Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/p4ReZE0-ZuA6GXkglYUl8kLP4Jo.roa
File: p4ReZE0-ZuA6GXkglYUl8kLP4Jo.roa (raw, json)
Hash identifier: bNFpiUw5RyPelKW2SxPyNm/Hlue5Kpl2OpO/QTP1+84=
Subject key identifier: A7:84:5E:64:4D:3E:66:E0:3A:19:79:20:95:85:25:F2:42:CF:E0:9A
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 01856C812D5F2C22F8F71FF9CC8FBE331D78
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/p4ReZE0-ZuA6GXkglYUl8kLP4Jo.roa
Signing time: Sun 01 Jan 2023 08:44:42 +0000
ROA not before: Sun 01 Jan 2023 08:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 185.155.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:2d:5f:2c:22:f8:f7:1f:f9:cc:8f:be:33:1d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Jan 1 08:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7845e644d3e66e03a197920958525f242cfe09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8b:81:4c:83:96:4e:96:b8:cc:74:b3:c5:6e:
37:59:01:45:c8:d8:e1:64:3a:3a:84:f5:5e:b8:64:
1a:ab:01:3d:e9:a9:49:77:bc:ad:94:67:53:38:e1:
d8:26:2a:22:7d:a8:3e:a4:8d:9f:51:38:c7:b5:0d:
d7:e0:24:0c:a7:a3:32:24:23:8e:c8:11:92:2c:2b:
21:3c:3b:df:b4:85:63:b0:fe:55:14:43:41:53:32:
8c:3b:6f:75:76:71:65:a4:27:d3:6d:bf:34:53:b2:
97:79:08:6e:ba:4d:a6:cc:e4:31:9c:23:89:d9:25:
17:d7:0d:60:7d:b8:db:57:b5:c2:5a:8a:10:86:92:
ef:8c:6c:c0:5d:48:6c:bc:9e:8a:62:88:bf:2c:c7:
e8:96:51:4d:e8:44:f5:8e:15:f1:2d:3c:a7:60:7a:
e8:f5:7c:9c:23:ca:d0:61:ed:6a:5f:50:6b:58:59:
4a:27:e6:e0:52:37:af:64:7c:00:e9:c2:3f:48:76:
fc:e1:45:5e:51:19:b7:73:0e:01:44:47:64:0e:b2:
5e:36:77:db:8d:12:d0:7e:14:10:48:bd:12:81:f6:
6f:a5:63:cd:c6:f7:b6:00:91:7d:1a:52:78:6d:85:
d8:5f:b8:5a:9e:f0:60:48:1b:5d:00:4f:5b:3b:8f:
0e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:84:5E:64:4D:3E:66:E0:3A:19:79:20:95:85:25:F2:42:CF:E0:9A
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/p4ReZE0-ZuA6GXkglYUl8kLP4Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.232.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:13:78:46:dd:1b:00:85:c8:d3:a4:6f:27:e9:51:f5:8f:cd:
5b:b1:c1:f9:ab:38:11:41:cf:d5:18:8d:dc:76:0a:6a:30:8e:
6c:0c:b9:e6:f6:8b:1b:29:19:29:0e:49:e1:84:3f:c1:46:b0:
5c:31:68:f1:29:1f:60:47:12:71:0f:06:a9:b8:e7:36:2e:ef:
fc:51:b2:f4:54:67:05:af:fc:3f:7a:93:bc:fe:47:0e:a6:4a:
5e:89:d9:ae:1d:90:fb:ee:31:11:de:2e:5d:b7:e3:86:e1:a2:
64:db:47:0e:5c:d5:d1:25:d1:82:78:44:89:3e:00:fd:57:ad:
d4:05:de:2f:94:49:d9:97:95:f7:44:88:87:3f:cd:a7:80:68:
2c:96:60:fa:1c:26:a9:b7:9c:d6:73:1e:ba:97:8a:e3:7c:42:
6e:18:f2:c5:5e:c8:1e:10:93:b6:d0:03:11:5f:f8:f9:48:cb:
fb:f2:88:ae:1c:b4:6a:10:80:27:b5:89:27:a0:ca:5a:0b:f3:
62:98:b4:64:51:c3:f4:df:8b:ae:22:f9:ee:9d:84:35:cd:1a:
30:71:81:19:c1:37:a0:f6:d7:64:70:57:12:23:ab:8c:60:b2:
9a:16:d0:6a:c6:a5:76:c4:f7:59:53:46:dd:1d:c1:12:aa:a5:
56:75:a4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:33 2023 by rpki-client on console-ams.rpki-client.org