Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/rS0J85p1F9VZ4Gn7mkOZFncNTjg.roa
File: rS0J85p1F9VZ4Gn7mkOZFncNTjg.roa (raw, json)
Hash identifier: wy7HErlzF3YI/LewkbUQbQ63HiZBFe7gl8xROrUALPg=
Subject key identifier: AD:2D:09:F3:9A:75:17:D5:59:E0:69:FB:9A:43:99:16:77:0D:4E:38
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 01869EFBD55FC515C15680E2394FFF788D81
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/rS0J85p1F9VZ4Gn7mkOZFncNTjg.roa
Signing time: Wed 01 Mar 2023 21:02:29 +0000
ROA not before: Wed 01 Mar 2023 21:02:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 185.237.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9e:fb:d5:5f:c5:15:c1:56:80:e2:39:4f:ff:78:8d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Mar 1 21:02:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad2d09f39a7517d559e069fb9a439916770d4e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4f:f7:42:2c:4d:a9:cd:fa:30:3d:81:ad:a5:
d0:34:d3:62:15:b2:4d:33:5b:2e:21:7e:3f:52:84:
0c:6a:f6:24:23:c8:fa:85:48:96:05:bd:69:79:b3:
e2:b9:71:09:dc:8c:ea:a0:e5:7b:5f:86:1a:61:8e:
dc:be:b5:3f:ef:ed:61:cd:62:ef:53:66:47:80:b5:
a0:30:a4:18:76:47:a6:2c:f9:f9:32:96:e0:6a:26:
26:76:05:ba:04:cc:6d:3a:f1:31:82:6f:ab:a8:2b:
7b:f4:62:18:73:76:ab:a2:fe:89:2f:b4:7f:57:dd:
f6:60:6a:e5:56:ce:6e:80:e3:22:5d:e1:ab:d7:ef:
a8:70:29:b9:42:8b:a9:22:3c:46:d0:d8:52:be:cb:
8a:74:1c:56:3e:f5:62:bf:9a:30:6f:09:6a:70:c4:
89:b7:0b:c7:4f:c9:1a:5a:de:1f:59:30:63:6f:bd:
95:da:56:ca:63:f9:b2:fd:84:ee:ed:4c:fc:67:a1:
4b:d3:2f:08:33:66:a0:52:6c:de:f3:4c:f6:37:93:
21:ee:c3:8f:3f:e6:01:09:c4:03:b7:0b:98:18:ce:
2b:e0:9e:f0:39:c4:81:cd:00:a0:46:47:d0:97:e8:
35:2e:69:fe:15:4d:e7:b6:e6:d0:3f:cb:e6:83:4c:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2D:09:F3:9A:75:17:D5:59:E0:69:FB:9A:43:99:16:77:0D:4E:38
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/rS0J85p1F9VZ4Gn7mkOZFncNTjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.83.0/24
Signature Algorithm: sha256WithRSAEncryption
55:19:fe:27:73:9f:dc:b5:16:90:9a:ce:0d:98:1f:33:01:cd:
06:9e:db:b8:bf:09:06:80:27:3d:78:46:19:9d:e5:65:d6:40:
10:ca:51:73:27:14:aa:ec:a6:72:a8:b8:50:4c:b2:f1:d0:7b:
93:3d:7f:28:4f:19:9f:eb:f8:e8:08:8c:df:52:a1:aa:83:ee:
65:8d:a9:5c:76:fb:50:9a:3a:5f:bd:cc:83:76:05:6a:27:37:
ae:67:a1:32:ef:15:36:9c:ef:1a:76:6b:2e:7b:e5:03:33:41:
15:93:37:4e:b2:c7:db:d3:5c:4e:23:20:d8:c8:88:73:35:e7:
94:9f:ad:2e:96:5a:0e:70:a1:b7:1e:06:8d:b6:fb:b6:91:b1:
8e:a7:b0:a5:2a:50:86:eb:81:e8:fa:5c:35:2e:d5:79:a5:6c:
59:58:fe:a9:13:cd:98:a1:da:5c:3c:94:1d:70:a7:a8:0e:16:
62:fe:b7:8f:bc:22:a4:26:84:ea:4b:3b:2d:86:4a:5f:5d:9e:
e0:7f:f2:f6:10:1c:f6:31:a4:c5:c7:50:94:98:9a:55:ea:1e:
97:f1:f1:a8:bd:11:58:1a:8d:47:43:e8:52:d1:2f:08:2d:49:
ce:1c:f8:7d:39:a1:8f:e8:e7:45:0b:91:e9:70:37:5e:93:9d:
ca:45:70:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org