Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/pbNPrTXk4wOev4GE_Nz6xr0SEmo.roa
File: pbNPrTXk4wOev4GE_Nz6xr0SEmo.roa (raw, json)
Hash identifier: NWIljZZcTGnFjeKT2JDwY1K5RFXqCe1MffTBfh6gii8=
Subject key identifier: A5:B3:4F:AD:35:E4:E3:03:9E:BF:81:84:FC:DC:FA:C6:BD:12:12:6A
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 01856F7971616C1FB16517E250C8F0E5C4B6
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/pbNPrTXk4wOev4GE_Nz6xr0SEmo.roa
Signing time: Sun 01 Jan 2023 22:35:07 +0000
ROA not before: Sun 01 Jan 2023 22:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15924
IP address blocks: 185.205.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:71:61:6c:1f:b1:65:17:e2:50:c8:f0:e5:c4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jan 1 22:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5b34fad35e4e3039ebf8184fcdcfac6bd12126a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:48:b8:76:95:d2:e3:de:94:b5:e0:7a:bb:
ac:fc:a9:f7:70:b5:52:44:1f:0d:9e:1e:a1:1c:9f:
fd:67:97:75:8d:fd:fa:c9:0c:0d:f8:d2:75:5b:85:
b3:ee:fd:b3:03:f2:7e:79:d1:c3:d1:ba:03:6c:a4:
10:b8:11:81:64:12:ad:7e:bc:59:3f:ce:31:5f:bc:
0f:38:17:2c:55:d0:4c:59:ec:71:3c:5e:b6:89:64:
1e:93:40:38:b0:33:21:45:4f:06:7b:d7:f5:f0:40:
fd:2e:08:67:be:59:70:b0:ee:85:0c:4b:a7:39:c1:
6e:28:f1:54:d1:64:c3:62:91:38:87:84:2d:84:e9:
d5:88:93:b8:aa:f3:ed:3a:61:18:f3:69:24:2e:a8:
2c:0f:fc:bb:09:33:52:99:95:ea:b2:82:d8:bd:38:
c5:0b:a5:51:5d:53:e6:c6:83:df:bf:14:86:85:32:
66:52:7c:b7:f0:23:44:16:e1:53:ad:3b:5d:f6:a1:
7e:20:8f:16:c3:43:ab:2f:4c:8e:01:21:5f:8a:8d:
b7:d0:18:8a:4b:33:b2:27:cd:ec:0d:f6:fa:ec:d2:
da:78:42:83:84:f4:af:22:00:19:0e:4c:9a:98:55:
56:ef:61:27:2b:ba:17:e0:59:71:de:ac:f4:e3:69:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B3:4F:AD:35:E4:E3:03:9E:BF:81:84:FC:DC:FA:C6:BD:12:12:6A
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/pbNPrTXk4wOev4GE_Nz6xr0SEmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.17.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ff:7d:ef:5d:2c:9d:56:93:8d:f7:bf:2f:74:d1:11:e1:f9:
bc:f8:6f:f3:04:91:93:a1:a4:ea:7f:de:73:91:20:d2:aa:11:
9a:87:85:22:c6:df:14:ed:81:d9:28:79:59:6f:7b:b8:da:08:
c3:17:65:3a:74:47:14:19:b4:d7:92:45:c9:f3:0a:2c:06:92:
1c:a6:24:6f:3c:05:23:2f:6c:cd:05:3b:ce:c5:21:49:3d:0e:
78:f8:07:d7:ca:85:5d:0b:47:d7:df:86:72:00:1f:9e:de:d7:
db:74:21:e4:b7:ae:9d:8c:93:e1:f6:df:da:7f:24:15:4f:54:
53:ac:d4:fe:53:51:bb:4b:97:aa:69:d9:12:94:cc:8b:28:25:
90:d1:95:59:0a:78:b2:2b:74:e4:98:13:cb:4e:23:56:37:95:
43:96:36:26:ad:15:9f:1d:33:1c:a1:3a:07:09:fe:0f:a6:6d:
b0:a1:07:f8:f6:6f:77:84:c5:e4:78:f5:c2:65:f9:56:84:f7:
73:df:e0:d0:61:65:5e:1f:6a:a0:1d:c8:e4:3d:c9:0f:ad:7b:
f7:4c:25:c1:1c:d7:8e:6e:2a:99:a2:92:69:3f:b2:ca:86:03:
0b:2b:98:8d:86:a5:7d:68:c8:d3:21:34:91:ee:5d:82:85:50:
d8:f4:ea:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org