Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/Ss5UOvMftmMA6eTpoiklxbEeEB4.roa
File: Ss5UOvMftmMA6eTpoiklxbEeEB4.roa (raw, json)
Hash identifier: MlS8IqW/zJ80BnPWf4GT7z4iv17s6qzmlyd76WopJqE=
Subject key identifier: 4A:CE:54:3A:F3:1F:B6:63:00:E9:E4:E9:A2:29:25:C5:B1:1E:10:1E
Certificate issuer: /CN=432ffd36796e90f812a1612ec1f464de3d5e2f38
Certificate serial: 018724B0C19583581BC16317BFD8ECDEDA54
Authority key identifier: 43:2F:FD:36:79:6E:90:F8:12:A1:61:2E:C1:F4:64:DE:3D:5E:2F:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_9NnlukPgSoWEuwfRk3j1eLzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/Ss5UOvMftmMA6eTpoiklxbEeEB4.roa
Signing time: Mon 27 Mar 2023 20:09:36 +0000
ROA not before: Mon 27 Mar 2023 20:09:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201194
IP address blocks: 185.136.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Apr 2023 07:55:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:24:b0:c1:95:83:58:1b:c1:63:17:bf:d8:ec:de:da:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432ffd36796e90f812a1612ec1f464de3d5e2f38
Validity
Not Before: Mar 27 20:09:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ace543af31fb66300e9e4e9a22925c5b11e101e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:68:0e:a6:aa:6c:34:39:2d:2d:dd:ca:8d:
55:fb:5a:0b:bd:d7:e5:b6:2c:80:79:d6:51:c0:b9:
48:d3:6d:a5:90:d6:75:de:1e:23:c1:73:b1:29:99:
90:67:c7:8f:13:3d:9a:c6:46:7a:49:57:e1:59:e5:
56:da:7a:58:db:58:5a:d8:04:3a:c3:dd:7c:d8:37:
12:b9:05:71:e1:a1:eb:48:5a:9b:1b:7d:a4:05:bc:
6a:c1:a1:90:1a:c8:b7:0e:93:50:31:e9:a1:5b:15:
5d:cf:43:84:8f:e8:bd:d4:40:3b:13:44:a1:7e:9c:
fd:3b:f5:83:ae:ab:ba:38:c4:f3:eb:4a:bf:f3:da:
0a:fb:99:48:bc:65:3c:9a:a7:04:2c:06:44:b6:5e:
a3:b4:24:e3:4a:65:d0:41:6c:37:d1:4f:80:02:8b:
87:9a:73:cd:1b:c2:91:f3:4b:92:cf:1b:a6:be:6e:
34:b8:2d:38:d1:38:0e:f6:2b:f3:0b:74:6c:45:cb:
c0:56:09:d3:2b:ca:71:b0:a6:d7:f5:4c:ac:15:a5:
81:7a:10:d9:70:e1:72:ab:f9:62:4b:6a:7d:43:d8:
3c:c5:77:96:30:39:c7:ba:7d:a1:01:16:9f:f5:78:
13:ad:d4:7d:59:58:19:ee:61:2f:d7:d8:0c:c9:b4:
77:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CE:54:3A:F3:1F:B6:63:00:E9:E4:E9:A2:29:25:C5:B1:1E:10:1E
X509v3 Authority Key Identifier:
keyid:43:2F:FD:36:79:6E:90:F8:12:A1:61:2E:C1:F4:64:DE:3D:5E:2F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_9NnlukPgSoWEuwfRk3j1eLzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/Ss5UOvMftmMA6eTpoiklxbEeEB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/Qy_9NnlukPgSoWEuwfRk3j1eLzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.133.0/24
Signature Algorithm: sha256WithRSAEncryption
54:2c:be:e1:e8:b4:8a:a1:24:fa:1a:f3:a9:9c:ef:a0:94:3c:
6e:40:9f:61:e2:c6:aa:9e:e2:7c:50:27:78:7d:d6:ee:39:3e:
9b:af:85:11:76:93:48:4c:19:f7:e2:f1:3a:1e:d4:7e:e3:8e:
00:07:2f:a4:9f:79:33:e4:42:60:9f:56:07:c6:f1:ab:9d:da:
12:b4:8a:6e:89:00:98:42:ec:64:78:bf:8e:d0:a3:06:a7:a6:
1d:5d:96:25:a4:ab:f3:5b:25:d3:1c:d8:dd:08:a6:3c:77:02:
01:27:fc:17:75:c4:1c:81:67:aa:21:9d:c0:24:6a:4f:36:90:
7f:91:e5:8d:d8:6d:bf:35:19:6d:b5:c8:11:98:48:46:71:2a:
48:39:7e:00:df:0f:25:7c:a0:89:94:57:06:a5:09:ae:95:47:
75:58:d9:d6:2c:a1:22:b0:84:c2:7e:de:a4:6b:c3:5e:b6:4a:
5a:72:77:4e:7b:d6:89:f1:28:93:e1:2a:89:e5:76:ea:65:67:
07:f8:9a:08:5f:da:d0:dd:71:48:1b:90:d4:d2:b9:cc:86:06:
b1:40:2b:f5:d1:c4:69:23:be:bf:db:15:68:59:c6:40:40:c6:
f0:36:e5:29:bf:6d:e0:c4:ef:56:59:e3:9c:be:3f:9e:90:68:
b5:1d:50:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:39 2024 by rpki-client on console-fra.rpki-client.org