Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/o3N8Tq_clTJQr0BiRK1PB0cS1rg.roa
File: o3N8Tq_clTJQr0BiRK1PB0cS1rg.roa (raw, json)
Hash identifier: yN0du12x86cSM+EAjfIg4K+MaxoA4EmQ2VQ9+SRsLfM=
Subject key identifier: A3:73:7C:4E:AF:DC:95:32:50:AF:40:62:44:AD:4F:07:47:12:D6:B8
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185CA883D4335039355732559E890863BC3
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/o3N8Tq_clTJQr0BiRK1PB0cS1rg.roa
Signing time: Thu 19 Jan 2023 14:56:44 +0000
ROA not before: Thu 19 Jan 2023 14:56:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211409
IP address blocks: 185.106.93.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jan 2023 13:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ca:88:3d:43:35:03:93:55:73:25:59:e8:90:86:3b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 19 14:56:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3737c4eafdc953250af406244ad4f074712d6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:ee:1e:d0:22:d5:35:6b:33:13:31:9c:fe:
8a:47:1b:61:4c:92:1e:4a:37:67:01:dc:3a:01:64:
a8:06:0b:02:00:ab:48:8a:28:a8:d3:72:23:c8:f8:
78:ae:6f:68:8a:62:52:4b:36:ac:41:34:52:0f:e4:
01:9a:99:69:e6:91:0b:4b:a7:fe:e1:4c:12:ad:9d:
e8:1f:f0:c9:de:0f:91:60:b8:17:3c:81:ee:30:89:
8d:c0:84:d7:9a:c9:a8:02:9a:5b:2b:5e:e4:f3:09:
a7:f0:fc:73:55:ab:72:e5:7e:73:03:4d:25:25:3f:
88:96:b4:f9:1a:38:11:a6:2b:e5:00:c1:a9:a4:db:
ed:09:8e:56:05:2f:f8:57:aa:71:1f:75:1a:77:e7:
5d:6d:89:d2:22:fe:9c:07:8d:29:21:7c:75:2b:09:
a0:0a:8b:cc:c3:a2:db:f7:29:cc:23:bf:03:0a:11:
4a:f5:d6:85:12:0d:33:ea:d1:15:fb:2d:13:b4:31:
d1:8d:a4:6e:2f:66:c1:c5:19:27:0f:c8:ae:97:75:
1b:ef:87:7c:8e:10:32:4f:03:b9:ba:9d:b3:84:d2:
af:34:c2:6e:7b:77:03:48:e8:ce:98:74:cf:80:c4:
db:74:38:22:71:8d:f0:45:3f:38:a5:8f:92:97:02:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:73:7C:4E:AF:DC:95:32:50:AF:40:62:44:AD:4F:07:47:12:D6:B8
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/o3N8Tq_clTJQr0BiRK1PB0cS1rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.93.0/24
185.125.228.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:55:dc:f6:15:85:a3:ec:4c:cb:66:ae:ff:91:25:d9:35:81:
9b:92:e0:3e:bd:96:8c:34:11:12:c6:a6:61:11:f2:86:00:77:
ca:7c:10:8b:8f:1a:51:50:7e:ce:a1:cc:f3:fc:89:8c:7a:50:
e7:20:41:bc:58:21:dd:97:cd:ab:2d:53:38:5d:1a:16:43:7d:
8f:aa:0c:82:68:32:11:25:64:fc:2f:27:05:1a:4a:c9:66:e9:
83:0e:b1:e0:cc:28:ac:dc:69:1f:91:c0:ff:8c:fb:31:62:de:
32:3d:12:5b:e6:cf:b1:8d:85:db:4a:cf:e9:8b:5c:b9:5f:55:
77:ef:74:e9:58:7a:14:6c:d1:8e:5a:1a:d6:65:98:70:59:75:
9f:1e:f1:75:56:9e:0e:40:19:a0:83:3b:36:75:1e:c0:cc:5e:
7f:50:27:90:94:10:80:e7:f5:f4:76:7b:df:b9:51:e8:56:87:
be:36:a3:f2:f3:74:bc:cd:27:49:59:e1:f8:28:62:74:88:a5:
24:d8:b6:f4:10:10:ce:c3:9e:1b:96:b6:82:cb:fd:af:16:6c:
ff:34:ea:8a:82:45:ea:15:ce:b7:27:8b:fa:20:0d:13:64:02:
c9:93:4c:3a:1b:4f:9f:52:aa:a6:b9:3a:f8:73:c9:48:6b:5c:
c3:b4:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org