Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pt1NCNVuL7t63fGdWoIb-YUDwNE.roa
File: pt1NCNVuL7t63fGdWoIb-YUDwNE.roa (raw, json)
Hash identifier: hAN8TagYHxp/+P8av1+DsLavFYIfEKoTsQwtWDGvvXI=
Subject key identifier: A6:DD:4D:08:D5:6E:2F:BB:7A:DD:F1:9D:5A:82:1B:F9:85:03:C0:D1
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 018A8DB517B4750E1E14334A7645D23A10B3
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pt1NCNVuL7t63fGdWoIb-YUDwNE.roa
Signing time: Wed 13 Sep 2023 08:42:50 +0000
ROA not before: Wed 13 Sep 2023 08:42:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36231
IP address blocks: 185.228.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:b5:17:b4:75:0e:1e:14:33:4a:76:45:d2:3a:10:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Sep 13 08:42:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6dd4d08d56e2fbb7addf19d5a821bf98503c0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:07:28:35:dc:57:d5:91:2d:8a:db:9d:aa:
a2:d2:00:37:fb:24:64:04:87:30:bf:2e:54:2d:d9:
3b:10:4b:82:19:dc:21:16:c8:57:a1:8d:fa:1f:6e:
d2:c0:e0:fb:8b:82:fd:e8:10:3b:88:2a:98:68:a2:
c7:1e:e2:7b:da:20:7a:1c:f6:6e:57:0a:7c:c6:d9:
e4:87:ba:0e:00:fa:f0:b6:a4:62:fa:ce:2f:08:8a:
b1:33:41:26:6d:ba:ed:3d:e8:3c:bd:bc:b8:f4:71:
d7:89:be:02:d7:05:5f:7d:94:03:76:60:3e:4a:bc:
4f:ba:59:23:dd:3a:3e:c9:74:fc:87:75:50:6d:51:
14:42:1a:be:14:1a:2c:60:3d:f2:a7:99:91:27:63:
ad:f8:2d:d5:13:e5:2e:1e:9b:99:d0:af:07:13:2a:
66:9e:97:09:df:97:3d:6b:84:b4:1c:aa:e1:70:30:
e4:3a:e9:d7:a1:01:7d:52:b5:fa:ca:02:0d:26:f8:
f5:4c:58:0d:b1:91:35:0d:6f:4c:a3:44:d9:f7:fd:
66:c4:94:bf:73:83:8f:4b:4c:7c:d2:82:f8:68:b1:
c7:c8:63:ca:a9:62:1c:eb:b5:fa:53:f5:90:da:34:
92:34:53:21:9a:df:3c:d4:6e:bf:74:a5:03:f3:f0:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DD:4D:08:D5:6E:2F:BB:7A:DD:F1:9D:5A:82:1B:F9:85:03:C0:D1
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pt1NCNVuL7t63fGdWoIb-YUDwNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c6:f1:e3:a7:e5:4f:91:51:b2:27:a2:8d:64:1b:db:ff:76:
d2:c4:a6:c4:b3:1f:9b:9c:c4:75:db:a0:83:e8:e9:4d:33:36:
ae:0d:82:8f:d6:47:35:40:4a:ed:79:0f:90:14:3c:1e:29:2b:
f8:58:2c:82:fd:14:75:3e:3e:e2:a1:9f:da:1f:85:8c:f2:75:
14:c7:45:54:83:af:a0:0f:ee:48:96:e6:47:6d:4b:18:0a:f7:
cc:9c:2b:24:91:28:59:4f:58:fe:82:81:25:9c:14:76:4e:f5:
2c:d4:df:6b:04:a5:da:94:ef:86:6e:f8:a7:3a:9f:8b:35:10:
06:ae:c6:a0:3b:27:15:ec:59:db:4a:f0:c8:1c:2d:a8:2c:70:
aa:f6:2a:6f:a4:0a:38:94:5b:60:37:27:04:28:d4:e1:fe:8e:
f4:c0:52:f2:05:da:be:76:d6:c2:45:cd:91:c1:60:e9:52:0a:
56:27:c9:56:4c:0a:4c:c7:34:ed:7a:0a:30:51:2d:12:03:fa:
43:e7:6f:32:5e:7c:08:c5:52:15:42:7c:8e:45:d3:6e:5b:05:
c3:d1:43:78:0e:89:21:45:1b:dc:16:97:eb:ab:a4:68:8c:29:
45:eb:97:06:33:ef:c5:49:bd:1a:1d:17:59:d6:ca:0c:3b:b2:
a8:28:15:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 10:00:54 2023 by rpki-client on console-fra.rpki-client.org