Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/s95UjH-282V5_Wjho9pEQrvMLEk.roa
File: s95UjH-282V5_Wjho9pEQrvMLEk.roa (raw, json)
Hash identifier: SeZdkgZGZrhvl/BM62jeyQhS7HtDebI/x8u9HJHluFU=
Subject key identifier: B3:DE:54:8C:7F:B6:F3:65:79:FD:68:E1:A3:DA:44:42:BB:CC:2C:49
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 018B6721E4C4F3500B4249A29E05F56848B2
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/s95UjH-282V5_Wjho9pEQrvMLEk.roa
Signing time: Wed 25 Oct 2023 13:59:16 +0000
ROA not before: Wed 25 Oct 2023 13:59:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61112
IP address blocks: 185.155.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:21:e4:c4:f3:50:0b:42:49:a2:9e:05:f5:68:48:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Oct 25 13:59:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3de548c7fb6f36579fd68e1a3da4442bbcc2c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:31:fa:4a:4d:a2:20:b6:f0:fc:fc:6f:eb:
ac:24:a8:86:09:28:74:75:49:eb:b3:5f:dd:f3:d2:
27:b8:91:a0:4d:8e:26:be:3f:c8:a7:65:50:21:f9:
68:bf:3c:fc:d9:a5:fe:6c:f0:17:aa:34:fa:c4:30:
76:b9:53:9d:3b:87:7b:09:56:6b:5a:ed:63:a3:17:
2b:93:5b:76:ad:1a:6f:47:09:ad:1b:b9:20:8f:d5:
86:64:78:44:7c:0e:40:75:08:b9:72:9b:2c:fa:96:
71:fd:1c:6d:c0:cc:8c:f7:f6:87:1e:9b:5d:b0:ea:
26:62:cb:16:84:c9:a8:62:b6:9b:f3:db:84:0c:fb:
d4:08:e6:77:97:8b:37:c1:1a:d0:77:7a:20:10:ad:
fa:5a:2e:b2:87:76:27:6f:12:59:9e:c3:6c:65:8e:
33:25:0f:1c:69:b5:23:cc:12:8c:62:69:c1:a7:5c:
31:2e:49:2b:bf:07:6c:62:9c:3e:55:c5:2b:3f:75:
7c:ec:66:44:62:98:e1:6c:61:55:08:35:f2:b1:97:
4e:e8:8c:c5:d2:bb:09:ce:39:6b:06:e8:38:4b:b0:
5c:05:01:a1:ae:9e:50:54:70:45:7a:4a:00:45:f3:
6d:7a:a2:2e:8c:65:20:1a:c5:73:de:a9:15:02:e5:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DE:54:8C:7F:B6:F3:65:79:FD:68:E1:A3:DA:44:42:BB:CC:2C:49
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/s95UjH-282V5_Wjho9pEQrvMLEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.235.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d0:51:33:27:ac:a6:fb:99:45:40:bf:cd:c2:67:be:4a:dd:
bb:f1:b8:26:bc:67:98:12:97:ec:42:07:b3:80:fb:99:96:6f:
12:5e:cf:1e:be:5f:bb:50:ea:32:43:27:01:37:8d:7b:fa:9a:
4d:01:e8:b5:c2:64:c7:c1:98:da:fe:f0:d7:2d:91:f5:b7:71:
40:aa:e6:7f:16:df:ff:59:b4:82:72:a2:0c:fa:bc:1e:36:ef:
82:71:ae:4a:ea:5b:0b:b2:3a:fb:e8:fd:92:20:b4:60:e2:f9:
ad:3f:03:8c:2e:06:e4:e6:be:a3:58:5b:5e:8d:b4:68:b3:23:
49:2c:3f:e0:d9:29:89:76:93:7b:80:51:3b:4c:f2:db:f5:36:
9e:d1:a2:7f:6d:2d:56:35:df:63:bf:7f:c8:25:de:c8:64:33:
39:75:37:dc:49:40:25:9b:c3:56:eb:a5:38:61:d2:b0:74:fa:
20:a7:cb:48:8b:b9:b7:b9:6e:1b:b8:02:2c:e3:d8:9a:2f:ab:
a3:bb:30:ca:43:d8:45:22:6d:ec:d6:3a:90:68:21:4c:78:d6:
1c:03:b9:bc:7f:b9:aa:01:28:5f:9c:ce:94:f6:fc:77:c6:eb:
16:24:97:f6:13:b3:8f:56:5d:51:de:5f:a1:75:85:39:c9:a8:
d8:20:e6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:02 2024 by rpki-client on console-ams.rpki-client.org