Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/01Sjp0oo65_zDCsH0CezkLIXwmI.roa
File: 01Sjp0oo65_zDCsH0CezkLIXwmI.roa (raw, json)
Hash identifier: PPdu/080uX+8Sk5/5kNi02CTacrgrGt3VDEH82PLCo0=
Subject key identifier: D3:54:A3:A7:4A:28:EB:9F:F3:0C:2B:07:D0:27:B3:90:B2:17:C2:62
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C1E82AE32D23F57F726CE849C6C18
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/01Sjp0oo65_zDCsH0CezkLIXwmI.roa
Signing time: Mon 02 Jan 2023 05:54:57 +0000
ROA not before: Mon 02 Jan 2023 05:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43590
IP address blocks: 185.128.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:1e:82:ae:32:d2:3f:57:f7:26:ce:84:9c:6c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d354a3a74a28eb9ff30c2b07d027b390b217c262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:02:76:d6:2f:71:07:a1:e3:f0:46:40:b9:
dd:97:c3:10:1b:da:5d:43:02:b3:4c:2f:71:e6:85:
45:e9:58:02:cc:0d:56:f2:b4:e4:54:d2:b3:52:41:
fb:53:21:ac:07:0f:df:66:00:77:3d:7d:2e:f4:10:
da:78:d2:91:20:3f:49:83:65:c1:8f:e5:76:25:e8:
db:15:95:60:47:c7:1c:7d:91:81:8e:d7:c0:b9:13:
23:35:09:2f:8e:a3:ac:35:06:25:ea:eb:bc:46:3e:
72:05:76:02:ce:0d:5c:04:3b:17:f8:33:32:2d:9e:
35:12:d2:37:d7:74:e3:a5:b4:53:08:5e:4f:1b:80:
8c:81:e6:11:44:82:4c:93:8b:be:08:f6:78:5e:d8:
e8:a9:46:84:82:cf:c6:61:9f:85:8a:c3:99:0d:9e:
b0:24:53:d5:ed:e5:f6:ca:27:d6:d7:df:80:94:aa:
bc:48:0d:b2:70:0d:27:44:be:cf:f5:6a:0b:5c:0f:
8e:dc:16:09:21:47:c2:81:e8:69:91:a5:a3:70:ae:
84:c7:ca:9c:af:49:3b:67:83:8d:4e:5c:af:cf:a4:
dc:a2:5a:f8:ac:ff:84:fe:28:26:49:51:dd:b2:65:
e7:e4:4b:6e:57:c2:89:72:dc:e9:2e:0c:dd:25:a9:
a4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:54:A3:A7:4A:28:EB:9F:F3:0C:2B:07:D0:27:B3:90:B2:17:C2:62
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/01Sjp0oo65_zDCsH0CezkLIXwmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.105.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f5:c4:bb:e1:29:81:0c:2d:dc:09:ed:50:0f:19:2b:8f:4b:
53:97:07:e2:c3:aa:52:43:77:64:a8:fb:4f:3a:ff:37:4d:d9:
4a:ad:da:38:22:30:1d:a7:c0:8f:6d:2e:f0:ef:23:3b:f5:2c:
bf:32:dc:56:a7:1b:91:5b:29:af:f8:4b:53:f6:51:a0:2b:00:
b6:85:52:57:eb:a3:3c:c2:86:90:9e:a1:4a:d0:b6:3f:9e:90:
33:87:75:0e:df:e0:32:47:aa:a9:ea:2d:69:ab:d5:0c:43:ee:
a2:20:3f:3b:5c:d2:a5:9a:44:bc:82:e2:10:ac:55:13:3c:07:
88:ee:c3:bf:00:86:3b:f4:46:20:f7:28:7d:9c:b8:98:72:d8:
c5:d4:97:d1:e0:7d:70:f6:fc:a2:a0:16:99:50:8d:c7:16:ea:
29:95:0e:ff:5a:f8:81:9d:ed:24:41:91:a4:4d:f4:94:17:17:
ad:1e:4a:5a:1f:b9:31:4b:0d:62:94:85:a7:07:9f:30:09:34:
8e:01:dd:bf:f1:bc:da:0e:91:6a:0f:1a:1c:92:b4:34:22:eb:
8d:93:b7:4f:c6:71:68:ca:7f:93:ca:01:60:ab:04:b5:5a:78:
12:e1:ae:c7:62:68:7a:8b:ed:f1:30:37:f2:4c:fc:ce:4a:2b:
45:71:55:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org