Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Vn3e1cDGsiHKnYF30jl8HEBEe-0.roa
File: Vn3e1cDGsiHKnYF30jl8HEBEe-0.roa (raw, json)
Hash identifier: uQ/+cy8PNONYayJafTiQUOp4DeNRaz71oZWs9LilhXM=
Subject key identifier: 56:7D:DE:D5:C0:C6:B2:21:CA:9D:81:77:D2:39:7C:1C:40:44:7B:ED
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018582DDF3A827C3485E27907A92C5458341
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Vn3e1cDGsiHKnYF30jl8HEBEe-0.roa
Signing time: Thu 05 Jan 2023 16:57:41 +0000
ROA not before: Thu 05 Jan 2023 16:57:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48940
IP address blocks: 185.128.106.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:dd:f3:a8:27:c3:48:5e:27:90:7a:92:c5:45:83:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 5 16:57:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=567dded5c0c6b221ca9d8177d2397c1c40447bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cc:8f:a6:d9:7c:09:d9:ea:ae:0e:f4:47:06:
91:47:4a:27:5c:16:d9:e7:03:e2:e4:f7:d6:63:a4:
f1:70:74:ee:5f:0d:6f:59:d3:1a:d6:ef:68:d2:d4:
c5:e2:54:a4:24:00:d1:0e:44:2c:5b:a4:3a:01:c9:
cd:7a:95:87:13:28:e8:6e:cc:3b:00:8d:38:6f:5c:
e5:7b:02:73:37:28:9c:cf:d4:17:6d:97:fd:2b:f4:
f5:f7:ff:09:e2:d0:ff:31:fc:66:1e:c1:c5:1c:e0:
c0:a3:cc:12:7b:d8:58:d7:84:4f:4f:41:5f:96:83:
bf:ce:7f:4d:ca:c2:25:cc:6b:23:a5:4c:ca:12:4b:
f9:5b:ee:5c:59:52:fa:b1:90:c6:24:08:fc:af:3a:
63:c4:56:da:53:2b:93:07:c7:da:ab:22:55:6e:9a:
c9:e0:b7:79:76:98:7d:8e:e0:1b:8a:c4:68:5b:09:
b4:a9:d5:98:e0:45:c8:d7:dc:79:a5:39:39:f0:80:
23:ec:d1:f1:a6:b6:c2:f5:01:48:d5:b1:d3:c2:63:
1f:7b:25:b8:1a:a8:e7:6b:70:9c:44:cd:80:b8:d1:
6d:99:89:34:06:c6:2d:ec:b0:0c:14:64:99:dc:0a:
a6:b9:65:7e:d1:e9:d2:fb:9f:84:3f:03:17:b6:eb:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7D:DE:D5:C0:C6:B2:21:CA:9D:81:77:D2:39:7C:1C:40:44:7B:ED
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Vn3e1cDGsiHKnYF30jl8HEBEe-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.106.0/23
Signature Algorithm: sha256WithRSAEncryption
39:df:06:74:ae:c7:32:9d:4c:f4:ca:62:be:36:41:01:11:14:
6a:66:df:47:a3:80:68:a8:f3:ac:a2:18:5d:e2:ec:83:fe:e0:
49:9b:0d:84:fc:64:03:f0:96:66:4e:d0:46:b8:28:78:5a:4e:
ed:ee:f5:7d:24:ec:a8:d9:fe:0b:a9:fe:2d:2f:0d:10:29:b3:
c9:83:2c:7b:64:41:16:12:ee:55:6c:09:c5:77:0e:bf:08:26:
cf:ee:52:f1:d6:cf:df:b4:1b:e9:ba:fe:b1:23:66:86:85:70:
83:a1:28:83:7d:5b:56:cd:0d:3d:3c:60:e8:41:37:65:65:80:
ec:11:da:a6:0f:2c:3a:f4:76:b0:3f:28:a5:b9:2b:5c:6c:ff:
60:3f:e5:6d:43:93:ee:b5:49:86:9f:e9:ba:2d:f7:52:13:44:
fb:e8:a5:af:1b:b2:34:90:43:3a:4d:dd:9e:95:99:ab:90:95:
20:85:43:38:6d:1f:ef:28:b8:8a:57:01:7a:8f:63:71:0c:2d:
3c:89:a2:dc:e0:52:6e:5b:c7:17:ab:3a:a4:eb:9e:f4:0b:87:
bf:8b:57:24:01:b6:90:14:33:1c:f9:10:99:82:68:36:2d:57:
a6:38:b2:63:76:0c:e7:74:90:ce:83:46:9c:0e:d2:8e:8b:40:
d0:1c:d3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org