Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/V9HndWK_jOVBe52MbPMJYyqbTF8.roa
File: V9HndWK_jOVBe52MbPMJYyqbTF8.roa (raw, json)
Hash identifier: e73dDrGHDNrtZCa5Us+8otPwe5epS7Urst3BhwBRz8c=
Subject key identifier: 57:D1:E7:75:62:BF:8C:E5:41:7B:9D:8C:6C:F3:09:63:2A:9B:4C:5F
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 0189D4912CD56BD9CE3361ABDCF4CD02D369
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/V9HndWK_jOVBe52MbPMJYyqbTF8.roa
Signing time: Tue 08 Aug 2023 09:53:51 +0000
ROA not before: Tue 08 Aug 2023 09:53:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.220.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Sep 2023 04:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:91:2c:d5:6b:d9:ce:33:61:ab:dc:f4:cd:02:d3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Aug 8 09:53:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57d1e77562bf8ce5417b9d8c6cf309632a9b4c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8e:4c:46:0d:6c:3b:e6:3e:63:40:50:48:ff:
8e:fe:58:97:83:3e:0f:65:8c:e3:8a:09:fc:55:33:
09:34:91:04:ee:90:03:3e:95:11:3d:87:e2:57:2e:
92:ad:a8:ca:91:98:89:a3:07:be:67:f8:3f:18:8c:
6d:ba:70:0b:8a:5b:0f:ee:71:ee:47:2f:23:6f:bd:
93:f8:c7:02:ef:58:93:86:b2:26:b2:2b:f4:f7:1b:
af:32:9b:6c:4e:1b:92:3e:e1:85:bd:6f:76:79:35:
e4:2c:84:6e:8b:f1:00:f8:0f:e7:5d:3a:7d:ae:71:
ed:e1:ef:96:c1:13:e2:43:d8:a1:9c:87:f1:10:02:
dc:ab:1b:9d:e1:15:f6:83:18:9a:dc:27:c0:98:81:
7b:aa:1b:0f:8f:b2:0d:43:a1:78:35:51:59:0a:53:
b8:25:9a:45:3c:c1:c7:1f:c6:d1:e7:ec:cd:2e:c3:
c6:7e:b0:69:24:9d:e9:db:10:f3:ee:ab:34:53:a3:
9a:92:eb:93:2c:d2:b1:10:50:65:92:a9:b9:11:94:
a8:49:f3:e8:df:ce:b1:11:57:6a:b6:78:a6:c4:a7:
76:fb:da:18:a2:e2:8c:30:34:0a:62:55:29:60:9a:
9b:33:bd:a5:67:bd:40:6d:23:93:45:e4:59:0b:d6:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D1:E7:75:62:BF:8C:E5:41:7B:9D:8C:6C:F3:09:63:2A:9B:4C:5F
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/V9HndWK_jOVBe52MbPMJYyqbTF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.146.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:8b:df:44:c6:74:68:19:3e:ff:24:9e:fc:42:6e:bb:96:6a:
04:b3:e5:20:ee:e6:50:c7:9e:24:78:1e:c2:ac:a8:86:dd:84:
55:40:a4:ab:27:b2:61:a2:bc:b0:6d:ac:7b:b1:cb:0b:17:29:
b3:1b:ab:37:94:61:1a:26:02:c2:50:6d:55:aa:3a:02:ba:ab:
25:c5:d9:9d:d4:d2:71:2f:c2:3c:e8:f3:52:3a:da:e1:0c:bd:
ef:df:e6:e4:cf:ab:59:91:c7:8e:3a:08:bc:1c:ae:e0:95:95:
87:78:8e:0d:49:89:80:a9:58:a4:c5:a6:59:22:50:93:17:72:
b3:47:39:24:3a:96:4e:2c:bd:1f:f2:e4:3c:d0:f6:4b:af:e1:
a0:6b:f2:f7:d3:7c:07:94:4c:8b:53:b6:bf:7f:06:d3:ef:f9:
5a:fb:22:24:e6:c4:6b:ec:b0:50:46:81:20:be:f3:be:b7:f0:
6e:d3:44:79:e9:80:e8:71:76:01:d5:6c:5b:75:f2:7c:d9:1b:
0e:72:e3:fe:ad:31:ec:cf:f5:3e:16:9c:80:c3:5e:f7:4b:a7:
0f:22:c1:a1:01:65:a7:8b:46:a5:7e:6c:33:97:2f:cc:e4:8e:
e1:bc:6a:ba:a6:a7:fb:28:1e:bf:e8:66:72:78:cf:28:73:0c:
60:62:d5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:56 2024 by rpki-client on console-fra.rpki-client.org