Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/P94cdZf-Ugmp48jj-5pJgDmC4vk.roa
File: P94cdZf-Ugmp48jj-5pJgDmC4vk.roa (raw, json)
Hash identifier: ArQZKA92q3/TvjTUi49syLcMMlJdLyQNGtyKgqW5ySg=
Subject key identifier: 3F:DE:1C:75:97:FE:52:09:A9:E3:C8:E3:FB:9A:49:80:39:82:E2:F9
Certificate issuer: /CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Certificate serial: 018AAD42CA524E331E0783B6AEBF9A011C14
Authority key identifier: B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/P94cdZf-Ugmp48jj-5pJgDmC4vk.roa
Signing time: Tue 19 Sep 2023 11:45:50 +0000
ROA not before: Tue 19 Sep 2023 11:45:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204411
IP address blocks: 185.235.162.0/24 maxlen: 24
185.235.160.0/24 maxlen: 24
185.235.160.0/22 maxlen: 22
185.235.163.0/24 maxlen: 24
185.235.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:42:ca:52:4e:33:1e:07:83:b6:ae:bf:9a:01:1c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Validity
Not Before: Sep 19 11:45:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fde1c7597fe5209a9e3c8e3fb9a49803982e2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:98:2c:4b:9c:2a:7b:17:27:04:0b:d2:7b:56:
9e:67:2c:c5:4e:cd:fa:58:03:f8:5f:03:e5:ee:02:
47:62:4f:93:f0:8b:09:d2:60:b2:25:d0:39:46:d5:
da:04:9c:2c:30:b1:eb:f4:96:88:67:b7:43:3b:28:
14:b4:e3:59:2d:81:88:63:cb:5d:cb:e2:54:4c:1c:
56:7d:91:ea:fb:26:77:52:72:ca:d7:5e:da:71:c6:
d8:f5:00:ff:52:8f:8b:2e:01:2f:6d:0f:7a:33:52:
cc:fe:b2:47:13:fe:73:d9:45:21:f3:e2:0c:34:81:
f4:9d:86:f4:93:e6:a9:55:19:59:49:ce:bf:fb:58:
34:ed:5f:02:ff:d4:ba:88:43:c8:20:82:cf:e3:cc:
0d:ae:27:74:1d:e7:d3:e5:32:ea:53:2c:4b:df:07:
49:e5:fd:f0:63:ed:6a:62:47:bd:b8:40:80:74:bb:
a0:fc:07:a2:65:e3:f9:57:e4:1e:dd:f1:c3:89:ff:
73:79:26:e5:41:89:6b:8e:e8:bd:7a:26:8e:f8:71:
a7:ea:bf:f4:bd:3c:d2:39:91:f5:5e:e4:52:24:11:
8e:26:e8:f0:7e:95:90:54:17:89:fc:76:fe:1f:cc:
71:cf:5b:a7:40:58:fc:7f:ad:94:79:be:cd:8a:a0:
41:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DE:1C:75:97:FE:52:09:A9:E3:C8:E3:FB:9A:49:80:39:82:E2:F9
X509v3 Authority Key Identifier:
keyid:B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/P94cdZf-Ugmp48jj-5pJgDmC4vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.160.0/22
Signature Algorithm: sha256WithRSAEncryption
19:4f:dc:dc:5f:c0:64:b9:91:2c:01:16:c1:91:80:7d:af:ea:
f6:df:88:b5:f1:de:4d:6a:ad:75:0e:3f:62:7b:98:c1:34:a5:
7e:b2:5c:3f:02:90:dd:49:31:18:fe:97:62:1f:3d:55:ea:f9:
29:a9:f2:be:46:5b:17:31:b5:f7:59:78:05:2c:b9:89:e9:7f:
40:52:84:59:36:70:4b:ed:48:04:ee:50:c3:e4:5e:81:fe:5a:
42:6e:98:54:1a:7b:f3:6c:df:e8:e5:ba:44:0b:47:81:cd:33:
31:ef:1f:dd:30:f2:b7:72:43:29:33:c6:60:1c:ca:d2:e9:1b:
fb:d1:d1:5e:da:5f:23:9b:5c:b2:57:c4:79:81:52:82:54:6a:
6f:ff:7d:3d:18:fe:58:a7:41:5f:69:ca:4b:8d:ae:e8:d2:7e:
3f:12:5f:ac:58:45:39:68:e2:9b:8e:67:5d:e4:be:8a:cc:92:
c7:0d:04:6b:b4:4c:5d:e1:36:43:84:31:7e:20:ef:cc:50:a5:
1a:f3:33:6c:85:6a:7f:97:ff:b5:74:32:0a:51:98:b0:ad:86:
ad:1d:07:09:6a:9b:f5:60:b9:5c:74:63:0c:6a:2f:3b:e5:0b:
34:a8:00:7b:fb:52:98:b2:48:dd:b3:68:41:a4:ce:4d:37:da:
31:34:52:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:15 2024 by rpki-client on console-ams.rpki-client.org