Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Rp01XaBv58MUR3oA9QdbRdbJbwI.roa
File: Rp01XaBv58MUR3oA9QdbRdbJbwI.roa (raw, json)
Hash identifier: 6PNSGzYg243kTVX5XKSWgnI4i9LN2yxOWvKSbFqMKhs=
Subject key identifier: 46:9D:35:5D:A0:6F:E7:C3:14:47:7A:00:F5:07:5B:45:D6:C9:6F:02
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737ABF799D58A6E7053CCCCE637C4753
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Rp01XaBv58MUR3oA9QdbRdbJbwI.roa
Signing time: Mon 02 Jan 2023 17:15:02 +0000
ROA not before: Mon 02 Jan 2023 17:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44188
IP address blocks: 185.165.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:bf:79:9d:58:a6:e7:05:3c:cc:ce:63:7c:47:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=469d355da06fe7c314477a00f5075b45d6c96f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:35:48:17:85:12:8d:88:48:92:9e:af:62:79:
34:d7:66:f4:4f:0a:60:4a:d2:be:52:c4:f1:d2:92:
8c:40:9e:1c:7e:4e:b2:77:ad:be:20:0c:09:23:71:
39:89:33:73:c1:cb:8d:d6:e0:ff:1c:85:3a:85:db:
00:c4:b2:07:4f:34:cb:7e:36:6c:d5:ca:0d:14:be:
48:a8:e0:5a:1f:61:99:ef:46:01:2c:84:b5:b2:fb:
2f:bf:ae:48:e7:43:e0:51:64:38:a1:35:62:bb:64:
a3:a2:2f:90:c2:84:3b:88:de:29:4c:d8:bf:ee:ab:
6c:c0:2a:bd:da:0c:fe:2c:35:1e:24:d3:3e:af:55:
d5:65:76:f5:a5:cf:2a:ad:a2:cd:cd:ba:d9:0b:20:
61:56:67:6d:2b:9c:41:85:a3:93:00:60:a0:b6:61:
49:65:fc:5a:0a:8e:0c:25:d4:e4:2d:9b:63:18:1c:
71:a8:41:30:2c:85:e5:9f:3d:fa:2a:51:83:d5:a8:
4a:bc:27:30:24:00:23:58:b5:cf:64:33:7a:3e:97:
42:d5:05:9a:73:31:a5:87:39:f6:8b:2e:a3:d6:9b:
44:b9:e9:2a:1c:b9:db:e1:79:d5:e8:a9:1f:21:96:
c2:0b:53:40:e5:20:eb:0f:44:02:f4:9a:29:98:1a:
5e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9D:35:5D:A0:6F:E7:C3:14:47:7A:00:F5:07:5B:45:D6:C9:6F:02
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Rp01XaBv58MUR3oA9QdbRdbJbwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.4.0/22
Signature Algorithm: sha256WithRSAEncryption
43:27:f8:c5:fa:ac:66:ce:9c:34:ee:63:51:27:d4:7b:8b:04:
1a:f9:c8:bb:8f:ad:aa:83:c4:51:63:96:bc:c0:44:ea:af:40:
eb:df:0c:b8:1b:cd:3c:9d:b7:e6:d6:6d:98:35:bf:31:5f:69:
59:78:dc:d8:64:39:73:51:0e:7a:dc:f6:0b:3d:d8:38:ef:b3:
44:f2:16:e1:43:02:6f:58:5b:b3:ed:5f:dd:bc:6c:b2:66:90:
51:3d:9c:b3:43:77:30:0a:bf:42:1b:c6:bc:83:19:35:d4:3f:
c9:c7:58:fa:61:27:5a:5e:d9:d9:5d:ec:29:38:44:55:e0:30:
26:f7:ca:89:8f:37:55:bf:dc:fd:10:5e:5a:3d:eb:76:c2:7e:
3d:0c:31:6a:68:d8:3c:64:e2:41:fc:29:fb:75:2b:f0:52:2f:
ef:30:eb:ef:58:b3:c7:dc:72:72:7a:8d:f2:f7:89:85:24:2b:
9b:a6:a9:13:b1:8d:7c:c6:83:12:18:b7:75:66:56:39:4c:b3:
59:85:b2:d6:59:88:63:48:b1:0b:2a:c7:42:45:89:c4:eb:3f:
49:d2:17:a2:49:e4:e0:6e:c3:c4:1e:30:83:12:2c:04:cf:42:
fd:c4:39:b6:5a:28:43:07:02:02:09:bb:a8:5e:4c:55:1d:29:
92:ca:1a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org