Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/v2UsjvJn_dzO8B_d3MZKbF3Q1CQ.roa
File: v2UsjvJn_dzO8B_d3MZKbF3Q1CQ.roa (raw, json)
Hash identifier: HcltRNjfbcPudPD0W2HdYEq1R62GoJ+pd7YD1rRMdBk=
Subject key identifier: BF:65:2C:8E:F2:67:FD:DC:CE:F0:1F:DD:DC:C6:4A:6C:5D:D0:D4:24
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 0188598984724F2F4A0E799EAA655A4BE157
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/v2UsjvJn_dzO8B_d3MZKbF3Q1CQ.roa
Signing time: Fri 26 May 2023 19:29:24 +0000
ROA not before: Fri 26 May 2023 19:29:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206530
IP address blocks: 185.180.146.0/24 maxlen: 24
2a13:ab80::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:59:89:84:72:4f:2f:4a:0e:79:9e:aa:65:5a:4b:e1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: May 26 19:29:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf652c8ef267fddccef01fdddcc64a6c5dd0d424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:f4:7a:ee:97:05:38:7c:06:ed:6a:b6:bb:
7d:52:82:6e:26:1f:84:bf:dc:17:cb:89:e9:cf:2e:
4e:e4:ff:9c:f3:d8:6e:d8:d3:38:f2:86:05:9c:5d:
d4:96:25:1b:e2:ad:b0:91:dc:a9:46:0a:c6:8a:04:
e6:4a:84:ab:e6:b6:2b:10:71:f3:c7:02:eb:3f:01:
76:21:dd:25:e3:ad:5c:27:4e:ef:f8:98:ba:12:da:
5e:68:4c:5a:82:bd:73:6d:df:85:36:c3:07:b4:2d:
cc:d5:7a:d8:9e:dd:a6:03:98:09:eb:f5:31:26:01:
e4:cb:17:ec:eb:f2:20:9f:9f:8a:35:6e:46:2b:3f:
0a:27:c0:81:2f:16:f9:ad:5c:8a:a2:1c:f5:0c:0e:
25:f7:88:1f:b7:8c:c7:d4:ab:6d:d3:5e:6a:9a:ad:
c3:97:0e:62:9a:9c:10:2e:f4:c6:29:34:a2:e4:95:
d8:80:eb:36:2a:a0:78:b2:a3:5c:29:09:ff:85:11:
bd:27:7b:87:f1:82:1c:1c:3f:0f:05:71:06:b6:85:
89:bd:a5:11:96:76:d9:eb:0a:e5:a8:d1:ab:6a:84:
d8:58:9e:bf:0d:6b:b8:74:6f:bc:bf:2f:e2:87:60:
8c:92:a0:3e:ff:a8:6c:c5:95:43:25:6d:8c:0d:f2:
ba:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:65:2C:8E:F2:67:FD:DC:CE:F0:1F:DD:DC:C6:4A:6C:5D:D0:D4:24
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/v2UsjvJn_dzO8B_d3MZKbF3Q1CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.146.0/24
IPv6:
2a13:ab80::/32
Signature Algorithm: sha256WithRSAEncryption
8b:f6:d8:8d:31:bf:19:53:e4:35:e2:23:a3:b7:1c:40:69:ec:
dd:a9:05:94:a9:2c:4c:db:d0:62:3d:09:ff:31:3c:b5:3a:c6:
14:83:6d:84:9a:9c:e7:5f:0b:8c:b0:5b:fb:77:e0:c8:e6:49:
79:0b:a0:39:7d:53:42:c1:91:a0:59:70:5b:02:2b:af:61:ef:
c0:d5:3f:51:69:e9:11:7b:ab:68:0e:2e:ea:db:bb:97:69:7e:
2d:d9:12:f1:7e:08:b2:4e:1a:f4:07:7c:54:78:13:3c:e8:9d:
af:b5:bd:7a:ee:91:e3:c7:e0:c3:de:4d:a3:68:69:fd:9b:e4:
12:81:eb:8e:c3:93:45:b1:ae:56:dd:b1:83:e9:dd:4f:8e:cd:
55:27:c2:cd:4b:cd:c7:34:0b:92:1f:df:be:5f:f7:65:e0:48:
ac:93:a9:3c:06:a6:bf:fd:80:a3:1c:9b:9e:33:3b:e6:6f:b6:
25:f1:27:5a:bf:d8:e6:af:d0:68:03:ca:36:37:2d:68:b1:50:
d0:83:54:3a:90:aa:2e:4a:b2:57:fb:e8:26:fc:3e:ee:23:ae:
c5:b8:35:95:aa:a5:f3:95:be:f4:b8:0e:59:1e:92:90:f2:6b:
c3:08:e4:97:16:c1:54:e7:c0:91:b2:e3:86:30:ec:eb:b5:a0:
9e:9c:a7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:50 2024 by rpki-client on console-fra.rpki-client.org