Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/DwNZ7r-iXAofZAIuJp5ptWLbbCY.roa
File: DwNZ7r-iXAofZAIuJp5ptWLbbCY.roa (raw, json)
Hash identifier: GU8vvToklNMaKcRHibR+JkWDMRt7Weu7J5+sujfG2yo=
Subject key identifier: 0F:03:59:EE:BF:A2:5C:0A:1F:64:02:2E:26:9E:69:B5:62:DB:6C:26
Certificate issuer: /CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Certificate serial: 018A93A9168460CAD4422FB70DE486DFA1E2
Authority key identifier: BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/DwNZ7r-iXAofZAIuJp5ptWLbbCY.roa
Signing time: Thu 14 Sep 2023 12:27:26 +0000
ROA not before: Thu 14 Sep 2023 12:27:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201609
IP address blocks: 185.63.204.0/22 maxlen: 24
2a03:ee0::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:a9:16:84:60:ca:d4:42:2f:b7:0d:e4:86:df:a1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Validity
Not Before: Sep 14 12:27:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f0359eebfa25c0a1f64022e269e69b562db6c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:ae:8e:ec:22:73:91:5f:73:45:0c:da:15:
b0:41:5e:82:07:cc:92:bf:e0:c3:59:83:dc:95:49:
90:d0:cd:0a:fe:2a:4a:44:83:9c:f2:c2:fd:87:4d:
03:0f:0d:9d:e4:22:8b:65:6c:7f:66:2a:17:fc:2b:
df:b5:c8:2b:08:44:13:8f:bb:d8:a4:28:ec:02:33:
20:28:de:bb:89:82:c3:39:cd:61:fa:ee:fc:f2:82:
90:55:28:c5:72:e8:ae:7c:39:a6:8b:57:a0:33:49:
c4:dc:b0:18:74:0b:84:08:8b:f9:5f:b3:3c:2a:85:
12:90:d6:0d:7f:0b:8d:45:7c:f7:78:84:53:94:cf:
ef:de:91:70:63:77:a0:45:16:d9:d5:4e:41:d3:d4:
9e:60:44:7f:84:2a:be:4c:77:85:be:3d:24:a2:7e:
51:fc:2d:cc:17:47:46:41:5e:74:e4:3e:5b:47:98:
66:32:34:40:1c:c3:9f:4d:d0:9c:52:5a:ec:58:b3:
e8:de:80:41:c9:6c:65:2c:2a:96:8f:01:76:d6:0f:
21:bb:be:a3:67:b3:b6:09:9c:6c:f3:46:34:e3:a3:
88:7f:fe:fc:1a:f2:3e:ed:84:a2:8b:9c:0c:fe:03:
ec:28:29:04:5e:91:7b:4b:58:16:54:12:e9:45:f2:
7d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:03:59:EE:BF:A2:5C:0A:1F:64:02:2E:26:9E:69:B5:62:DB:6C:26
X509v3 Authority Key Identifier:
keyid:BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/DwNZ7r-iXAofZAIuJp5ptWLbbCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.204.0/22
IPv6:
2a03:ee0::/29
Signature Algorithm: sha256WithRSAEncryption
c6:c2:26:ad:97:d1:0a:f6:e6:0b:d3:f8:f5:57:27:e4:15:cd:
65:83:95:0b:d1:8b:8d:e8:29:c5:60:de:21:47:a7:5f:d6:98:
4a:cd:ff:40:0b:a0:62:17:2d:20:21:07:09:57:2e:6b:c6:8d:
4c:b0:2a:11:7c:a2:b4:38:07:de:9b:f1:bf:ca:08:7a:99:fc:
29:ad:49:e6:f3:eb:4c:50:46:5f:09:ef:8a:3b:c6:d4:86:2b:
fd:a7:e4:fc:b8:75:ff:ce:6f:ad:54:fd:56:36:5b:3b:70:e1:
c6:62:97:a8:fd:a5:ee:2a:6b:4e:ce:41:78:94:10:d8:ed:00:
ff:8b:70:7c:f6:c6:c4:fd:13:19:f8:b6:94:f9:14:cd:b9:ea:
a4:fe:08:1f:bb:87:c6:4c:5d:c4:57:3d:ee:cb:e7:15:9b:ad:
d9:41:5d:2f:06:df:9e:aa:40:e2:76:3e:09:f0:e7:e4:64:7f:
90:5c:cf:3d:e3:0d:b3:2e:6b:53:97:44:bb:b6:79:97:4f:1a:
16:3b:9a:f9:36:cd:1e:f8:90:a0:79:7c:25:f9:bf:27:5c:6c:
6c:45:68:1a:74:1a:d9:53:b2:54:aa:6b:2e:4e:fd:44:36:56:
2a:fb:e9:71:9c:53:fd:7a:ec:55:b4:1b:95:74:28:a2:9c:06:
05:fc:17:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:41 2024 by rpki-client on console-fra.rpki-client.org