Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/T5dJjtLqCp6x6u0vu1eOCRZ7rwc.roa
File: T5dJjtLqCp6x6u0vu1eOCRZ7rwc.roa (raw, json)
Hash identifier: mTW9xbi9z1k/9g0NRH65thF4zMMknBEq2LdMHk5g0Go=
Subject key identifier: 4F:97:49:8E:D2:EA:0A:9E:B1:EA:ED:2F:BB:57:8E:09:16:7B:AF:07
Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial: 01856D0AB8BD4FC4A94088674154B8153F56
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/T5dJjtLqCp6x6u0vu1eOCRZ7rwc.roa
Signing time: Sun 01 Jan 2023 11:14:57 +0000
ROA not before: Sun 01 Jan 2023 11:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31726
IP address blocks: 185.102.28.0/22 maxlen: 22
2a06:2240::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:b8:bd:4f:c4:a9:40:88:67:41:54:b8:15:3f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
Validity
Not Before: Jan 1 11:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f97498ed2ea0a9eb1eaed2fbb578e09167baf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:ea:6b:68:2f:9a:33:43:f7:da:c3:ac:f8:
64:b8:01:89:77:57:4d:df:70:70:26:67:2e:9d:02:
54:6a:51:85:b5:84:92:3f:1e:39:99:01:d6:36:e9:
8e:d9:4a:3c:f5:e7:a0:bf:56:2b:46:34:17:ec:c7:
8c:d5:76:62:0f:0d:a5:0c:cd:5b:e1:c8:3c:1b:23:
51:0d:f8:0f:89:9c:03:3e:63:58:79:a7:b9:44:24:
cc:cf:74:1d:07:e1:f6:7f:4d:85:44:e2:27:2f:77:
12:ae:58:64:a7:b1:b3:4a:a9:74:83:3a:49:8b:30:
c5:d9:31:08:33:da:c5:87:9b:5b:fe:19:94:1e:18:
2f:d7:4a:ba:00:51:21:b1:97:17:ce:27:61:14:ad:
dc:9f:2b:59:74:98:9a:2a:4c:97:57:1e:ff:b0:13:
f3:c7:a8:76:b1:24:17:11:75:b2:44:8c:14:ce:15:
36:e9:cf:bc:c8:c7:7a:97:b9:25:5a:42:ab:c5:e4:
2d:39:2b:91:e9:62:ec:60:9b:5c:6d:cb:e4:80:24:
74:e8:9e:6a:6c:c6:2a:26:e6:0b:59:5d:10:d6:0f:
eb:ee:6d:e4:8d:df:d8:30:08:67:25:58:51:51:bf:
3d:54:3f:f4:86:bf:f6:6a:3e:50:0f:9d:46:8f:02:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:97:49:8E:D2:EA:0A:9E:B1:EA:ED:2F:BB:57:8E:09:16:7B:AF:07
X509v3 Authority Key Identifier:
keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/T5dJjtLqCp6x6u0vu1eOCRZ7rwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.28.0/22
IPv6:
2a06:2240::/29
Signature Algorithm: sha256WithRSAEncryption
7c:58:4a:bb:25:e5:b0:ad:3e:4f:d9:4d:5e:59:69:a6:8e:39:
71:ca:38:aa:86:83:5e:af:16:98:b1:4d:1b:7e:f7:79:cc:6d:
40:60:78:ad:97:1d:1c:49:6d:25:1a:41:96:3f:2f:b8:7f:71:
f4:ae:1b:6d:c9:49:c5:e1:12:01:3b:cc:3d:c6:70:02:69:55:
a8:2d:8a:79:ad:1b:1a:0a:e9:3c:bd:6f:6c:68:4c:46:76:00:
9f:77:a7:45:dc:ae:45:64:61:56:09:2a:18:1b:1a:09:5e:75:
3c:d9:7c:08:d3:b2:e5:c5:50:d4:37:0d:7d:e3:1e:2c:53:1d:
c3:3f:cd:df:23:c9:5a:be:81:7e:d1:40:45:96:f7:cc:da:be:
c2:13:d2:ab:55:04:c6:db:ce:f7:36:c6:35:32:e3:4c:8a:61:
9b:06:17:6e:e0:e8:87:6c:ed:97:a1:ce:9d:36:c7:ab:6b:8e:
3d:ea:56:bf:84:80:ac:83:31:d5:8c:a3:e0:20:28:b6:f2:0f:
28:bb:39:eb:0f:da:96:9b:fa:47:d8:00:39:e8:0f:b8:97:3d:
24:ad:f3:04:ec:ba:7b:f5:1b:b8:2f:25:ca:cd:41:d4:16:37:
3e:f2:5f:95:d2:ef:eb:bc:f2:81:ac:15:fc:05:00:ed:14:2d:
3a:03:a7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:13 2024 by rpki-client on console-fra.rpki-client.org