Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/SNo-QcPbi_qIIiXzeDEAko6LiAY.roa
File: SNo-QcPbi_qIIiXzeDEAko6LiAY.roa (raw, json)
Hash identifier: TKjECKd6oq0K6Y5o8dPuPvFT6QmhKddjnnXl9g+i/4w=
Subject key identifier: 48:DA:3E:41:C3:DB:8B:FA:88:22:25:F3:78:31:00:92:8E:8B:88:06
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 018B8F6EF68F4F180B46DBA8BB9A0F347798
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/SNo-QcPbi_qIIiXzeDEAko6LiAY.roa
Signing time: Thu 02 Nov 2023 09:48:15 +0000
ROA not before: Thu 02 Nov 2023 09:48:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 185.226.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:6e:f6:8f:4f:18:0b:46:db:a8:bb:9a:0f:34:77:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Nov 2 09:48:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48da3e41c3db8bfa882225f3783100928e8b8806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ba:3f:ee:28:04:a0:99:26:54:b7:62:6e:a6:
bf:a5:e2:53:97:14:84:7c:5e:28:33:5e:aa:74:a6:
5e:2f:27:10:05:0f:81:d6:72:7a:23:13:1b:3c:dd:
f5:3d:11:2a:eb:67:c5:ee:2d:24:ab:42:50:bc:98:
a0:d5:57:41:05:72:89:47:66:a4:9c:f8:41:24:9e:
48:0e:dc:c2:af:04:c2:05:88:35:92:eb:67:4f:8d:
10:50:3b:1c:02:4c:09:09:37:39:72:17:6c:cc:a8:
c7:88:2b:c3:57:f6:a8:9e:7b:bf:07:78:c0:42:1d:
cf:85:b8:02:df:bc:c9:ce:9b:c9:fa:cc:78:07:7b:
ab:88:78:a4:cb:24:59:04:be:c8:fd:f0:17:d4:a5:
ce:bf:b8:29:c0:5f:f8:8a:01:45:b4:b3:0e:6f:b0:
2d:25:a6:7f:14:6b:f4:0e:5a:85:56:40:47:89:69:
3a:30:c8:5c:44:71:57:77:9b:91:7f:09:5c:b3:fb:
58:ff:8c:fa:ad:93:1b:f6:a8:7e:ad:45:d5:ac:07:
da:35:13:e4:36:10:5a:4f:75:39:b3:b8:69:5a:3b:
ac:5e:50:03:3f:59:c0:99:ab:c6:4e:1b:3e:be:89:
60:c2:ce:03:22:20:95:5e:00:bb:61:56:d5:0c:84:
b5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DA:3E:41:C3:DB:8B:FA:88:22:25:F3:78:31:00:92:8E:8B:88:06
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/SNo-QcPbi_qIIiXzeDEAko6LiAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.242.0/24
Signature Algorithm: sha256WithRSAEncryption
10:52:6e:ab:fd:cb:9c:ab:b3:15:41:6b:e9:bc:ad:bb:38:37:
f0:19:ac:6a:da:0b:02:f1:07:6a:40:68:28:bc:57:e9:be:24:
ae:8d:97:fe:12:64:a4:b9:9f:80:ec:13:cc:37:0d:ce:76:10:
4f:bb:50:84:7f:8f:52:a1:01:07:14:55:eb:c5:1d:f7:16:08:
ce:ce:34:66:7c:a7:10:a4:fd:8e:b5:4d:30:aa:8b:58:1c:b9:
54:ef:91:88:ec:f9:56:bf:d1:a1:27:3e:b2:0b:8d:93:9f:2b:
e0:28:43:ef:95:b9:21:de:f7:2f:25:22:50:9e:cd:e0:31:fb:
03:75:de:c5:25:e0:83:ff:7a:33:b3:3d:6d:00:2e:d4:de:af:
d3:b0:8f:d1:0f:64:23:72:f8:95:ba:6e:2f:9a:b4:b1:22:21:
71:94:53:24:64:38:95:c9:c9:a3:2e:05:f7:21:0c:ea:31:ae:
14:c1:da:3c:86:c1:dd:3e:58:0f:f5:bd:bd:e1:eb:91:ff:3a:
3a:dc:f0:33:e7:e8:c5:68:39:1c:38:c9:0e:34:42:64:79:9f:
59:cb:f0:4e:08:45:c3:1d:0c:73:b7:53:ba:98:86:57:bc:35:
28:25:73:90:0d:d7:8e:80:f4:52:5d:41:15:9a:11:ad:f7:65:
aa:cb:d7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:04 2024 by rpki-client on console-ams.rpki-client.org