Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/nOXO6GGKmrGGUZ36lVx57T2qRZE.roa
File: nOXO6GGKmrGGUZ36lVx57T2qRZE.roa (raw, json)
Hash identifier: L4sAqRjXluJ1Q/dvncMgqfWkFzXTbuvlzWeBoeYtsi4=
Subject key identifier: 9C:E5:CE:E8:61:8A:9A:B1:86:51:9D:FA:95:5C:79:ED:3D:AA:45:91
Certificate issuer: /CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Certificate serial: 01856E140ED8439D0C1DB86E0FF2D6C1C9D2
Authority key identifier: 41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/nOXO6GGKmrGGUZ36lVx57T2qRZE.roa
Signing time: Sun 01 Jan 2023 16:04:46 +0000
ROA not before: Sun 01 Jan 2023 16:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58580
IP address blocks: 185.254.56.0/22 maxlen: 22
185.254.56.0/23 maxlen: 23
185.254.56.0/24 maxlen: 24
185.254.57.0/24 maxlen: 24
185.254.58.0/24 maxlen: 24
185.254.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:0e:d8:43:9d:0c:1d:b8:6e:0f:f2:d6:c1:c9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Validity
Not Before: Jan 1 16:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ce5cee8618a9ab186519dfa955c79ed3daa4591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:d4:3d:b9:97:1c:5b:42:7d:d3:71:70:67:
2a:bf:db:d3:02:06:3b:f3:ab:68:34:5e:dd:62:d8:
c6:ec:3c:37:63:e5:22:0a:b7:0e:b9:d7:bb:66:26:
b8:c9:92:34:ac:53:51:a2:33:44:e8:58:93:5e:82:
d8:0d:ba:0f:ba:bd:54:40:01:7a:3c:69:a6:e7:bc:
5b:54:77:e1:60:b3:79:09:3b:88:fd:35:2d:f3:6b:
6c:eb:d1:f2:6f:ab:60:ff:6b:6b:4d:60:5d:f4:1b:
e6:4e:28:b0:01:49:2f:b4:ca:69:e3:51:d8:9a:da:
b4:ef:89:3a:99:6c:d1:5c:2b:68:9b:6d:e2:20:71:
72:57:b2:f4:7f:89:33:52:4d:11:40:76:1a:c3:bc:
8d:30:08:26:97:eb:41:c0:27:61:58:a6:6d:bb:15:
82:6f:10:a1:70:b0:17:3e:d5:42:0e:5f:9e:ca:c7:
8b:fb:ce:ac:3d:6c:ff:33:2a:8b:c2:f0:ff:50:04:
bb:b2:b6:7d:b6:b8:e2:10:e3:a7:52:18:15:b1:b9:
24:9f:44:7f:cb:0a:e2:ff:c0:6a:64:6b:4e:3a:bf:
a6:1c:ce:eb:d7:cd:29:6f:7c:9f:95:66:91:93:c1:
5c:68:09:8d:44:74:03:e5:70:18:f4:d0:fc:e3:cc:
ea:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E5:CE:E8:61:8A:9A:B1:86:51:9D:FA:95:5C:79:ED:3D:AA:45:91
X509v3 Authority Key Identifier:
keyid:41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/nOXO6GGKmrGGUZ36lVx57T2qRZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.56.0/22
Signature Algorithm: sha256WithRSAEncryption
88:36:bc:b1:99:0c:9d:fc:94:c8:a9:20:c3:4b:9d:85:7e:07:
55:a6:13:68:88:d6:ff:f2:9d:6a:db:22:f4:ea:be:e8:aa:b1:
9c:60:08:72:93:28:bc:81:3d:c4:b1:06:e1:e6:d5:3b:ca:62:
23:3c:cb:83:03:e1:60:a9:fb:e8:45:de:c2:0a:96:3e:bf:76:
98:f1:84:80:07:5a:e5:7e:02:9b:19:19:0f:fa:a9:f2:8b:8f:
2d:fe:a0:42:69:ad:a0:58:d9:71:f9:94:28:30:f2:2a:ad:44:
40:de:30:1a:d1:47:7d:4b:a3:c5:da:9a:14:a2:38:1f:d2:21:
17:dc:7e:38:5c:45:56:c5:2e:d1:eb:82:e3:5c:9c:d9:86:eb:
26:85:2a:1c:b1:19:d9:08:1e:06:4a:85:1e:c4:ef:22:b1:95:
05:02:91:1f:38:3f:3e:e5:58:dc:de:f0:c7:41:4d:f5:96:3c:
18:2d:34:f6:c2:2c:06:b7:25:e7:5f:d8:64:38:96:87:99:c2:
77:0e:ac:d2:1c:23:5c:b4:0b:13:d2:7c:18:18:48:d5:23:7e:
41:e5:86:cc:12:66:e1:c0:8a:77:f3:f6:f9:18:8c:55:64:3a:
76:8c:26:37:a0:55:f4:55:3c:9d:0c:c3:d8:6f:37:96:ab:fd:
80:de:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:56 2024 by rpki-client on console-fra.rpki-client.org