Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/lGwvkIWdM0ElKEQPImb6kQ8hMIM.roa
File: lGwvkIWdM0ElKEQPImb6kQ8hMIM.roa (raw, json)
Hash identifier: WcpHsd2Ci1s35yEgZDsh3lbpFn6TbMPEYu2D8faDS9A=
Subject key identifier: 94:6C:2F:90:85:9D:33:41:25:28:44:0F:22:66:FA:91:0F:21:30:83
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 01888D839977871A8DC778C5D005141DD6BC
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/lGwvkIWdM0ElKEQPImb6kQ8hMIM.roa
Signing time: Mon 05 Jun 2023 21:43:11 +0000
ROA not before: Mon 05 Jun 2023 21:43:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.155.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 21:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8d:83:99:77:87:1a:8d:c7:78:c5:d0:05:14:1d:d6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Jun 5 21:43:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=946c2f90859d33412528440f2266fa910f213083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:04:a4:c3:2a:a4:86:69:d2:98:61:38:bc:2b:
9f:13:88:02:18:52:f1:c6:aa:c9:64:b1:a1:02:16:
02:96:64:35:0c:c3:91:69:c2:68:00:3b:16:d9:8a:
5c:91:4c:ee:78:02:d0:86:ee:93:66:f2:be:41:63:
15:5b:23:4e:60:80:15:d6:b4:fc:ba:1d:7f:e5:d9:
89:15:f4:81:c2:5d:48:a6:e7:30:99:8d:e6:d9:14:
c7:1e:4d:ac:18:2c:88:a3:b3:a3:52:02:2b:d7:84:
ca:b9:0b:1d:87:e1:32:33:34:40:f0:3f:28:7a:72:
27:32:0d:78:1b:05:63:d4:e0:c6:17:3a:48:4f:d6:
19:82:53:05:59:79:7f:0f:1d:28:6e:3f:01:9d:f9:
ba:a0:de:06:a5:2a:d1:f1:6b:fc:7a:05:4a:18:53:
89:3e:3a:7e:da:93:e4:05:7a:19:e3:f4:30:c2:65:
38:12:9e:98:23:61:d1:3e:95:6c:8b:9e:43:53:3c:
f2:8c:59:4b:eb:37:65:3f:9e:26:83:ed:23:82:29:
4b:3f:78:18:c8:12:4f:ca:86:f1:a1:c6:9a:3b:af:
45:0e:12:af:45:45:9f:09:d2:0b:cc:ae:ac:b6:c2:
90:ec:66:05:00:bf:50:b8:49:e7:b8:c1:91:d6:79:
b6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6C:2F:90:85:9D:33:41:25:28:44:0F:22:66:FA:91:0F:21:30:83
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/lGwvkIWdM0ElKEQPImb6kQ8hMIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.232.0/24
Signature Algorithm: sha256WithRSAEncryption
58:6c:b3:ba:4b:22:42:c9:cd:76:f4:15:20:d4:75:ad:58:f8:
e4:bb:40:68:23:25:53:2d:2d:57:ea:41:a8:32:90:f5:f3:98:
1b:1c:5a:d5:ee:37:34:01:cc:ef:40:cb:99:ea:dc:c2:8c:78:
05:e0:f7:54:df:20:06:1a:ba:c8:5c:56:50:45:bd:b1:ac:a3:
cb:a4:94:8c:92:ef:04:f7:73:39:14:8e:22:d7:b0:e9:d6:5a:
a2:1d:3c:23:ff:d9:84:35:83:63:e9:30:97:16:f8:e2:01:78:
26:c1:6a:93:60:ba:18:60:cb:dc:73:62:07:11:41:dd:cb:60:
2b:44:72:70:45:8a:e1:74:ff:bf:d2:8f:2a:8c:28:c0:93:0e:
ec:90:0d:47:55:53:8a:aa:0b:9a:67:cf:c7:99:5e:90:7a:8f:
1a:c1:d4:a7:c4:89:9d:00:c3:77:2c:35:cf:3f:27:8c:33:74:
2e:ba:e2:38:ae:95:76:97:91:73:b9:56:eb:27:24:7d:78:7e:
ba:b0:07:11:67:5e:ad:49:e6:18:f2:0c:c3:4f:eb:d9:ff:81:
dd:33:fd:e4:96:44:51:8e:f4:95:73:89:f4:32:60:be:c4:e0:
00:7d:f4:fd:3f:a7:08:00:fe:e1:ce:54:23:67:53:3d:ec:3b:
69:f7:a1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:51 2024 by rpki-client on console-fra.rpki-client.org