Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/wz4oUX2VWUlZHpVy8iQ1WO1LpIY.roa
File: wz4oUX2VWUlZHpVy8iQ1WO1LpIY.roa (raw, json)
Hash identifier: 42ROnv04UvOF0bp6ZiaC1aDVVxeAjMQsGJsKO/9gN9g=
Subject key identifier: C3:3E:28:51:7D:95:59:49:59:1E:95:72:F2:24:35:58:ED:4B:A4:86
Certificate issuer: /CN=acb54bcc49291a1f32b7cead4f296882d0531492
Certificate serial: 0189AC4CE3ADAB279B11C0831066D2C2A26D
Authority key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/wz4oUX2VWUlZHpVy8iQ1WO1LpIY.roa
Signing time: Mon 31 Jul 2023 14:14:27 +0000
ROA not before: Mon 31 Jul 2023 14:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198011
IP address blocks: 185.105.76.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ac:4c:e3:ad:ab:27:9b:11:c0:83:10:66:d2:c2:a2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb54bcc49291a1f32b7cead4f296882d0531492
Validity
Not Before: Jul 31 14:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c33e28517d955949591e9572f2243558ed4ba486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:57:d5:1b:6c:99:84:2b:85:f3:7b:82:81:d6:
2c:ff:4a:05:89:60:56:9c:d4:63:96:c8:1e:cf:b6:
53:1f:65:6a:2d:7c:02:9d:39:0f:5c:63:a9:8b:7e:
61:fd:08:88:2c:2b:bc:f4:27:47:ac:f1:e8:10:60:
d3:8d:68:ca:5a:b6:5f:ec:bb:8a:b0:76:9f:44:bc:
18:4e:90:a2:d6:5d:e5:40:73:43:d1:84:6a:89:80:
fe:90:36:5d:ea:f5:fb:2c:5f:6b:fd:f7:8a:74:2f:
5c:fc:79:82:a3:3e:a5:1b:56:8f:a2:d6:12:28:b3:
43:2b:71:ed:5a:44:79:71:d6:1d:ac:f9:ae:5e:09:
ef:8f:88:58:d4:00:19:51:62:90:64:47:26:b7:a7:
73:89:c1:e2:2f:fa:cf:74:67:cc:64:bb:76:7c:11:
22:e1:94:b8:12:d6:bf:3d:2c:49:df:66:4d:49:52:
bf:09:ad:c9:0a:02:0c:b3:c0:d7:97:77:0a:cf:db:
6c:34:92:af:07:c0:fb:44:ce:00:c6:83:a4:d9:04:
ac:c8:01:19:e7:e9:b9:ef:d7:71:ad:be:4e:92:fb:
45:7d:87:9b:21:8c:ac:90:9d:eb:91:62:f4:a1:7f:
d9:5e:2e:e1:c9:af:b4:42:f4:67:2d:92:dc:18:15:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3E:28:51:7D:95:59:49:59:1E:95:72:F2:24:35:58:ED:4B:A4:86
X509v3 Authority Key Identifier:
keyid:AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/wz4oUX2VWUlZHpVy8iQ1WO1LpIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.76.0/22
Signature Algorithm: sha256WithRSAEncryption
55:e0:da:c7:65:11:23:e2:b2:4f:7a:aa:72:38:db:3c:48:5a:
9c:21:54:52:2e:c9:da:39:31:d0:a9:45:80:9a:c7:20:ee:64:
fc:ec:04:07:65:56:04:bc:b4:8b:a6:91:0d:fd:f8:a6:32:53:
91:6f:65:61:1b:14:27:b3:17:fc:5a:63:82:42:9f:e3:45:9f:
85:c1:e9:ad:da:df:49:a7:01:ed:d4:cd:89:21:2a:c7:2f:04:
72:30:aa:18:b8:bb:77:0f:4b:76:2a:21:9b:cb:ae:ba:0b:db:
90:36:79:a8:27:16:7e:1a:ed:b7:54:2e:3e:dc:86:f9:48:b2:
03:b6:a3:32:42:e3:ac:e8:4c:a5:95:d4:c2:50:c6:41:14:ac:
2a:e4:11:1c:4f:87:51:4d:c6:c3:6c:1e:db:3b:46:cd:c8:83:
fe:04:a6:34:7a:35:3b:9f:70:64:6b:ec:7b:c8:03:e0:a6:8e:
17:83:76:84:87:d7:5d:f9:36:d0:3a:f7:c9:c5:78:3e:1d:d0:
c2:68:38:0f:81:b4:21:9f:42:a6:23:25:ce:45:7d:a5:46:c3:
4c:4f:69:f7:48:8f:1b:bd:05:a0:ed:02:06:00:95:a6:68:f9:
84:05:25:e8:f9:0d:9d:83:d2:9a:e9:da:0a:fc:eb:b4:30:bd:
30:68:8b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:36 2024 by rpki-client on console-fra.rpki-client.org