Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/SBROlY-nCrg5rl7pnskc2wX_nqo.roa
File: SBROlY-nCrg5rl7pnskc2wX_nqo.roa (raw, json)
Hash identifier: jZyTwf2o+TxJB1MFuxeSJ744R4KvM8NqMkGv7dJO7NA=
Subject key identifier: 48:14:4E:95:8F:A7:0A:B8:39:AE:5E:E9:9E:C9:1C:DB:05:FF:9E:AA
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01888A96B291F3C40D2BFB42E3047795C085
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/SBROlY-nCrg5rl7pnskc2wX_nqo.roa
Signing time: Mon 05 Jun 2023 08:05:11 +0000
ROA not before: Mon 05 Jun 2023 08:05:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 147.185.162.0/24 maxlen: 24
195.14.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Jun 2023 06:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:96:b2:91:f3:c4:0d:2b:fb:42:e3:04:77:95:c0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jun 5 08:05:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48144e958fa70ab839ae5ee99ec91cdb05ff9eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d9:b1:6f:08:d0:b8:89:8b:48:72:be:9f:d9:
81:cd:29:f8:4e:49:1a:35:5d:2b:03:a6:18:83:15:
63:73:9a:db:5d:7d:3a:6d:9d:af:14:95:d2:eb:2d:
b7:62:e5:0d:cd:a7:4b:dd:b9:5d:3a:7c:a5:21:11:
19:4a:ce:df:64:13:3a:ff:5f:53:1a:bc:b5:0f:c0:
33:af:68:8f:3a:b3:fa:e4:06:10:77:00:57:80:82:
be:10:02:93:e7:a7:8b:4c:39:c1:80:2c:7a:82:43:
34:e2:4e:ec:7d:e7:cc:e6:72:e8:c3:1d:57:00:e6:
23:34:9f:5c:a2:df:07:df:3a:50:b5:65:f7:44:c0:
aa:f8:83:b3:ad:09:a6:44:bd:c8:45:e5:a3:a0:b2:
b9:1c:42:e5:5d:bf:3c:56:de:e2:e5:d6:c6:4f:00:
23:f9:a1:be:73:0f:f5:cb:52:e5:d7:d2:fc:7a:4e:
83:5d:e3:5b:64:db:e0:ca:91:c5:e3:70:7f:45:2e:
01:85:ce:d1:9d:1b:17:42:c0:ba:d8:97:e9:e8:49:
08:59:26:cb:14:52:06:31:24:1d:a1:ad:26:2e:c6:
78:0e:d8:3c:bb:40:31:43:6b:de:9c:c7:a2:24:1c:
ec:8c:37:8b:e3:1b:0d:a5:78:ba:62:c2:75:bc:65:
c6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:14:4E:95:8F:A7:0A:B8:39:AE:5E:E9:9E:C9:1C:DB:05:FF:9E:AA
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/SBROlY-nCrg5rl7pnskc2wX_nqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.162.0/24
195.14.105.0/24
Signature Algorithm: sha256WithRSAEncryption
69:dc:ed:dd:59:50:04:9a:fc:42:7a:4b:eb:50:7c:a4:33:38:
55:20:96:71:5d:7c:df:7a:94:0e:4f:5e:9f:41:2e:aa:46:b1:
a4:da:3c:73:dc:74:2b:76:59:3a:5c:41:63:bc:0a:a9:9e:2c:
a4:04:0f:db:b7:fa:09:27:dc:7f:f1:3b:84:cd:71:24:67:6d:
0d:c3:5b:f6:17:ed:04:c3:f9:ba:1b:d1:b1:b5:f0:be:82:09:
f9:d9:32:a2:e4:f8:a1:d8:d7:07:9f:4f:9a:86:12:67:1f:22:
bb:c2:9e:ad:77:f9:b0:63:58:84:e9:54:ef:8f:0a:b0:06:71:
6b:27:41:94:76:23:8b:66:2e:06:8c:05:cb:31:c0:20:12:9a:
be:3e:06:ea:f8:79:27:08:47:05:49:2f:1b:8b:93:1e:8d:f1:
95:f3:89:0f:bc:e4:b8:d8:cc:3b:72:46:d6:28:b5:b4:79:0e:
2f:3f:3c:ea:3d:4b:ed:52:56:28:0b:61:20:02:96:c5:88:45:
60:a4:63:dc:1f:7e:f7:9a:47:df:1c:75:9d:a2:82:0f:25:d0:
ec:13:c4:a2:5a:e4:cb:61:24:76:d4:2a:0e:4c:00:73:2a:b0:
0f:12:4f:fb:2d:80:2d:82:54:f6:73:ed:98:6c:75:8c:c0:5b:
75:cc:49:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:48 2024 by rpki-client on console-ams.rpki-client.org