Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/9l9v8Y0Ij30Ii7X1MbkXcfTnpJ8.roa
File: 9l9v8Y0Ij30Ii7X1MbkXcfTnpJ8.roa (raw, json)
Hash identifier: lkDywpetWwy7+NK2htdTvaVOcO8wkD/54OmjViXh31I=
Subject key identifier: F6:5F:6F:F1:8D:08:8F:7D:08:8B:B5:F5:31:B9:17:71:F4:E7:A4:9F
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 01856E2F7AB845E394D26A55582B3B75550E
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/9l9v8Y0Ij30Ii7X1MbkXcfTnpJ8.roa
Signing time: Sun 01 Jan 2023 16:34:43 +0000
ROA not before: Sun 01 Jan 2023 16:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20542
IP address blocks: 185.55.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:7a:b8:45:e3:94:d2:6a:55:58:2b:3b:75:55:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: Jan 1 16:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f65f6ff18d088f7d088bb5f531b91771f4e7a49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:36:45:63:3b:69:28:dc:a8:89:4a:b4:7c:66:
e8:a6:2c:d8:9d:0a:bd:e4:41:07:63:7f:8c:4d:41:
30:96:50:a9:58:ca:2c:56:c5:8d:e5:df:83:ea:19:
ee:ad:46:28:41:43:47:ec:b1:80:1a:51:32:16:e0:
23:a5:ef:b7:d5:f7:4a:27:e2:1e:1a:35:99:86:26:
5c:58:6b:88:1c:ee:7f:d6:72:14:11:2f:13:90:f2:
b0:74:b4:92:bd:69:4e:54:a8:53:0c:a4:f9:1b:38:
36:c9:47:37:37:85:93:92:14:f7:f4:88:f0:8e:a8:
30:c1:36:ab:42:73:89:0b:d9:26:29:4c:08:24:43:
cc:b1:d5:ff:31:d7:61:4d:a3:22:45:d9:4a:39:23:
1a:59:d3:27:24:1d:a5:ca:44:c6:b3:7c:60:92:2f:
0d:1c:c3:92:c2:b9:e9:c2:5b:95:23:44:28:25:4f:
19:a7:2c:88:37:90:bc:1c:9e:a1:a5:0b:bc:fc:cb:
02:af:55:38:42:a7:58:de:06:0e:23:41:86:9a:b5:
b1:ae:17:8a:7e:84:55:94:6c:48:01:22:96:b9:21:
e9:24:23:d1:e9:9f:ca:29:9d:96:90:67:54:af:ed:
9f:d9:3f:1e:73:38:06:06:dd:fd:fe:3c:34:e9:1c:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5F:6F:F1:8D:08:8F:7D:08:8B:B5:F5:31:B9:17:71:F4:E7:A4:9F
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/9l9v8Y0Ij30Ii7X1MbkXcfTnpJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.32.0/22
Signature Algorithm: sha256WithRSAEncryption
41:c3:2b:76:94:94:be:8a:ac:e9:1e:e8:37:81:12:df:fb:ef:
1e:a8:e6:65:42:bc:fd:24:28:9c:44:6d:f9:11:58:fe:29:89:
35:29:4d:b2:43:aa:77:44:e9:99:ad:3c:55:70:4d:b9:b5:04:
f9:70:94:8f:ed:ce:16:56:ff:2e:52:23:3a:0d:20:0b:ef:cf:
b1:61:51:fa:8e:56:8c:55:5b:90:58:c7:db:46:c3:b2:86:73:
63:01:b8:63:94:76:99:48:15:33:6f:9c:24:3b:34:00:c1:74:
3d:dd:25:66:8c:39:32:eb:4d:36:17:e5:a9:82:09:1d:f9:2d:
0f:08:68:ba:54:16:82:7c:88:7b:3b:4e:5f:97:a9:36:43:31:
55:c5:3e:8c:fe:b9:f1:25:0a:17:e6:5a:bd:d7:e7:df:f6:b6:
00:5a:5e:87:75:83:97:58:66:0a:70:a6:20:81:10:e5:ef:d2:
bb:df:e6:2a:c3:34:66:6b:d7:a2:ee:5e:f7:d6:6d:28:b8:03:
10:2b:36:c8:c6:00:82:bd:1e:b8:88:06:33:6e:0c:f1:cb:7d:
f7:b1:91:76:de:fb:61:21:5d:0d:9d:9b:c2:69:71:34:68:c3:
d8:1e:71:e0:e5:25:c6:f0:45:34:54:dd:e5:1f:8e:91:66:df:
96:38:ae:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:08 2024 by rpki-client on console-fra.rpki-client.org