Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/3-j5TCDx0E_AmbEQQj4x_Y8V8rQ.roa
File: 3-j5TCDx0E_AmbEQQj4x_Y8V8rQ.roa (raw, json)
Hash identifier: m5g0J5+ELzNdm0Yz6f7swIT8SO+04vfv6aC16HrxRYA=
Subject key identifier: DF:E8:F9:4C:20:F1:D0:4F:C0:99:B1:10:42:3E:31:FD:8F:15:F2:B4
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 01894C141389F0040A95426BFE85C5DE121A
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/3-j5TCDx0E_AmbEQQj4x_Y8V8rQ.roa
Signing time: Wed 12 Jul 2023 21:48:51 +0000
ROA not before: Wed 12 Jul 2023 21:48:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 185.155.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Oct 2023 07:55:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4c:14:13:89:f0:04:0a:95:42:6b:fe:85:c5:de:12:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Jul 12 21:48:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfe8f94c20f1d04fc099b110423e31fd8f15f2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c4:25:01:82:ea:9e:bf:94:f5:5e:c6:d3:b6:
8e:e1:6e:74:cf:98:ea:ea:21:46:4c:20:e2:ed:c8:
6f:9e:e6:d6:83:d1:59:bd:3c:e2:8e:3b:e5:78:ee:
be:06:45:90:71:3c:59:2b:e5:00:d3:b5:58:14:e4:
56:37:47:26:5b:7e:60:47:99:1b:76:a1:67:37:01:
ee:11:aa:d3:8a:31:97:a7:b9:c2:4e:97:fc:ad:14:
04:b9:6a:12:34:18:eb:3a:34:5c:e9:bb:cc:c8:55:
18:ff:c7:22:b9:8a:25:75:78:37:eb:7a:ef:17:4b:
93:ad:e1:9e:3c:73:28:8a:77:59:a5:e1:3f:b4:a0:
28:d1:5e:86:77:bb:c2:3a:1a:14:ba:55:61:15:58:
5a:a6:0a:59:d9:45:1f:d5:35:33:88:75:81:c9:45:
86:bc:1e:37:43:94:4f:4b:5e:db:4a:00:3f:db:6f:
9d:a5:9b:e8:6f:7d:0d:f4:68:be:4b:d8:b6:eb:03:
a0:7a:90:bb:99:79:ff:46:96:1a:f0:97:8f:0c:19:
9d:6b:83:0b:5a:98:e7:1a:7d:24:d5:b5:ed:76:d3:
3f:bb:84:73:9a:de:13:ac:5e:a6:be:a2:99:ae:0f:
73:ae:91:40:f3:a4:3f:8e:00:84:89:1d:2b:89:48:
d1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E8:F9:4C:20:F1:D0:4F:C0:99:B1:10:42:3E:31:FD:8F:15:F2:B4
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/3-j5TCDx0E_AmbEQQj4x_Y8V8rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.234.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:7a:01:68:5b:ad:39:81:b1:4f:b9:6c:83:ad:38:bf:4e:3e:
d3:a7:c8:86:70:7d:4b:92:c2:0d:37:40:ef:aa:14:fe:2a:3f:
72:e3:1a:7d:0c:f2:04:1c:ab:05:bb:f2:c1:88:4e:4b:a0:d9:
a6:19:3c:b4:bc:fe:66:92:3c:c8:f6:bd:4c:41:6d:a9:43:ed:
e8:a5:1b:2a:fb:bf:2c:2f:42:ad:97:a9:a6:ce:2f:fe:28:8c:
12:34:6e:06:e0:6c:e4:61:9f:d4:e9:b7:1a:1a:a5:9b:33:e2:
a3:94:18:dd:b0:02:1f:5e:5b:ab:3c:46:7c:df:1a:43:e4:88:
bb:f3:97:c8:2b:14:c2:6d:89:01:d3:59:b4:4b:1d:3c:af:d4:
99:6d:07:77:1b:8a:36:0c:b3:5c:d7:47:a6:25:46:fe:b8:ee:
19:dc:09:a2:64:4a:aa:a7:47:71:18:f0:78:dd:b2:d3:14:f0:
2a:9e:5c:10:33:47:3e:f3:2e:0e:03:71:56:84:5d:d0:cb:7f:
e7:23:67:2e:b1:b5:73:cc:4f:73:d2:45:dd:5b:f7:74:71:d6:
1c:98:7c:ee:98:30:dd:29:73:1b:fa:d9:fc:ba:54:94:e3:ec:
c6:2d:4c:0d:ce:27:71:89:2a:e9:e2:31:e2:62:be:1b:ae:8c:
d9:49:8a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:02 2024 by rpki-client on console-ams.rpki-client.org