Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/dNbWT-Bo9IQN5tYzopuXkSBu_-o.roa
File: dNbWT-Bo9IQN5tYzopuXkSBu_-o.roa (raw, json)
Hash identifier: MC87+OmN3X+W6so0EhmccXT07xG2lvdHcVhifXNXaFo=
Subject key identifier: 74:D6:D6:4F:E0:68:F4:84:0D:E6:D6:33:A2:9B:97:91:20:6E:FF:EA
Certificate issuer: /CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Certificate serial: 018572FA67B7CB52D2D19D210BAAB383CABD
Authority key identifier: 3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/dNbWT-Bo9IQN5tYzopuXkSBu_-o.roa
Signing time: Mon 02 Jan 2023 14:54:51 +0000
ROA not before: Mon 02 Jan 2023 14:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201730
IP address blocks: 185.173.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:67:b7:cb:52:d2:d1:9d:21:0b:aa:b3:83:ca:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Validity
Not Before: Jan 2 14:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74d6d64fe068f4840de6d633a29b9791206effea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:b0:e9:25:ac:70:98:b5:69:0b:24:6d:d6:
37:f9:42:b5:3d:33:ce:45:23:f0:83:5b:d3:40:f2:
92:15:24:56:79:9d:35:c6:7b:2a:b4:47:dd:69:0b:
02:53:35:0d:f5:6e:36:e2:1b:51:9b:c2:6c:6d:00:
60:3e:e2:9b:65:74:41:8c:02:40:63:44:8e:37:03:
de:87:98:4f:ac:b9:f7:19:63:43:b4:54:00:94:8f:
a0:4f:d7:9f:d7:c6:7e:e5:3c:aa:61:e8:b1:7a:ac:
29:68:e0:9d:2f:a1:7e:3c:c3:f3:52:f5:09:4a:3c:
47:36:4d:e4:dc:b1:6c:65:35:ea:06:7f:a7:0a:ed:
3e:b7:bd:ea:1d:ae:a7:21:11:83:4a:49:d5:e1:3d:
21:31:0e:80:b8:d0:47:c2:3b:46:d9:a1:82:dd:09:
00:ad:6d:e1:8c:46:9a:96:bf:ec:60:61:9c:0d:64:
78:75:e1:9a:5f:37:e3:f6:2e:b4:c0:3c:c3:4f:2e:
1b:56:b4:86:3b:a5:08:35:b7:b7:9d:f7:8e:bb:a1:
10:49:f8:f5:da:c4:b6:f9:59:67:e4:a0:5f:1e:a5:
7f:72:a7:38:6a:a7:98:ab:2b:f8:7c:51:37:43:0b:
58:8a:af:e0:bf:7b:aa:b2:bb:92:d8:d1:6a:04:79:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D6:D6:4F:E0:68:F4:84:0D:E6:D6:33:A2:9B:97:91:20:6E:FF:EA
X509v3 Authority Key Identifier:
keyid:3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/dNbWT-Bo9IQN5tYzopuXkSBu_-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.148.0/22
Signature Algorithm: sha256WithRSAEncryption
57:ae:f0:ed:4a:68:b7:f5:e6:f5:22:57:1d:fd:95:c8:3f:d8:
79:c5:9f:38:37:1f:f7:73:9d:59:61:bd:89:b6:e7:00:7c:59:
6c:f0:4a:af:2f:82:c3:df:a7:08:a5:2b:dc:5b:35:66:e2:71:
e7:1c:13:0d:2d:e8:8e:41:e6:bd:62:61:f4:50:9f:a0:73:8e:
54:05:89:1c:65:15:f5:2d:1f:f3:7f:24:29:16:0b:15:ad:bf:
53:ed:2b:04:03:f3:fb:c3:c1:e5:7c:36:6b:70:bf:e0:2c:dc:
a0:f9:f6:65:59:3f:4c:c5:8f:6a:b5:59:63:94:fc:14:6a:8f:
64:11:4c:5d:12:f7:af:92:cd:81:fd:71:23:a0:a1:39:09:70:
99:66:42:af:30:12:ea:d0:62:c6:42:df:91:27:15:9e:8b:51:
d2:c3:93:20:a7:f8:b7:65:4f:05:cf:3d:90:0b:18:b7:71:ca:
51:01:39:c2:24:64:22:5a:81:31:36:77:82:7e:56:89:ce:69:
a0:98:68:fe:f8:32:5b:55:64:ca:8a:b1:28:72:00:ec:da:21:
66:5c:eb:61:f2:97:e3:5a:b4:f6:9c:96:9b:df:7f:0f:0f:f9:
a3:c5:8c:b5:70:f2:98:db:06:68:e0:b6:b9:9b:11:9e:eb:2f:
ac:57:a5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:36 2024 by rpki-client on console-ams.rpki-client.org