Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/O_BA4XUbzezFovgPUlJETwgolvQ.roa
File: O_BA4XUbzezFovgPUlJETwgolvQ.roa (raw, json)
Hash identifier: rNKsXRWUAShpphBPBH/8IL/kHXsk32FR7P9OstnMtUU=
Subject key identifier: 3B:F0:40:E1:75:1B:CD:EC:C5:A2:F8:0F:52:52:44:4F:08:28:96:F4
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 0188D50E9B9B9223109463BF4E72D320A078
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/O_BA4XUbzezFovgPUlJETwgolvQ.roa
Signing time: Mon 19 Jun 2023 19:08:04 +0000
ROA not before: Mon 19 Jun 2023 19:08:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151368
IP address blocks: 185.228.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jul 2023 09:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d5:0e:9b:9b:92:23:10:94:63:bf:4e:72:d3:20:a0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Jun 19 19:08:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bf040e1751bcdecc5a2f80f5252444f082896f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6b:43:83:51:a0:d0:6b:bb:57:0a:5b:ff:ce:
37:2d:ff:2a:54:29:e2:de:b4:22:2f:74:9c:b6:dc:
a9:dd:79:a3:5a:bb:c6:0c:80:95:94:b9:ec:b2:4a:
82:0b:c0:eb:2a:fa:3f:0b:9a:75:ac:98:e5:fe:e3:
3f:f4:61:ec:62:0b:a9:b1:80:74:3f:7b:03:f4:d3:
47:24:03:87:64:6b:2c:96:f8:0e:db:ee:74:6f:d1:
ac:4c:a7:7e:86:e4:f8:dc:6b:ce:0a:69:16:99:53:
97:72:0e:c6:f1:a1:8a:20:2a:cf:86:8c:72:5d:ad:
52:a8:1f:eb:bc:8d:98:1a:ed:80:74:f5:66:e4:88:
b5:59:cd:11:96:2e:aa:33:1c:68:97:8f:0e:16:05:
e3:b6:5d:98:50:86:8b:3c:f3:0a:39:45:49:61:00:
aa:4f:d0:6c:de:64:1d:89:b5:fd:23:7b:e9:e9:1a:
35:ed:68:e0:75:fa:35:41:1d:89:cc:ce:4c:35:90:
51:e9:55:72:dd:fa:ee:99:dc:7b:b3:52:0f:65:c1:
ae:0f:7f:a3:4c:9b:9e:90:e3:5a:5f:63:82:7e:b5:
30:e0:33:70:99:76:e1:cb:e4:bb:49:d7:bc:1d:12:
39:b9:c5:e1:49:e9:f3:4c:a5:91:de:bc:34:ca:22:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F0:40:E1:75:1B:CD:EC:C5:A2:F8:0F:52:52:44:4F:08:28:96:F4
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/O_BA4XUbzezFovgPUlJETwgolvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e0:18:bf:3a:e0:f4:46:5d:89:f7:cc:d6:0f:b8:81:d0:08:
34:12:10:7e:51:0f:ad:b8:6e:b8:db:4d:57:69:34:42:a2:4a:
68:03:fe:ce:f8:70:11:a8:7f:e2:85:d4:a8:4a:e1:0c:d5:2f:
81:ae:df:67:f2:40:48:47:5c:71:fa:21:9a:01:e3:c2:82:f3:
80:84:ac:93:1b:5b:61:69:37:67:39:ff:88:6b:a8:39:19:c9:
7a:6d:1c:d2:41:47:31:d0:8e:9c:ce:3f:86:dc:25:04:6b:29:
ef:34:65:2e:ec:9f:3b:cf:19:17:e1:90:19:0b:5d:11:e8:f3:
80:32:dd:90:2e:31:91:83:db:b6:31:06:33:ca:cc:9e:04:ef:
d1:55:d8:5b:9c:ff:cf:af:b3:e9:d0:d9:fd:af:fe:fe:cc:93:
88:2d:87:a4:a1:02:ee:b9:2a:20:da:5e:03:4d:54:af:e1:b2:
68:29:b0:c9:58:59:ae:d2:01:c5:a8:70:4f:7f:48:c1:9f:c7:
d6:5a:3b:b3:15:c9:6e:49:38:d5:1d:e2:be:88:b8:9a:b7:91:
2c:73:fd:ef:43:f0:74:61:4e:48:ca:4e:3b:69:9a:f2:3a:7a:
86:dd:e2:6f:0d:18:47:a4:b5:ad:27:f4:60:ae:4a:0e:e7:20:
e5:f3:fa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:14 2024 by rpki-client on console-fra.rpki-client.org