Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/3TPeewnPjpZ5QEGhxArMgEBqv1o.roa
File: 3TPeewnPjpZ5QEGhxArMgEBqv1o.roa (raw, json)
Hash identifier: FbB4MqfUXFXHpAg802/BgRG6QOgHLQaLakSKN3L+LAw=
Subject key identifier: DD:33:DE:7B:09:CF:8E:96:79:40:41:A1:C4:0A:CC:80:40:6A:BF:5A
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01856F66CDB87A72412FBE0F61A026841111
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/3TPeewnPjpZ5QEGhxArMgEBqv1o.roa
Signing time: Sun 01 Jan 2023 22:14:46 +0000
ROA not before: Sun 01 Jan 2023 22:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212896
IP address blocks: 185.255.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:cd:b8:7a:72:41:2f:be:0f:61:a0:26:84:11:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 1 22:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd33de7b09cf8e96794041a1c40acc80406abf5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:00:19:18:0b:c7:63:be:33:c9:fc:10:90:d2:
2e:ed:f5:e6:38:9b:43:59:92:66:67:9c:37:b2:c9:
90:cd:eb:a7:76:a5:0f:c8:47:e4:a4:a0:3b:27:d7:
9a:77:a3:dc:1f:61:65:1c:0d:f2:af:fe:2d:50:f0:
bb:42:f5:79:d3:03:53:17:53:19:0c:31:33:96:a9:
15:70:29:c0:37:f3:d6:96:5e:34:c3:83:d6:5f:26:
67:bd:87:72:c2:5a:88:55:42:36:8f:2b:18:38:de:
71:a1:7d:c4:80:e0:a7:6a:7e:a2:37:a3:c2:4b:8c:
f5:4f:c2:e1:90:b4:65:5b:4b:fc:04:fa:8f:15:0a:
16:13:7e:72:70:5f:b5:ac:2c:f4:18:12:56:23:21:
7f:b1:90:02:8d:8c:97:11:b8:73:a7:61:92:a6:db:
ad:3c:ab:57:97:cd:6f:59:d9:a7:da:31:c6:39:60:
ff:b7:f8:70:8f:ed:54:f4:50:65:4e:97:88:d8:ab:
f4:47:ce:88:c6:f9:c8:25:29:b7:9c:24:c7:9b:e4:
66:4c:b5:e9:fe:6e:bd:44:1e:b4:b6:bb:5d:7a:04:
66:b9:82:2d:91:1b:0e:45:b7:14:73:f6:e0:ce:c1:
d9:e9:0a:1c:2a:8c:d6:bb:0d:8f:d3:a5:a0:a5:69:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:33:DE:7B:09:CF:8E:96:79:40:41:A1:C4:0A:CC:80:40:6A:BF:5A
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/3TPeewnPjpZ5QEGhxArMgEBqv1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.199.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:c8:72:ca:b2:5c:61:7f:1e:ef:da:dd:b5:68:da:21:01:f8:
84:f1:28:b1:a8:04:58:bf:98:63:f8:1e:89:de:d2:76:0b:4b:
ed:51:ad:40:88:30:6c:a8:80:39:f4:c6:ec:a7:3f:55:60:45:
58:14:8b:11:74:2a:db:2e:0d:35:d3:3f:a4:b5:c5:d2:e0:a9:
ce:54:45:02:38:38:20:9e:21:fc:27:5c:28:e9:0c:71:f4:63:
f4:37:e2:51:78:d7:c7:d8:19:36:77:6d:62:81:1b:74:96:40:
d0:50:f3:a3:c7:9c:b4:5a:cb:60:d4:a5:ad:15:5f:01:a0:2f:
f5:b4:0a:21:27:46:18:6e:32:53:96:52:81:9b:da:4e:66:8b:
40:3e:59:14:f8:2e:c7:ec:97:06:d2:1d:6d:99:93:c1:8b:65:
e3:44:cf:26:b8:5b:d0:c0:b4:5b:04:21:80:d1:a6:bb:9b:ba:
4b:3c:2c:6a:63:9e:1f:8c:cd:28:3c:fe:35:ca:5c:c7:d9:c5:
09:79:4f:62:73:99:9d:c7:ca:ce:09:c8:cf:19:95:59:10:da:
c8:d5:4b:da:8c:da:60:77:e4:da:0a:8e:2e:4b:e7:59:4e:9d:
aa:33:82:53:f6:19:30:bc:b6:fd:87:c4:dc:ab:53:72:23:e2:
5b:fa:92:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:58 2024 by rpki-client on console-ams.rpki-client.org