Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/d6kdCs7OraAP6MzV_tE6iLK7Vk8.roa
File: d6kdCs7OraAP6MzV_tE6iLK7Vk8.roa (raw, json)
Hash identifier: aU5ttVkfFn6f2oQ7J099IbRIetM1Ps/Ra2hSvyRgz1k=
Subject key identifier: 77:A9:1D:0A:CE:CE:AD:A0:0F:E8:CC:D5:FE:D1:3A:88:B2:BB:56:4F
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 018B6721E3A60B713C05FA14E26588857F01
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/d6kdCs7OraAP6MzV_tE6iLK7Vk8.roa
Signing time: Wed 25 Oct 2023 13:59:16 +0000
ROA not before: Wed 25 Oct 2023 13:59:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5065
IP address blocks: 185.155.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:21:e3:a6:0b:71:3c:05:fa:14:e2:65:88:85:7f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Oct 25 13:59:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77a91d0aceceada00fe8ccd5fed13a88b2bb564f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cd:b4:bf:7a:e0:0d:10:68:ac:6f:5b:c1:7a:
f5:49:7a:37:0d:9e:c8:3b:c6:a9:db:63:5a:d1:48:
05:82:6c:9c:6d:82:9f:80:72:d5:6c:7d:a1:a4:a0:
88:5d:81:54:96:3e:08:5b:6c:94:2d:b7:e7:71:fd:
40:3c:8b:70:b4:11:f8:b4:63:e8:cf:3d:dd:7f:60:
1c:9a:e2:de:01:b7:38:23:6a:19:9f:a5:55:3f:fd:
db:f2:2a:f8:e2:58:52:d3:b4:a8:90:84:2a:27:2f:
b7:69:7b:8f:17:7e:9d:c9:23:0c:4a:7d:d7:79:4a:
a6:9e:94:0e:50:31:6b:d9:78:96:aa:c4:96:d2:a5:
f4:6b:c8:29:40:b3:12:00:ea:b1:ef:7d:9f:3e:9a:
5b:c0:67:27:6e:73:b3:1b:a5:64:20:a7:00:c5:b1:
9a:7c:42:87:91:80:55:4d:fd:fa:e2:7b:ea:88:fe:
b0:86:2a:22:77:bb:97:6a:43:c5:90:dd:b8:7d:c1:
2c:3d:e1:c6:b4:7c:92:8a:d1:6c:d5:b1:96:d3:ae:
e5:77:76:17:db:ea:dc:45:20:14:85:af:b8:ab:4a:
86:1c:f6:ec:60:d9:12:ed:36:08:80:4a:f2:7e:e3:
76:26:fd:22:81:85:5e:ea:40:5a:00:44:71:aa:4d:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A9:1D:0A:CE:CE:AD:A0:0F:E8:CC:D5:FE:D1:3A:88:B2:BB:56:4F
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/d6kdCs7OraAP6MzV_tE6iLK7Vk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.234.0/24
Signature Algorithm: sha256WithRSAEncryption
96:42:dc:5b:21:9e:4b:75:40:27:ce:a7:a6:2a:82:4f:70:fc:
98:54:34:cb:63:b7:83:29:9b:48:3f:9d:a0:0c:15:7f:ab:e5:
e1:e9:a5:c5:e6:f5:73:e1:e9:5c:7b:28:9a:df:81:f0:91:61:
aa:a2:a6:e4:4f:00:14:eb:75:f0:f0:05:58:3d:68:07:f6:36:
64:70:a7:8a:84:7f:f5:51:91:de:71:5e:52:83:df:2c:b4:a7:
76:16:f0:93:e1:23:b3:3f:02:68:86:02:4c:75:17:19:a5:c1:
ae:a8:be:5a:07:53:67:4f:47:6c:71:a4:27:9d:61:ff:c0:42:
a8:93:e9:02:8a:ee:e3:3c:e5:74:07:ad:56:ac:7a:af:b2:76:
58:9d:38:43:58:a5:1a:a0:91:0d:27:1a:14:15:6f:2a:94:f8:
0d:95:09:f3:31:e5:0c:64:9e:98:07:be:60:aa:bd:0c:18:35:
df:3d:08:7e:3c:f8:78:f0:e4:b9:59:77:e4:31:5d:68:3d:9d:
49:4d:ef:68:7d:1e:d0:9b:8f:af:55:cd:93:ce:93:3a:dc:86:
f0:1a:cb:b2:cd:7a:fa:20:ab:c7:52:37:81:ff:03:e7:9d:f3:
ac:89:92:8a:c9:2e:b3:a9:26:54:6c:55:67:df:21:86:7a:0c:
f2:ce:29:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:02 2024 by rpki-client on console-ams.rpki-client.org