Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/aLRkTgm494WCROOl0vjlVWBUoFQ.roa
File: aLRkTgm494WCROOl0vjlVWBUoFQ.roa (raw, json)
Hash identifier: 3B1e6L3zst0qU7yvFKv2V6a6I0dxXeuL5ppgVInS1ro=
Subject key identifier: 68:B4:64:4E:09:B8:F7:85:82:44:E3:A5:D2:F8:E5:55:60:54:A0:54
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01926B7090406E5C2A4137407C17DAE10D7E
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/aLRkTgm494WCROOl0vjlVWBUoFQ.roa
Signing time: Tue 08 Oct 2024 09:23:11 +0000
ROA not before: Tue 08 Oct 2024 09:23:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.220.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Dec 2024 21:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:70:90:40:6e:5c:2a:41:37:40:7c:17:da:e1:0d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Oct 8 09:23:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68b4644e09b8f7858244e3a5d2f8e5556054a054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:23:24:fd:d1:a1:a1:91:fe:e7:90:7a:1a:b4:
61:d8:54:d8:54:f4:d6:81:91:74:b8:77:e9:17:26:
e2:91:ed:c5:36:a2:aa:13:6d:f9:2e:25:b1:c0:fe:
59:4f:5c:18:44:32:91:91:5f:f2:dc:9e:78:5f:1e:
dc:53:31:a5:8b:3b:45:b6:34:67:b0:3f:c4:03:8e:
e6:9c:ae:dc:1a:de:9b:6e:e3:9e:5d:20:2d:53:7d:
5f:69:0f:64:33:25:a1:fa:a4:bb:0f:6c:c3:06:d6:
e2:9f:da:39:78:a6:82:d3:93:70:7b:31:82:1f:ec:
a9:c8:f9:d5:d7:a8:4c:4c:20:02:2a:8d:5a:09:f9:
ea:e8:b8:5f:fa:98:a2:a1:6c:29:e1:bd:08:81:23:
e2:4d:1e:d1:ed:c2:08:95:df:a9:c0:41:3f:82:a1:
f4:aa:23:2c:3f:0e:12:9e:d3:3e:b1:f5:db:c4:b7:
88:10:cc:d7:47:3d:e2:07:e4:27:4c:d7:b7:3c:4b:
99:2f:e0:f0:94:c9:ac:85:57:4a:3f:c7:03:48:e2:
1b:41:22:6c:ed:02:cf:59:37:d1:11:6c:16:69:2f:
9e:b5:d8:30:53:37:dd:06:f4:0a:5b:84:fd:a2:d2:
51:6d:81:3a:47:fe:c9:64:9a:a3:8d:98:6c:1f:2b:
6c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B4:64:4E:09:B8:F7:85:82:44:E3:A5:D2:F8:E5:55:60:54:A0:54
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/aLRkTgm494WCROOl0vjlVWBUoFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.146.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:ba:6a:d9:3b:f2:b6:bf:a0:b2:2c:2a:3b:8d:87:ae:54:ab:
c6:4f:63:49:8a:c0:c7:f3:ac:1b:7c:12:d7:56:96:81:98:51:
c7:ca:73:cf:b7:ff:8f:05:3a:cc:36:bc:0c:8e:85:e8:80:39:
fa:a1:0c:9c:e4:a4:bf:41:f5:3d:8a:00:20:47:ee:8c:b1:51:
bf:06:9d:0b:9f:94:7a:fb:19:42:06:c9:0b:35:79:ed:5f:06:
b2:b3:ba:ee:25:fd:e5:a0:d1:45:98:2c:ed:95:9e:77:2b:89:
25:c6:81:e4:b6:90:92:c5:b0:49:81:28:b8:20:02:d7:0a:3f:
10:eb:ca:53:db:ac:fb:52:65:a2:e2:fb:b3:68:1a:29:a7:53:
41:b8:93:ea:41:f0:74:26:a9:20:ba:c8:b9:76:94:ca:ef:ff:
9f:e5:17:75:15:81:fa:7e:e7:27:c3:89:8c:c1:1c:79:16:ce:
be:50:0e:f1:2e:b1:dd:6d:cc:e9:0f:b6:97:7a:0f:db:37:67:
a7:e4:69:78:1e:31:8f:0b:69:68:75:9c:a7:21:2c:6c:a8:44:
27:bd:88:f7:3a:ab:02:d9:0a:83:32:4c:d6:f7:11:e4:39:05:
5b:06:ef:12:37:00:f2:7d:fb:87:58:05:ae:49:4e:c3:83:de:
c3:45:e7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:28 2025 by rpki-client