Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/A95RnXsr7QN_CzCptsxQiztG88Q.roa
File: A95RnXsr7QN_CzCptsxQiztG88Q.roa (raw, json)
Hash identifier: 5k6E7uOKqxXTnFZpe+efQ7wjv6Z9sIcexo0C+YHM7Yg=
Subject key identifier: 03:DE:51:9D:7B:2B:ED:03:7F:0B:30:A9:B6:CC:50:8B:3B:46:F3:C4
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 018D41467027B7B92000228160B3FD23E0FF
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/A95RnXsr7QN_CzCptsxQiztG88Q.roa
Signing time: Thu 25 Jan 2024 15:39:11 +0000
ROA not before: Thu 25 Jan 2024 15:39:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64289
IP address blocks: 185.191.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 May 2024 20:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:46:70:27:b7:b9:20:00:22:81:60:b3:fd:23:e0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Jan 25 15:39:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03de519d7b2bed037f0b30a9b6cc508b3b46f3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5d:be:63:4f:ab:0b:36:02:b8:54:68:4c:d0:
74:73:0c:e9:20:c6:39:bc:b0:e6:79:13:34:7e:4c:
cf:0c:07:2c:1b:fa:30:47:76:20:2b:4c:d7:f8:90:
d0:c8:2e:34:0f:48:8a:c7:b5:fb:b8:ec:89:a3:a4:
b9:f5:36:0e:97:fa:15:02:04:99:2a:2d:55:20:6a:
c1:96:0f:d9:61:fb:7f:2c:4a:d5:6f:1d:37:a8:72:
45:a5:95:c7:19:22:0e:44:13:72:38:9e:a7:bc:fb:
3a:12:33:77:b7:94:f4:95:e0:b9:19:05:3c:35:84:
fe:2a:24:6a:e2:dd:ec:c1:73:5b:57:90:ab:21:ce:
8d:26:f8:f5:ac:8a:8d:76:2b:d1:b3:57:5f:d8:d5:
22:a8:8c:97:4e:fa:27:40:28:ba:60:fd:a5:67:22:
73:22:f5:14:2f:c1:3a:c1:6a:b1:4e:30:9c:12:56:
e6:30:3a:95:41:ed:f3:f5:5f:ce:c7:e2:8a:e9:78:
4b:63:67:ad:7f:6d:33:bc:de:29:39:45:1a:b5:76:
f8:64:a6:0d:fb:64:62:f5:37:97:1b:bc:7d:70:e0:
43:b0:2b:f7:0b:b7:34:c2:d0:ca:9c:8b:8d:59:11:
99:3c:2e:d6:62:59:06:b2:58:f1:e1:b2:3e:12:e9:
db:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DE:51:9D:7B:2B:ED:03:7F:0B:30:A9:B6:CC:50:8B:3B:46:F3:C4
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/A95RnXsr7QN_CzCptsxQiztG88Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.145.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a7:d0:15:9a:7a:fe:3f:40:d9:60:77:a3:b6:55:da:4d:de:
57:06:ce:11:d5:db:19:18:22:75:c1:d8:f3:f2:d6:1f:ae:59:
1d:07:db:03:d4:47:de:4c:96:97:98:95:c7:19:5f:fe:79:91:
d2:2e:66:a0:ad:9d:e0:65:b1:8f:ad:4b:91:e8:c6:cf:b1:37:
f0:be:d3:5b:de:b6:bc:16:74:90:49:8b:6c:aa:b4:4b:13:08:
94:1f:48:af:9a:b3:07:ce:84:3b:3d:b0:97:88:c4:d7:78:ad:
13:45:30:a7:64:bd:e8:f3:e6:79:c9:8f:2a:e5:f2:00:f1:57:
25:76:44:35:69:69:5b:51:02:d2:74:6b:2c:04:07:bf:61:59:
81:fd:bd:03:ea:8d:cc:cb:8a:04:71:55:f2:c6:ac:27:e0:50:
d5:ca:23:09:50:fa:97:35:0d:6b:d6:b2:f1:42:0d:45:06:8b:
61:46:bc:d3:ae:c0:13:80:b1:f5:1d:af:ef:00:0e:39:e1:2c:
c8:6d:bc:86:04:1b:24:29:a9:cd:b1:8e:93:b7:2b:21:b3:24:
53:2d:3c:91:2e:3d:38:4d:27:cc:59:6a:76:b1:62:b2:61:df:
99:fc:6b:86:15:c7:74:93:3c:88:79:69:96:60:19:33:02:16:
70:1c:11:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:05 2024 by rpki-client on console-ams.rpki-client.org