Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/2Hg2SnKXHaBmCpVbi6GS_Uh4P4E.roa
File: 2Hg2SnKXHaBmCpVbi6GS_Uh4P4E.roa (raw, json)
Hash identifier: f30cpj/hiO87jJH/Jb3K2wJ7BBxikBbQCDDxeQJ6MQE=
Subject key identifier: D8:78:36:4A:72:97:1D:A0:66:0A:95:5B:8B:A1:92:FD:48:78:3F:81
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 0185703045C875DA1088684A10228ABBE0E6
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/2Hg2SnKXHaBmCpVbi6GS_Uh4P4E.roa
Signing time: Mon 02 Jan 2023 01:54:49 +0000
ROA not before: Mon 02 Jan 2023 01:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51221
IP address blocks: 185.34.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:45:c8:75:da:10:88:68:4a:10:22:8a:bb:e0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Jan 2 01:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d878364a72971da0660a955b8ba192fd48783f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:99:a9:07:82:b1:37:cf:93:52:11:6b:5d:f2:
1f:42:e5:ae:14:b3:86:8d:56:49:d4:4f:05:6d:66:
70:d4:52:00:17:10:02:a9:f8:eb:74:46:ae:90:b4:
dd:65:55:73:25:e3:c6:56:46:07:8c:8f:52:d8:a0:
c5:b2:fa:db:d1:fa:71:a2:2e:db:d9:4a:d1:81:5b:
f1:75:c6:66:dd:ff:f8:6c:3c:40:0a:7f:12:91:f0:
31:3c:97:a2:3d:5e:23:e7:be:81:70:36:ac:20:74:
e0:86:4c:f2:e6:1e:53:82:00:c3:72:69:3c:b9:44:
d9:5b:44:91:e7:86:bb:bd:09:6a:2d:19:c4:ad:55:
c0:7b:f5:2d:38:ea:fa:d8:24:7a:33:47:db:96:28:
3b:03:cb:86:30:5d:2c:6a:d8:42:cc:7d:d3:3f:5f:
e4:36:df:31:15:a1:3f:cc:11:ea:ce:3c:e0:22:1d:
90:4c:e4:e6:51:84:ed:96:bf:0e:b3:a9:3a:4a:af:
36:32:da:10:e2:a3:47:ce:7c:74:ce:03:a9:98:a9:
95:fa:89:e6:12:ae:37:09:c3:97:b6:40:a0:9d:df:
63:08:65:93:c3:58:4a:e9:a9:25:aa:77:0b:a1:e7:
90:cf:31:9e:de:2f:b8:ce:a2:7e:13:d9:07:2c:ea:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:78:36:4A:72:97:1D:A0:66:0A:95:5B:8B:A1:92:FD:48:78:3F:81
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/2Hg2SnKXHaBmCpVbi6GS_Uh4P4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.164.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:95:b3:a7:6d:01:a7:9f:80:c7:91:e1:12:14:a3:18:a0:8a:
9f:00:d8:20:4b:61:6e:b0:29:bc:5f:fa:08:88:44:da:9c:5f:
83:4d:94:f5:fb:c4:3c:54:03:c0:77:2f:d0:07:8f:e6:76:56:
29:3b:b8:ef:57:61:78:37:bf:dc:d0:ad:ea:fc:b0:40:74:49:
2a:50:f0:54:03:04:f3:20:3c:33:64:4c:fb:87:67:8b:cc:30:
ae:84:44:f4:79:8c:7b:dd:e1:74:8f:c2:6c:00:18:a6:61:ea:
99:30:11:00:e6:db:f9:ff:5b:fb:ce:19:47:6f:da:9f:58:f6:
8e:dc:3b:5e:55:6d:61:1e:b1:c5:f4:27:1f:1b:2f:af:59:0c:
b0:6b:05:0c:24:c2:b1:ab:11:ac:7c:c8:14:a3:e9:ae:0f:f8:
d6:a1:77:4b:d2:d0:2e:9c:70:af:83:0e:01:0d:c0:84:e9:f8:
fb:81:bb:2d:fe:a6:33:4e:5d:f5:a3:58:cc:c1:13:2a:f6:76:
c2:3b:e0:27:f5:45:77:92:e5:0e:10:ab:6e:04:00:d6:17:dc:
d5:37:fc:be:0b:cf:f5:46:39:91:78:c8:26:32:e9:b5:40:95:
a8:6e:bf:bc:76:bd:a7:d1:f6:13:11:39:ae:1b:24:c8:85:6d:
41:76:65:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:03 2024 by rpki-client on console-fra.rpki-client.org