Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/RDe899YJ4NTJaBt_ut3Cw2BA2QE.roa
File: RDe899YJ4NTJaBt_ut3Cw2BA2QE.roa (raw, json)
Hash identifier: 9+58aYn0fordts+EEdb2wmRXy/i7d3pw3GNSaLAouYw=
Subject key identifier: 44:37:BC:F7:D6:09:E0:D4:C9:68:1B:7F:BA:DD:C2:C3:60:40:D9:01
Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial: 018570D51232F779D93E555944D9CC1BB853
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/RDe899YJ4NTJaBt_ut3Cw2BA2QE.roa
Signing time: Mon 02 Jan 2023 04:54:49 +0000
ROA not before: Mon 02 Jan 2023 04:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202063
IP address blocks: 185.55.51.0/24 maxlen: 24
185.55.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:12:32:f7:79:d9:3e:55:59:44:d9:cc:1b:b8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Validity
Not Before: Jan 2 04:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4437bcf7d609e0d4c9681b7fbaddc2c36040d901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e0:00:48:3b:75:ba:0c:7f:7a:64:b6:76:68:
6e:60:b9:f5:12:a7:55:89:35:e7:75:5f:cc:e2:55:
2c:37:2a:b1:15:4e:b2:e4:0a:9a:73:62:19:af:3f:
06:2b:1e:47:6b:a5:e8:aa:97:c6:d2:71:99:3f:b5:
35:e0:af:ce:bd:a2:7b:c8:04:ab:ac:a2:f8:5c:d6:
d6:ae:0b:22:6e:a1:2f:55:90:04:a4:d4:f3:af:6f:
2a:b2:09:03:12:ed:03:6e:20:fe:8a:bc:ba:bd:f4:
9f:46:c6:09:0d:26:38:9f:2b:b4:5c:80:d5:bf:db:
0b:38:2c:d8:90:c2:f5:80:70:19:49:2f:5c:13:45:
0f:88:f9:7c:79:5e:c2:d7:a8:71:14:5d:c8:6b:e0:
a8:92:07:92:49:80:6d:cf:c7:6a:75:f1:e7:00:45:
da:09:16:e1:c2:a7:1d:ed:d0:a3:b5:8f:d9:cf:3d:
0d:12:f2:8e:37:9c:89:41:44:ca:4b:5a:99:cd:57:
86:5f:ab:e8:2a:0d:ae:81:9c:29:f4:0b:1f:e8:1f:
81:a3:3a:fc:52:4a:eb:30:df:34:91:a5:54:d1:ad:
d3:67:cc:8e:9c:ff:2c:3d:b6:f8:17:bb:82:5e:6e:
59:a8:61:2c:35:6b:80:ca:75:fc:49:c5:c1:e8:f1:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:37:BC:F7:D6:09:E0:D4:C9:68:1B:7F:BA:DD:C2:C3:60:40:D9:01
X509v3 Authority Key Identifier:
keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/RDe899YJ4NTJaBt_ut3Cw2BA2QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.48.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:cc:24:8f:e3:f2:80:e1:8e:12:d3:ca:8d:f1:b5:d7:77:91:
21:19:ee:19:6c:09:87:87:24:5a:91:9a:2d:01:d9:80:d4:6c:
91:fa:12:db:47:07:55:69:17:34:9a:1f:9d:09:50:37:04:87:
55:fd:c2:88:e6:2e:6c:ff:1e:76:3f:b5:fd:96:90:c1:90:4a:
39:5c:52:06:96:35:74:23:85:dd:bd:a1:e7:c5:c3:27:61:dd:
b8:b7:9e:71:2c:dc:d8:4a:dc:a7:a7:c9:c7:a9:33:3f:1e:e4:
6a:55:88:59:d8:dc:3b:ea:a9:9f:67:8c:d8:94:f5:db:25:f6:
01:b1:fc:e6:50:6b:c0:df:a3:ab:6c:80:f4:11:3f:b0:2a:76:
c6:3e:63:12:a4:25:27:17:20:0a:b1:73:35:46:f8:ba:34:d8:
ea:84:8e:35:73:4b:1c:d1:6b:96:43:bc:b6:9f:33:35:25:c0:
76:06:a0:d7:85:9d:ca:4e:62:2b:4f:f6:6c:21:fe:3c:42:04:
96:ae:1b:f2:65:2c:20:69:45:52:a0:b2:10:bc:f0:26:a2:85:
01:1c:45:17:5b:e6:e6:ee:7c:95:45:a8:bc:cd:26:98:c3:f2:
e1:70:ac:d6:39:ab:21:39:d5:7b:f1:b8:7b:0b:a6:fa:02:32:
00:56:66:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:02 2024 by rpki-client on console-fra.rpki-client.org