b0:a1:4d:12:ac:5f:4d:de:5c:
c5:1b:cc:8c:a5:ac:dc:00:9c:c8:f0:3c:e2:95:b5:f5:24:55:
0a:2e:d8:b8:6b:a6:09:65:af:b7:97:21:a5:18:e3:33:8c:55:
cf:29:ae:e1:9a:38:1e:86:29:f7:5d:9f:a8:31:65:af:59:63:
14:f9:5d:f1:e2:a8:39:30:b5:16:89:b2:cb:12:d9:28:d7:ca:
ba:54:87:10:b2:7d:f5:a5:37:83:42:e5:a3:ed:5a:3e:b0:83:
ee:dc:5b:ae:98:bf:4c:69:38:68:a6:58:a7:1b:47:b0:f0:bc:
72:4a:ca:15:53:68:86:d9:65:b5:d2:5e:8f:07:30:01:61:fc:
9d:06:29:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:08 2024 by rpki-client on console-ams.rpki-client.org