Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/L6N_cjKzc7z9yZbST0RWfPWrcsM.roa
File: L6N_cjKzc7z9yZbST0RWfPWrcsM.roa (raw, json)
Hash identifier: pXt/jAKYnBDgupJsSwkFoSM0Jqia11WhNV39MoMmgIE=
Subject key identifier: 2F:A3:7F:72:32:B3:73:BC:FD:C9:96:D2:4F:44:56:7C:F5:AB:72:C3
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 018E9B8938218A077B9B36394FEC8882079C
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/L6N_cjKzc7z9yZbST0RWfPWrcsM.roa
Signing time: Mon 01 Apr 2024 21:20:45 +0000
ROA not before: Mon 01 Apr 2024 21:20:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.228.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 09:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9b:89:38:21:8a:07:7b:9b:36:39:4f:ec:88:82:07:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Apr 1 21:20:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fa37f7232b373bcfdc996d24f44567cf5ab72c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fa:1b:2f:d4:a3:b5:3b:97:af:29:70:4c:d9:
9f:02:b1:0e:18:47:46:3f:45:e3:c8:db:cd:97:33:
a2:69:57:b9:cf:f8:86:87:c5:6a:bc:c7:e5:84:09:
01:e0:50:ee:82:79:2a:bc:fa:cf:b8:66:fa:e0:49:
a0:a3:49:60:fa:f4:63:48:29:8f:28:99:1e:31:fa:
8e:7d:34:1f:1e:8b:d8:4a:3d:43:43:e2:1b:57:52:
f7:de:6f:14:70:06:c6:8a:1f:ba:67:78:e4:88:8a:
ad:13:09:4b:73:1d:d3:ea:9c:cd:a9:2c:8b:8f:09:
b6:98:a3:ab:ff:4a:ab:09:b9:e3:65:b1:f8:a8:c4:
f2:9a:49:0f:51:ef:4f:25:c6:dd:4f:8f:fc:dc:06:
36:2f:a2:a8:83:03:70:5a:9e:b1:a4:af:55:42:41:
2b:f2:4c:44:c6:ea:16:87:6a:2d:a1:e0:fd:99:bd:
4b:e4:df:07:a3:20:66:95:e2:af:ec:70:f1:eb:ea:
e9:95:04:cd:17:a5:7c:e4:f6:3f:06:a8:12:67:c1:
b8:dd:0d:eb:4a:40:61:f0:e8:4a:11:0a:8b:a9:0a:
65:cb:37:3b:83:95:fa:f4:e1:c1:ba:9a:c4:68:d5:
86:57:0c:ee:74:f6:3f:94:ba:5b:c7:81:0a:23:91:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A3:7F:72:32:B3:73:BC:FD:C9:96:D2:4F:44:56:7C:F5:AB:72:C3
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/L6N_cjKzc7z9yZbST0RWfPWrcsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.3.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ec:d8:80:b0:98:12:e6:98:4a:a1:69:93:b8:67:5c:86:cc:
1d:9c:01:d0:f7:12:07:c1:21:2f:c2:bf:8b:86:58:dd:cb:d0:
1d:87:70:b1:d6:bf:8f:59:8e:eb:3a:8e:b4:fa:85:4b:48:e9:
df:93:89:91:fc:b6:b3:62:36:4b:f3:5d:f4:e1:25:8f:b0:7e:
66:22:e5:50:90:54:c7:ab:08:a8:cd:cb:b6:7b:f5:6c:b1:59:
5d:ec:0c:e3:80:0e:7a:49:a0:62:7e:82:7a:71:76:1f:3d:4e:
08:a3:3f:aa:ed:a3:0e:e2:7c:0b:95:b5:d8:a0:6b:68:14:92:
54:2a:9b:f6:81:88:30:3c:c1:6c:0e:7f:e1:d7:c3:0b:29:8a:
f4:95:90:98:74:0e:9d:a0:da:75:6a:c6:5f:94:9d:55:f5:3a:
e9:02:81:25:83:89:5a:5d:9a:9a:27:a6:3a:b9:ac:e4:f3:1c:
d6:74:01:b2:9e:03:1b:80:89:da:65:9b:44:1e:0a:c1:d0:b6:
1e:f9:54:ff:46:5b:c6:7b:b6:d3:ea:8f:2d:92:a9:88:42:84:
95:36:85:84:3a:0f:48:c6:41:fa:7c:19:c9:69:48:12:fb:2a:
ab:5b:3e:4c:f5:0c:e9:fe:98:d3:87:91:24:eb:7a:35:19:a6:
45:20:63:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 14:44:04 2024 by rpki-client on console-ams.rpki-client.org