Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/90tDut2kLcFWZjXuCEfnxxIqEc4.roa
File: 90tDut2kLcFWZjXuCEfnxxIqEc4.roa (raw, json)
Hash identifier: qvRHQ40PHyqzJ//5eUv8vO5Hg1XLBEgLqdxAbUB2mC4=
Subject key identifier: F7:4B:43:BA:DD:A4:2D:C1:56:66:35:EE:08:47:E7:C7:12:2A:11:CE
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 018C872DAB61E30DC6977FB1C009AD116191
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/90tDut2kLcFWZjXuCEfnxxIqEc4.roa
Signing time: Wed 20 Dec 2023 12:22:46 +0000
ROA not before: Wed 20 Dec 2023 12:22:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32780
IP address blocks: 185.255.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:2d:ab:61:e3:0d:c6:97:7f:b1:c0:09:ad:11:61:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Dec 20 12:22:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f74b43badda42dc1566635ee0847e7c7122a11ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1e:23:2f:73:d2:40:8d:fb:e8:c3:50:7c:62:
74:b5:f2:b2:75:b3:b5:24:30:09:b8:d6:b9:07:89:
62:d5:b0:d9:8e:f6:51:92:5c:a2:47:71:ae:55:3b:
97:3f:e6:33:4b:6b:8b:cd:6c:48:5e:3f:c3:56:85:
4b:a8:af:86:ff:4a:40:36:61:4a:06:ed:63:ca:a5:
8e:b9:94:bd:6c:a2:cd:dc:96:fc:7d:36:85:03:5e:
6e:51:7f:a4:c2:00:6a:43:42:23:9d:66:48:90:10:
f5:36:d9:77:bd:b0:17:18:89:c5:95:00:f7:2f:f1:
db:e4:0d:ba:66:5f:88:4e:b8:42:d9:cc:9d:f9:c3:
85:37:39:d4:13:3f:27:e8:35:88:72:67:5c:c9:ac:
3b:e3:38:f8:4d:4a:a7:88:e9:7c:c4:a6:91:b0:cc:
d4:b1:36:f7:4a:52:45:ef:56:9a:fd:49:4c:53:32:
d4:ea:a5:c6:67:b0:81:f5:d7:52:73:56:17:a7:a8:
d0:ad:64:fc:6e:65:22:55:30:b6:19:f6:e6:0c:f7:
fc:09:80:e2:96:e4:7a:99:7b:fa:31:15:c0:9c:8d:
87:09:66:7f:85:99:cd:de:f2:67:ef:f6:ca:ce:b1:
c2:bf:7e:04:ec:22:ee:84:2a:35:6f:dd:49:77:b3:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4B:43:BA:DD:A4:2D:C1:56:66:35:EE:08:47:E7:C7:12:2A:11:CE
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/90tDut2kLcFWZjXuCEfnxxIqEc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.196.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:2c:1d:82:57:32:28:8e:97:16:73:2f:92:43:b3:dd:0e:82:
cc:ad:bc:88:2b:ab:dd:e6:79:2f:78:10:df:99:73:db:ae:a9:
6b:17:34:42:fb:0c:32:59:10:11:68:65:d6:8a:7a:4a:dc:4d:
05:7c:bd:22:71:0c:c2:77:4a:d5:3e:a8:eb:9a:67:0b:ac:86:
3c:47:4c:f0:ca:4e:56:ea:b0:06:1c:0a:b6:86:0b:ff:a1:06:
db:b8:14:2b:ce:2d:4f:fa:02:38:1b:c7:8f:8d:ce:9c:e2:ac:
76:03:22:88:92:45:02:c3:0a:fc:35:71:50:21:b4:f0:2a:a9:
d1:5e:4a:d4:d3:41:05:c6:ff:85:ce:bf:30:37:98:1e:6f:70:
51:ce:f5:a0:97:64:db:2a:97:40:44:58:38:d9:1a:98:d9:49:
13:41:cc:b9:73:90:46:ed:1a:e6:2e:fb:17:5e:bc:14:c9:db:
17:d7:fb:b1:0c:56:fe:74:d0:f2:15:f1:b2:5e:78:7a:b4:00:
62:50:ce:2f:57:99:92:c4:8e:59:ab:a8:57:62:28:20:3a:b9:
a2:5d:cc:fd:b0:77:57:43:19:f3:e9:97:d4:f1:ee:47:5a:f1:
02:86:28:6e:fb:ce:b4:e9:9b:92:1d:82:ac:2d:f9:44:39:36:
92:33:0a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:58 2024 by rpki-client on console-ams.rpki-client.org