Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/nuiAnZFwfWsjBExEy7c620prZLw.roa
File: nuiAnZFwfWsjBExEy7c620prZLw.roa (raw, json)
Hash identifier: SZZ6G8XOzFlk4MsOS/wFM3DW995HwiDLZKRbDNFINrE=
Subject key identifier: 9E:E8:80:9D:91:70:7D:6B:23:04:4C:44:CB:B7:3A:DB:4A:6B:64:BC
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 0190D4A67D1C6921A5AA24B303DF68B7D46B
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/nuiAnZFwfWsjBExEy7c620prZLw.roa
Signing time: Sun 21 Jul 2024 09:36:38 +0000
ROA not before: Sun 21 Jul 2024 09:36:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.220.146.0/23 maxlen: 24
185.255.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 08:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d4:a6:7d:1c:69:21:a5:aa:24:b3:03:df:68:b7:d4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jul 21 09:36:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ee8809d91707d6b23044c44cbb73adb4a6b64bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f3:5a:1b:35:56:c3:16:90:40:d3:61:f1:c3:
4c:2c:35:95:a8:4d:d6:69:fd:fb:18:76:3b:63:6e:
65:c8:7f:cf:b2:77:79:95:bd:ba:b8:4f:00:10:9e:
e0:8c:cd:cc:13:79:f4:be:23:a8:cf:63:42:b5:17:
5a:fc:84:a0:4f:bf:0b:00:f2:5b:a3:02:4a:0f:46:
00:e4:73:2f:d7:b8:b2:f6:3b:2c:d3:16:78:31:e3:
49:56:6f:c8:e5:80:3e:56:a6:35:c6:01:ac:c7:0c:
1d:83:1b:cd:e0:21:6e:86:01:79:d7:1f:7e:8e:cf:
83:94:59:c2:d6:2d:46:c8:3f:eb:2f:e7:79:97:56:
bf:3f:14:2f:d8:29:4f:ce:06:12:6b:41:b4:5b:bd:
da:42:61:7a:e5:09:5e:86:b3:7c:b6:23:74:e1:12:
ab:fb:a6:57:42:45:64:b2:ed:22:96:cd:ee:e2:a6:
58:9e:ce:b7:8a:ff:ce:9d:78:00:9e:42:58:12:a8:
24:7b:a8:7d:07:bc:88:a8:93:d8:4c:3b:70:89:f3:
45:ed:28:5b:5f:47:1b:ed:39:88:63:82:4f:3e:60:
cc:b9:ce:7a:68:56:53:9f:c4:32:92:2e:33:eb:0c:
5c:4a:94:cf:f5:22:5f:f5:e3:bb:bb:b0:f7:2a:1a:
d6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E8:80:9D:91:70:7D:6B:23:04:4C:44:CB:B7:3A:DB:4A:6B:64:BC
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/nuiAnZFwfWsjBExEy7c620prZLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.146.0/23
185.255.196.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:84:ac:0b:b1:45:b9:f2:00:fb:a3:86:aa:da:4f:4c:b7:3c:
ef:fd:3f:f1:11:a8:6e:a9:51:15:30:83:b8:6e:90:53:83:57:
c9:36:94:cc:3f:79:08:55:79:8a:56:dd:2b:c4:8e:82:c1:5b:
1b:38:a7:20:76:a2:e5:a6:6b:19:84:44:89:c3:00:a5:d3:21:
f7:b6:ab:4a:13:fc:95:4a:e2:4b:ea:e1:9a:75:09:43:e5:64:
79:a7:c0:25:da:fa:83:f9:96:cd:82:6b:5c:15:c2:43:f9:0b:
38:8d:6c:90:0c:08:3e:97:8b:52:df:bf:c2:c0:8e:b1:fe:c2:
f8:27:f1:80:f1:dc:fe:4f:0d:ed:21:06:80:f9:3d:01:43:35:
97:59:a7:2f:b9:3a:c8:35:cc:24:2d:6f:87:ca:42:b3:8a:02:
7c:38:f2:35:ce:d9:13:f7:d1:22:d3:b9:8b:82:4a:14:82:9e:
5e:a8:d8:fb:e4:0b:a0:5d:96:c6:91:7a:70:8e:39:09:d6:9e:
af:33:96:8e:d4:c3:04:30:b9:2e:d1:41:0c:ca:84:7a:f4:02:
27:5c:76:52:96:a4:8f:ff:b0:ca:d7:e2:24:20:49:32:de:a5:
41:6c:54:50:ae:e1:94:34:47:8f:fe:d5:00:09:ab:f5:d4:77:
96:ee:ff:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 11:14:31 2024 by rpki-client on console-ams.rpki-client.org