Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/NxxMU2uPkRWaX2uXa0dgk4CgXvA.roa
File: NxxMU2uPkRWaX2uXa0dgk4CgXvA.roa (raw, json)
Hash identifier: dpP6akn1H1jL6DpjgCJ/Dh0YxyYPHCCxs/J+wTDjoIk=
Subject key identifier: 37:1C:4C:53:6B:8F:91:15:9A:5F:6B:97:6B:47:60:93:80:A0:5E:F0
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 0185713089CE2456FDD51A63BD5BE1E00A1D
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/NxxMU2uPkRWaX2uXa0dgk4CgXvA.roa
Signing time: Mon 02 Jan 2023 06:34:44 +0000
ROA not before: Mon 02 Jan 2023 06:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206874
IP address blocks: 185.164.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:89:ce:24:56:fd:d5:1a:63:bd:5b:e1:e0:0a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: Jan 2 06:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=371c4c536b8f91159a5f6b976b47609380a05ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:07:ea:58:a1:0a:e2:91:9a:7b:f1:40:b2:e0:
41:c5:fd:1a:0a:67:63:f4:2d:37:84:1e:72:3e:c3:
e0:2f:88:68:7c:c7:88:8a:ab:e7:51:a4:39:c2:a3:
60:36:95:f9:7f:42:23:e4:86:f0:bb:a2:98:bb:56:
66:44:d7:85:69:f2:bc:43:73:08:47:30:98:df:0a:
cf:9e:97:1d:be:6d:ef:2c:f0:3c:ce:62:b5:4d:8a:
38:e6:a8:65:f3:f0:4c:07:bc:71:5a:d1:5c:0f:cd:
08:83:6a:f4:06:fe:3c:35:b7:d8:1f:33:06:f1:a7:
63:7a:7e:c4:53:ee:64:96:32:ed:7f:67:bf:76:35:
85:4e:47:de:6f:6d:07:7d:61:cc:b7:4e:f7:51:90:
eb:3c:9c:8f:d6:23:71:c8:7e:a8:ba:e0:d2:7d:6e:
67:8c:33:8a:78:97:be:ee:ff:b4:93:6d:10:84:00:
4b:16:1a:4c:45:66:9d:63:a8:09:5f:39:8b:59:49:
e2:e6:71:f4:f0:72:8e:99:1c:d9:0c:78:12:c3:f5:
66:05:38:6e:2d:31:46:fb:5e:06:fa:ee:e1:70:3b:
54:80:de:a3:15:5a:2a:cc:89:eb:e1:58:bd:b8:3f:
79:0a:04:8b:f8:ab:60:bb:16:fe:ed:fb:57:8f:7d:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1C:4C:53:6B:8F:91:15:9A:5F:6B:97:6B:47:60:93:80:A0:5E:F0
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/NxxMU2uPkRWaX2uXa0dgk4CgXvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.124.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:6f:21:03:7d:88:4f:89:e9:1f:f7:1d:99:e2:12:ca:21:3d:
89:ce:46:9e:11:6d:3d:61:60:4d:e1:15:33:9f:37:b2:ac:34:
aa:5f:34:db:c6:43:4b:8f:38:ad:74:97:8e:84:45:11:e0:41:
3c:48:d4:22:bf:14:68:19:25:bc:af:58:fb:35:b3:22:10:ca:
48:4e:4f:1b:d5:cf:f4:8f:b2:87:4b:5b:5a:e2:80:59:ac:23:
e8:0f:ed:5e:f0:1d:8f:88:e3:26:3e:86:0a:30:62:ce:9e:19:
bd:8b:04:73:e4:f6:50:60:08:e8:0c:12:45:7f:6c:80:13:37:
63:4f:04:8c:0e:28:8f:f9:4b:e2:38:88:7e:7b:d5:92:4f:e0:
d7:65:22:24:8e:f3:d2:de:0f:56:6b:fb:ae:87:10:6f:b7:9d:
7a:1c:08:ce:e7:51:63:f5:8d:86:57:f1:72:71:e2:24:31:ea:
ce:df:38:f1:e8:83:f9:5b:c5:89:d6:dc:6a:14:fd:66:c1:2e:
fa:09:6a:45:7b:e0:f0:4f:c6:61:f1:b1:d6:88:7d:b2:27:b8:
23:4a:97:3e:5d:f6:7b:ee:7a:2d:9d:be:0b:ab:36:5a:19:21:
df:e4:e5:49:74:85:f7:37:0a:65:0a:3a:24:fa:11:b2:48:ad:
26:2d:65:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:48 2024 by rpki-client on console-ams.rpki-client.org