Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/sNpKuCW9WSiTJwNVskuM76nduhU.roa
File: sNpKuCW9WSiTJwNVskuM76nduhU.roa (raw, json)
Hash identifier: 5B2hnSi3NTY1Rh0tU6XFKj3k9rh+dZBlkxSe68OfuOA=
Subject key identifier: B0:DA:4A:B8:25:BD:59:28:93:27:03:55:B2:4B:8C:EF:A9:DD:BA:15
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 01889C51E322BC29EC35A99AA4D7BF264FEA
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/sNpKuCW9WSiTJwNVskuM76nduhU.roa
Signing time: Thu 08 Jun 2023 18:43:12 +0000
ROA not before: Thu 08 Jun 2023 18:43:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27647
IP address blocks: 185.148.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9c:51:e3:22:bc:29:ec:35:a9:9a:a4:d7:bf:26:4f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: Jun 8 18:43:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0da4ab825bd592893270355b24b8cefa9ddba15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0f:61:88:69:c2:06:b4:8b:a2:c1:f7:ca:07:
0a:f4:75:03:68:a8:73:55:19:3c:41:62:28:97:1d:
73:f4:f0:23:40:44:51:8f:65:8d:a2:f5:f7:d7:1e:
16:06:f9:48:a4:32:3e:7a:c9:12:f8:e8:b2:57:7d:
eb:1f:2a:b6:00:46:7a:87:2e:a6:ed:ea:07:79:e8:
f0:c4:0b:0e:a9:7a:91:f3:c0:49:3a:79:0a:9c:26:
7a:08:30:97:5a:59:e2:75:14:3e:59:70:e8:43:e3:
7f:f1:74:03:3c:48:89:1b:df:21:50:69:b1:70:d5:
24:55:f6:00:a1:c9:5e:03:92:7c:36:b3:4a:1f:2f:
e3:bb:61:b1:2b:22:86:52:2c:3b:fc:57:80:4a:b7:
92:d4:87:e6:23:00:aa:68:17:83:93:5f:97:18:3a:
f0:f3:e3:cb:f0:eb:6f:56:19:91:d4:13:91:39:64:
02:61:c7:cf:74:c0:c5:e2:b4:f4:cc:83:d3:a1:82:
b5:95:5d:0d:a8:4c:91:85:93:04:98:08:9f:a9:75:
2e:8d:67:9d:1f:9a:5b:ab:de:ec:79:e3:f8:2a:fe:
eb:4a:20:4d:0b:0e:4d:e5:8c:a2:bc:aa:37:22:95:
e9:a6:aa:d4:ae:9f:01:38:43:84:65:c7:8d:23:90:
41:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DA:4A:B8:25:BD:59:28:93:27:03:55:B2:4B:8C:EF:A9:DD:BA:15
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/sNpKuCW9WSiTJwNVskuM76nduhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.180.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:c8:c4:91:a2:c4:8a:7d:ae:76:6f:59:eb:47:bd:8d:7a:7e:
c9:33:73:59:36:1f:b6:59:19:a3:ac:23:01:f3:7f:c8:f3:bf:
61:86:b7:53:50:58:e0:21:93:db:7a:03:1c:9a:69:c5:70:b6:
0d:1f:ec:79:6e:71:6f:66:ad:a6:43:99:b9:05:b7:92:e0:4b:
49:f5:c8:71:30:01:9f:d2:17:e0:c1:3c:e1:ed:60:04:72:25:
75:ac:9d:10:d3:c9:c9:b1:f4:a6:48:62:a4:43:67:31:c0:e3:
87:9d:7e:6b:08:6a:15:4a:cf:d7:05:2f:d1:c0:3c:c5:15:46:
08:6b:24:6d:b3:1d:bd:b2:ac:e6:cf:6a:79:c9:e8:a3:7a:54:
5e:91:1c:c9:30:ea:8c:e2:79:98:ac:1b:45:e8:99:a1:8c:31:
f5:68:93:a8:bb:d5:df:ad:d1:47:69:19:26:4e:6d:b3:ce:59:
5d:0c:5a:df:0a:83:e0:7a:4f:51:05:23:4e:3d:e5:8e:35:2a:
69:5b:10:27:57:c3:0c:32:1f:32:78:9c:30:00:b3:53:c6:6e:
44:70:d7:ec:f3:4f:02:b2:29:a3:ca:05:06:17:bd:a0:e5:e7:
7e:d4:6e:12:29:fe:bf:8d:02:b5:34:25:73:b7:ac:dc:c9:40:
ba:c1:ba:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:25 2024 by rpki-client on console-fra.rpki-client.org