Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/sCY5H9jynE6J3kn5amz7deNEjpU.roa
File: sCY5H9jynE6J3kn5amz7deNEjpU.roa (raw, json)
Hash identifier: NByBh6Ws/7nv/HtN+uy+8kD4Oas+k4+mbZ5vVyi8HLw=
Subject key identifier: B0:26:39:1F:D8:F2:9C:4E:89:DE:49:F9:6A:6C:FB:75:E3:44:8E:95
Certificate issuer: /CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
Certificate serial: 01856FDDE41718B8CBBCED0A37A116AB2A95
Authority key identifier: 52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/sCY5H9jynE6J3kn5amz7deNEjpU.roa
Signing time: Mon 02 Jan 2023 00:24:50 +0000
ROA not before: Mon 02 Jan 2023 00:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210352
IP address blocks: 185.143.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:e4:17:18:b8:cb:bc:ed:0a:37:a1:16:ab:2a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
Validity
Not Before: Jan 2 00:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b026391fd8f29c4e89de49f96a6cfb75e3448e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e9:ca:3a:73:96:88:e1:87:92:19:5c:f9:2d:
b6:a7:65:d6:0e:46:97:9a:7a:de:92:ee:60:c5:eb:
42:9c:bd:eb:e3:e1:94:6e:d6:b6:ea:ca:16:62:e3:
89:53:52:a3:20:09:87:fd:02:73:c1:f6:5e:e3:05:
48:76:a1:15:27:19:ae:e7:22:37:a2:b8:0a:f6:ea:
16:a0:b4:ba:42:2f:c2:a8:2e:7f:ef:18:ee:98:72:
d1:eb:cd:bd:d3:93:b9:c2:ce:65:57:ba:b2:1d:28:
3b:5e:79:38:17:72:67:4b:17:13:68:b0:29:f7:20:
4c:64:74:44:5b:1d:3e:8c:17:97:5c:78:92:2a:d1:
f6:17:24:14:44:10:29:07:7c:e7:1d:62:a4:da:77:
d7:f5:aa:dd:6e:ae:78:24:9c:f8:46:b7:4b:ac:75:
ee:7a:ab:49:4d:65:c3:b8:96:2b:2c:c6:cc:eb:96:
42:f3:23:54:dc:8e:89:cb:51:ad:3f:4a:fb:77:f9:
46:a3:e0:e6:9b:31:9d:ad:98:db:95:3a:8b:57:46:
06:96:13:21:37:3a:48:ba:e6:12:01:03:e3:b0:62:
ad:a2:77:a2:70:89:77:76:d7:d9:d4:70:a1:62:71:
32:d1:f0:3d:8a:71:77:0f:c7:79:cc:ed:0e:be:48:
40:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:26:39:1F:D8:F2:9C:4E:89:DE:49:F9:6A:6C:FB:75:E3:44:8E:95
X509v3 Authority Key Identifier:
keyid:52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/sCY5H9jynE6J3kn5amz7deNEjpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:5c:b9:93:83:49:08:ae:8e:46:08:17:48:e8:9e:9e:76:bc:
f9:5a:0a:c6:c8:53:ff:81:a7:c7:e5:46:ea:4d:95:f5:6b:72:
bb:f5:75:0b:77:0c:82:6e:7c:60:ea:91:d1:dc:80:9f:7e:76:
26:2d:87:7a:44:b5:0c:26:c5:40:73:c9:0c:ef:3a:2a:c3:e1:
6f:d6:1f:86:f8:60:ba:04:55:a8:ca:97:6e:9a:1c:99:31:d3:
2a:d5:f0:3d:fc:53:e9:88:8c:c7:54:4a:a9:89:ef:c0:ed:e2:
47:70:05:7b:82:de:09:a6:ae:2f:f7:71:16:a6:29:d3:9b:f8:
61:aa:00:30:e8:63:5b:e5:21:37:5c:00:a1:58:11:80:9d:50:
7c:99:24:00:a7:5a:2c:58:5c:b4:8d:a5:fe:7e:c3:48:a1:91:
a6:08:64:a2:70:61:88:be:aa:7b:33:25:fb:a5:0e:e4:14:3a:
40:fb:c4:90:20:02:78:a5:c9:71:db:c8:b8:f4:e6:a4:3d:6b:
3f:3a:f4:83:2e:53:bc:35:54:b4:db:d2:7c:1b:26:f2:5c:0b:
2a:9e:18:16:54:9f:9e:32:a3:0e:50:84:03:f9:66:37:ec:92:
03:ac:df:5b:64:81:f6:a9:18:e1:0c:56:d1:0e:c2:2d:3f:4d:
b2:1a:28:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:23 2024 by rpki-client on console-fra.rpki-client.org