Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/M41e4hlywFHEn27yuDfE3rR-dzs.roa
File: M41e4hlywFHEn27yuDfE3rR-dzs.roa (raw, json)
Hash identifier: Nrtbl8Besj8ijLybgEEb4RJjs+8kpoiyc+bc0Vzk4Kk=
Subject key identifier: 33:8D:5E:E2:19:72:C0:51:C4:9F:6E:F2:B8:37:C4:DE:B4:7E:77:3B
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 018C000D02024E97C0E19762AD413A721EA9
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/M41e4hlywFHEn27yuDfE3rR-dzs.roa
Signing time: Fri 24 Nov 2023 06:38:21 +0000
ROA not before: Fri 24 Nov 2023 06:38:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62816
IP address blocks: 185.255.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:00:0d:02:02:4e:97:c0:e1:97:62:ad:41:3a:72:1e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Nov 24 06:38:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=338d5ee21972c051c49f6ef2b837c4deb47e773b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0e:ab:f5:6f:ad:3c:96:40:1a:38:24:ac:13:
99:89:b9:29:5b:2d:dc:00:31:5d:1f:bb:f4:69:18:
dc:36:20:b0:59:15:1c:f4:f2:32:f0:40:d7:27:94:
d1:2f:c5:51:17:40:48:76:bf:62:43:e0:d0:37:16:
5b:85:58:fb:2b:b8:ab:a6:6b:a2:fb:c1:ed:89:55:
3d:bd:77:75:0a:16:0b:8c:b8:7a:84:53:12:ef:58:
2a:78:b4:8f:20:4e:fb:67:8d:9e:f9:72:03:81:c4:
aa:0e:4b:07:19:bb:8d:96:79:c0:c5:22:c5:fd:35:
af:75:a0:ef:9a:b4:d6:67:2a:4f:e3:90:74:35:f5:
72:4e:81:d0:c2:1c:9a:ec:90:a2:d2:f9:56:89:00:
84:e6:46:07:0e:9c:72:eb:a9:3e:b2:4d:23:e0:1d:
68:5d:f1:f5:1a:a4:c9:ec:f2:34:3f:93:1c:5e:26:
9e:ed:b7:ca:20:cc:ff:b9:ec:e7:89:7d:5d:83:48:
9d:2a:da:4e:27:f7:81:f8:a9:62:94:68:7e:af:06:
16:fa:36:e2:e6:9b:69:95:0c:e7:33:61:05:f4:16:
fc:31:f3:43:d4:0f:91:71:6e:43:79:f8:a3:f9:ab:
49:78:a7:7d:58:f7:d6:55:27:db:a0:ad:7b:10:74:
12:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8D:5E:E2:19:72:C0:51:C4:9F:6E:F2:B8:37:C4:DE:B4:7E:77:3B
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/M41e4hlywFHEn27yuDfE3rR-dzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.198.0/24
Signature Algorithm: sha256WithRSAEncryption
76:49:f3:b9:6a:8d:fa:8e:80:bb:53:9e:a6:9c:3b:ef:9d:5b:
2a:d2:08:27:86:67:e8:65:63:1d:ff:df:a4:3d:c5:68:4d:8a:
ec:dd:e7:68:bb:5f:4f:b5:e1:8f:21:48:76:a9:b0:41:37:9f:
78:a9:2b:7a:7b:79:c2:42:d2:8c:83:6e:8e:37:f5:fd:12:cd:
7e:92:79:85:10:92:23:03:d1:0d:aa:90:e1:e2:10:10:7e:ab:
01:a8:6c:07:66:48:1a:e8:c8:09:91:4f:1c:81:e7:fb:4a:2c:
1e:dc:da:d1:94:02:66:1e:73:7f:b1:f5:08:99:66:41:45:d9:
23:1f:ad:6d:d4:6d:f9:66:8b:ff:22:68:9d:5e:3a:73:c3:c2:
6b:17:7e:ba:c5:2d:a1:db:b1:eb:ec:55:e2:1e:b7:b2:38:6d:
f6:70:cd:a9:3f:c7:9e:5e:24:4a:57:f7:e7:82:07:d6:2b:7d:
a7:75:0c:6d:5b:b5:6c:eb:71:bb:4a:1b:9f:7d:71:2b:90:2d:
e3:8c:b2:16:02:6b:68:d8:9b:ca:5c:fa:5d:16:ba:af:0d:6e:
a4:9a:f0:63:89:62:03:d2:a9:de:d9:66:5b:0b:33:55:67:a1:
cc:d3:0d:09:83:d8:d5:93:10:2b:77:b1:f1:39:16:3b:ed:e5:
16:78:8b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:56 2024 by rpki-client on console-fra.rpki-client.org