Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/s2tdAX2xrFjmyNXrBWOUKqzcMqw.roa
File: s2tdAX2xrFjmyNXrBWOUKqzcMqw.roa (raw, json)
Hash identifier: VbD6u9ABQylwIGtfVctg3C/APgTFeVJsZLu/4+jaaWQ=
Subject key identifier: B3:6B:5D:01:7D:B1:AC:58:E6:C8:D5:EB:05:63:94:2A:AC:DC:32:AC
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 01857142DFE7EA71D837F8DC525E35494256
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/s2tdAX2xrFjmyNXrBWOUKqzcMqw.roa
Signing time: Mon 02 Jan 2023 06:54:46 +0000
ROA not before: Mon 02 Jan 2023 06:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210731
IP address blocks: 185.129.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:df:e7:ea:71:d8:37:f8:dc:52:5e:35:49:42:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Jan 2 06:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b36b5d017db1ac58e6c8d5eb0563942aacdc32ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:f0:82:00:1f:a7:b9:0a:35:2c:44:5a:a7:
d4:17:f5:4c:f4:fb:8e:df:b8:16:62:c7:76:d8:88:
c3:ce:4b:08:e8:1c:3e:b6:f8:29:21:fd:22:46:d9:
c3:ff:71:58:f9:8d:a5:b9:03:13:32:c3:5d:a0:b1:
0d:9d:05:6f:ee:c6:0a:6d:2d:f0:09:39:3e:09:06:
cf:fd:58:d6:b4:90:75:13:9f:d9:1b:0a:37:e7:63:
6d:95:20:27:bd:bd:ba:26:91:0b:b6:35:d4:0e:03:
3b:0e:35:5f:81:49:10:0a:5b:fb:a3:6f:04:95:ee:
4a:cd:38:d5:a7:03:2e:2b:28:a4:e9:c6:e9:5e:17:
69:ee:0e:ca:cb:96:9e:c5:71:4e:a3:a6:e0:20:fd:
c2:6d:16:b4:9d:8e:f1:89:c1:55:07:05:82:0d:86:
be:28:4e:86:0e:6c:3d:7e:17:b5:f3:20:27:d8:42:
3f:23:ff:f8:16:a1:5b:c3:ad:0e:e2:f8:47:dd:63:
1b:d2:7c:ba:be:db:73:90:80:51:e3:6c:0e:18:a6:
3e:30:5e:88:95:fc:0f:65:57:dd:62:e7:2a:ca:d7:
ca:31:be:1a:2c:44:72:a2:66:c8:12:bb:5b:13:6f:
ec:e9:bd:6d:ac:1d:97:c4:4f:dd:51:1b:d5:56:22:
a9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6B:5D:01:7D:B1:AC:58:E6:C8:D5:EB:05:63:94:2A:AC:DC:32:AC
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/s2tdAX2xrFjmyNXrBWOUKqzcMqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.61.0/24
Signature Algorithm: sha256WithRSAEncryption
46:9a:d5:b8:6e:49:bb:32:4e:d2:c4:45:bb:fd:4d:33:d6:65:
83:3a:16:2e:7a:28:da:64:0d:cd:34:34:3c:dd:23:64:1a:9a:
9e:25:57:8c:8e:f0:34:ad:77:8f:e1:ed:5b:7f:8b:45:b8:9e:
d5:c4:fd:d8:30:40:f2:15:ba:a6:9a:55:fd:5c:bc:93:5a:17:
fb:e2:fb:e7:5e:57:da:83:7c:c0:40:15:aa:f4:99:ba:23:72:
e9:01:fa:32:ee:c1:da:d2:73:8b:0b:64:b9:ea:98:16:56:cd:
38:59:82:1d:b1:0f:f0:9b:b8:0c:71:0f:3a:66:5f:64:7e:7d:
f0:b1:d3:cf:9e:ee:1e:b5:b8:4e:cb:f8:31:09:b1:ca:3f:a7:
b9:b1:31:52:60:5f:2d:4d:fc:3d:8d:7c:86:90:00:de:dd:4d:
25:3f:81:39:51:2e:c1:14:8e:44:95:00:fd:86:c7:27:0a:8e:
1a:7f:83:5c:2f:78:bc:3d:39:ac:e8:65:6d:35:ba:26:42:fc:
51:c6:12:3e:23:db:c9:57:78:d1:94:8c:e8:66:14:f2:29:7e:
15:a7:30:f2:59:32:1e:cf:36:88:17:19:e4:32:7f:65:31:42:
47:72:42:6f:0e:d5:bb:05:eb:d0:ce:57:19:b7:03:dc:a4:85:
0d:f9:d0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:28 2024 by rpki-client on console-fra.rpki-client.org