Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/1rKHV26NoGRPEtPlKIVBWKWbtXo.roa
File: 1rKHV26NoGRPEtPlKIVBWKWbtXo.roa (raw, json)
Hash identifier: /bLIGqJb1Ei4DbH8u9iTWtHqIBM6DVrOkLIaKJ5bJHQ=
Subject key identifier: D6:B2:87:57:6E:8D:A0:64:4F:12:D3:E5:28:85:41:58:A5:9B:B5:7A
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 018997727433A8305F302E0D36A8C7EE7A6B
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/1rKHV26NoGRPEtPlKIVBWKWbtXo.roa
Signing time: Thu 27 Jul 2023 13:03:27 +0000
ROA not before: Thu 27 Jul 2023 13:03:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212335
IP address blocks: 185.255.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:72:74:33:a8:30:5f:30:2e:0d:36:a8:c7:ee:7a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jul 27 13:03:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6b287576e8da0644f12d3e528854158a59bb57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3f:6a:7c:2a:8e:68:e2:3d:b1:0b:e9:03:9d:
bb:5f:e4:e8:a6:3c:61:9b:fc:c9:37:44:85:90:92:
a8:15:0a:60:61:a6:30:ea:f3:7b:e0:2a:18:35:a6:
fd:66:69:66:5d:d7:9b:24:81:09:4d:85:6d:97:7d:
98:95:83:2d:14:3f:46:8a:1c:45:d2:59:cb:be:53:
f8:a0:29:b6:35:52:84:ab:cd:20:fe:92:c5:a6:cd:
ae:72:a4:c7:dc:de:8f:c4:c4:6d:33:5d:b6:87:28:
78:72:bc:d3:9b:90:98:9e:d4:01:97:4a:18:57:ca:
86:28:fc:09:32:06:dc:cb:8e:0f:03:25:69:4f:e3:
52:d6:ef:a9:2b:32:36:7c:4d:16:7d:a7:7a:ff:c8:
ba:05:08:bb:f7:81:67:ff:3b:b1:1c:36:4f:76:55:
a0:d8:33:e5:ce:4c:10:22:9e:59:ce:68:ae:d0:aa:
e6:fe:1a:a8:b2:b9:20:2f:98:88:5d:61:35:20:74:
47:0e:05:c0:d0:95:45:01:7a:f2:eb:be:8b:97:12:
c2:8b:e1:89:1d:da:7b:8f:d6:ab:3f:fc:87:0f:9b:
2e:87:81:61:41:33:21:b3:74:95:ac:dd:db:c8:ab:
13:e3:1e:e7:38:a2:77:62:6d:3e:bb:ec:98:d2:ef:
e0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B2:87:57:6E:8D:A0:64:4F:12:D3:E5:28:85:41:58:A5:9B:B5:7A
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/1rKHV26NoGRPEtPlKIVBWKWbtXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.197.0/24
Signature Algorithm: sha256WithRSAEncryption
09:4c:2c:1d:f0:81:6e:d4:ca:6c:01:fc:45:ac:ea:b4:31:a4:
5e:30:19:a0:be:8d:85:54:46:16:10:9b:26:f4:e7:35:6a:b6:
a9:9e:ce:06:a7:94:8a:3e:fd:04:52:03:4c:d2:3b:72:a6:25:
d6:9f:83:ed:3a:01:3a:f3:04:c0:aa:fd:8d:e4:7e:8b:2c:dd:
03:c6:1f:99:1d:76:c2:be:fd:a4:41:35:ea:8c:a1:70:32:6d:
4c:ac:a1:2b:7a:3f:51:21:9b:82:b3:9a:f0:be:eb:bf:c4:5f:
0e:97:ce:05:49:b7:11:5f:c1:79:18:ba:23:b8:35:49:fa:41:
8f:52:b5:9e:8d:f1:b7:27:c0:9c:4d:bd:a8:e2:e7:aa:ab:5a:
c7:76:c7:dd:3d:7e:ef:de:8a:b7:c0:92:7c:6f:1f:9a:44:e2:
e3:73:0a:18:40:44:4b:aa:ed:b9:c7:6d:f6:14:2d:b4:6b:a7:
70:76:d2:de:8e:cc:99:ee:a9:b0:b3:fc:72:ec:ae:a2:69:7a:
2a:2b:2f:e6:4b:85:d0:dd:26:d5:4c:c0:df:75:73:98:d1:bc:
e9:20:7b:e4:d9:4d:9b:76:54:26:5b:44:2b:50:8a:16:5a:65:
f6:cd:63:7c:cf:4d:1a:88:59:ae:0c:9a:19:8a:59:2f:e0:da:
40:25:5e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:58 2024 by rpki-client on console-ams.rpki-client.org