Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/42gRjalZXicU9zmsc8gT5hiWne4.roa
File: 42gRjalZXicU9zmsc8gT5hiWne4.roa (raw, json)
Hash identifier: aiZ+PwPqh3ypg6oLo2wL5cjxVfU5kcvWGcCYRQN4HS8=
Subject key identifier: E3:68:11:8D:A9:59:5E:27:14:F7:39:AC:73:C8:13:E6:18:96:9D:EE
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 0185A055DAFE62C155F67560558AB168176F
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/42gRjalZXicU9zmsc8gT5hiWne4.roa
Signing time: Wed 11 Jan 2023 10:17:39 +0000
ROA not before: Wed 11 Jan 2023 10:17:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39486
IP address blocks: 185.184.228.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 06 Feb 2023 12:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a0:55:da:fe:62:c1:55:f6:75:60:55:8a:b1:68:17:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 11 10:17:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e368118da9595e2714f739ac73c813e618969dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:b9:ae:2b:30:ba:e9:5a:71:e9:d7:ab:3c:
4f:ca:84:29:a4:d4:8c:d1:74:ef:d8:5d:fd:ed:08:
66:1f:5e:53:03:8e:52:49:54:ce:dd:c1:d7:b1:a4:
c0:6e:7f:31:dc:a2:2d:04:d8:58:43:24:ef:7e:95:
1c:36:a2:d5:e0:e3:47:5d:d0:eb:11:27:90:05:b6:
67:bb:34:7d:a0:21:41:8c:60:c8:c2:21:5b:29:6a:
50:67:5e:a3:cc:05:9e:23:da:52:ba:fb:72:54:01:
23:65:f8:70:25:57:ee:4f:db:0e:34:14:79:eb:ba:
e0:2b:3a:d1:3b:93:dd:d9:35:9f:a8:4d:dd:c2:e0:
62:12:c5:a4:0f:bd:37:40:86:94:fc:48:cc:2c:ed:
3a:26:57:8b:72:d4:22:25:c5:f8:dc:d0:1d:30:b5:
4d:42:5b:2c:64:fd:e3:61:ee:5c:5f:cb:4c:29:18:
8b:20:98:ee:72:2d:a3:ba:bd:60:89:c0:71:b3:86:
0f:98:73:66:af:4b:b4:c4:c0:69:eb:85:ad:7e:cd:
41:7a:b0:04:40:19:28:79:6c:22:40:aa:8c:aa:82:
3d:b0:83:c4:43:5a:0b:9a:95:1d:8c:8b:62:f0:21:
10:f0:7a:8a:e7:f5:91:51:f1:8d:e3:87:d0:f0:24:
bb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:68:11:8D:A9:59:5E:27:14:F7:39:AC:73:C8:13:E6:18:96:9D:EE
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/42gRjalZXicU9zmsc8gT5hiWne4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.228.0/24
Signature Algorithm: sha256WithRSAEncryption
33:53:c0:a3:d1:1c:b8:84:69:ad:6f:a9:8f:f9:8c:cc:f2:2a:
94:1b:21:e4:28:8b:51:28:41:e3:84:5d:49:6d:4f:d6:78:bf:
6d:30:1f:8f:58:9b:53:84:a0:d8:c9:93:5a:2a:6a:f9:c4:f4:
77:b6:11:5b:be:c6:70:5a:d6:1b:e4:77:25:aa:f5:a1:c0:c1:
58:3d:18:a3:b3:99:d8:91:1f:14:ae:c9:d8:0d:82:e3:b1:98:
25:d7:99:f4:3a:ad:26:50:50:79:d2:eb:7d:76:dc:1f:bb:a6:
84:80:4d:68:6d:2e:0a:94:29:97:0f:9f:43:8d:d6:eb:0f:ec:
d4:c5:73:f6:95:56:d9:b2:a4:8e:12:1c:1e:e1:88:22:3b:a7:
33:d4:2c:0f:9c:1e:ee:ae:fc:9c:50:2d:d3:02:0d:61:24:dd:
63:3f:c5:69:7d:74:89:7a:8e:7e:c7:d1:42:9e:e2:5b:75:a0:
92:80:48:57:fe:1a:68:dc:4f:52:bb:6e:55:66:8c:98:59:9a:
1c:7a:eb:c6:b3:26:eb:3f:69:5a:05:54:60:e9:2e:e6:3c:c8:
98:02:13:b9:46:83:21:2c:c4:e8:fb:6d:07:5c:7f:23:c6:a0:
8c:72:c8:46:99:47:2e:33:5c:dd:f8:f0:2f:fd:ca:b7:19:b9:
1c:ae:d2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:46 2024 by rpki-client on console-fra.rpki-client.org