Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/RKcGoHMAnTP2I6GFNVhTeDi9lNg.roa
File: RKcGoHMAnTP2I6GFNVhTeDi9lNg.roa (raw, json)
Hash identifier: j+cUo8GrcQpGiOQCqNkfJp8hbTpfH2JIDOExSYybBP0=
Subject key identifier: 44:A7:06:A0:73:00:9D:33:F6:23:A1:85:35:58:53:78:38:BD:94:D8
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01856F66CD0C5D95378B8B8A8C8077F3C882
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/RKcGoHMAnTP2I6GFNVhTeDi9lNg.roa
Signing time: Sun 01 Jan 2023 22:14:46 +0000
ROA not before: Sun 01 Jan 2023 22:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 185.220.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:cd:0c:5d:95:37:8b:8b:8a:8c:80:77:f3:c8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 1 22:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44a706a073009d33f623a1853558537838bd94d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:88:36:22:40:ac:f1:a3:40:66:57:79:e3:
43:3a:03:14:c3:0d:ac:69:8a:62:ec:ae:11:1b:dd:
34:5d:93:db:62:2a:2f:60:d7:2e:85:70:14:b6:fd:
7c:6e:0c:1d:65:c7:22:42:ba:8e:ce:9e:f9:8e:78:
f7:c2:24:95:11:14:e6:92:8e:da:57:73:ae:fe:10:
1f:64:bd:01:44:13:bc:7b:bc:92:e2:75:1e:b1:6f:
a0:1e:bd:ae:49:98:88:c6:3b:ba:14:03:cd:a4:30:
73:35:09:08:d3:67:d9:04:f8:2a:55:1f:cc:29:01:
da:01:0d:4c:83:8d:37:40:c9:1d:22:66:fc:b1:e3:
35:79:a2:fc:13:bb:ce:ce:a7:d0:03:2c:60:ec:e0:
de:a3:55:1f:3e:91:32:47:fc:24:84:b5:9f:ed:5b:
4c:d7:74:a5:e5:62:ac:07:2f:38:88:80:f5:99:a2:
7a:80:8c:21:dc:87:41:bc:cf:29:d8:08:f7:a2:8e:
03:a2:96:b7:1d:5d:91:94:e1:76:12:2e:28:4b:df:
d7:ec:0c:87:13:99:88:89:c0:7c:3a:4f:31:4c:b3:
0c:95:9b:51:f8:d5:cb:67:fa:3f:52:0a:0d:b1:38:
29:f4:dc:b2:f3:e1:6b:e0:f8:be:be:ce:c7:8b:b9:
5b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A7:06:A0:73:00:9D:33:F6:23:A1:85:35:58:53:78:38:BD:94:D8
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/RKcGoHMAnTP2I6GFNVhTeDi9lNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.147.0/24
Signature Algorithm: sha256WithRSAEncryption
50:cb:00:39:e8:3c:e7:44:5c:e5:a4:94:d6:de:94:e9:95:f8:
db:a8:62:c1:5c:dd:38:59:e4:b7:c3:51:ca:24:89:79:e6:d9:
a6:6e:6b:61:af:f8:57:17:ac:cc:0a:93:1b:6d:18:48:dd:49:
13:67:56:4e:25:19:37:84:21:f5:42:99:bb:89:24:dd:37:e5:
c1:11:c0:05:81:db:4b:86:8f:99:6b:5a:3d:ec:f9:37:b8:2c:
f4:57:34:5c:f0:1d:43:56:22:99:74:b9:df:0e:7f:ba:2b:3b:
af:1b:83:53:c6:3b:a4:fc:86:72:ab:6f:38:bf:a1:81:97:81:
32:f8:19:8e:ea:b1:d2:cf:1b:24:7f:0f:76:b8:63:35:22:3f:
64:9e:40:44:4b:b7:d4:e9:b5:e8:9e:2b:08:aa:d9:97:da:7c:
66:c0:5f:17:7e:c1:35:0d:8b:57:48:99:d4:67:e3:f8:66:c5:
48:11:72:f1:3d:75:9c:fd:86:38:44:f4:05:7d:37:9b:cc:d1:
35:b5:0e:74:f3:98:77:10:60:5c:af:d8:87:23:f8:54:55:37:
2f:a6:4f:7e:85:d0:c9:8f:cc:4f:34:c8:aa:70:37:28:47:14:
26:c7:8b:4b:9d:87:11:ad:c0:99:b1:2d:c2:8c:74:4a:98:3f:
4d:ab:54:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:58 2024 by rpki-client on console-ams.rpki-client.org