Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/hO2c7nWtA6XTQzreb-WKJokQNf8.roa
File: hO2c7nWtA6XTQzreb-WKJokQNf8.roa (raw, json)
Hash identifier: 5HUJmDXX01u2JH+pYtHUpPm04PT6HSXHvjmZxi/GrBo=
Subject key identifier: 84:ED:9C:EE:75:AD:03:A5:D3:43:3A:DE:6F:E5:8A:26:89:10:35:FF
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0188C9089B4C4E8BA25E8EAA956AFCF4A0E3
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/hO2c7nWtA6XTQzreb-WKJokQNf8.roa
Signing time: Sat 17 Jun 2023 11:06:04 +0000
ROA not before: Sat 17 Jun 2023 11:06:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55154
IP address blocks: 212.90.100.0/23 maxlen: 24
185.80.196.0/23 maxlen: 24
188.253.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jul 2023 06:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c9:08:9b:4c:4e:8b:a2:5e:8e:aa:95:6a:fc:f4:a0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 17 11:06:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84ed9cee75ad03a5d3433ade6fe58a26891035ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:db:28:21:f3:5c:f1:37:12:26:bf:33:fb:82:
4b:49:a3:d5:bf:59:f8:b1:8d:87:b7:9a:51:c8:2d:
9f:bd:6d:e1:8b:65:43:41:0d:7c:2d:91:79:f8:84:
c0:4b:66:6c:dd:23:59:0f:47:fd:4f:77:b0:1c:d4:
fd:6b:87:72:a7:41:05:7f:e7:dd:d5:eb:eb:81:9f:
0a:db:39:cc:f1:9a:92:c7:8e:77:1d:c9:37:7c:4e:
03:5f:61:2e:07:0e:48:a4:ed:19:f8:53:39:c3:95:
91:cc:54:ef:6d:f6:af:34:5c:aa:19:9d:b3:01:a4:
fb:cc:67:9d:b3:68:16:7f:50:bf:28:f3:f4:8a:e1:
c6:b5:ce:47:24:d4:f0:ea:f8:9d:91:8f:97:30:30:
c6:7d:99:2d:51:af:2b:b3:44:7e:8f:62:cd:ff:14:
f6:2c:3b:34:aa:b8:7e:d3:0d:34:aa:d5:74:8e:d9:
e3:df:f3:fc:15:de:90:ba:16:0a:41:cf:d4:da:f8:
41:8c:4e:15:55:82:b1:e8:e8:72:6a:b6:ce:c2:ea:
9b:5c:f6:68:cc:8a:f0:33:d1:19:ec:a5:84:ae:6c:
e4:c4:8d:97:84:e0:ee:4a:83:2a:8a:3a:eb:42:71:
09:f6:71:52:9a:db:88:2f:d6:9d:47:7c:3e:44:e3:
1e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:ED:9C:EE:75:AD:03:A5:D3:43:3A:DE:6F:E5:8A:26:89:10:35:FF
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/hO2c7nWtA6XTQzreb-WKJokQNf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.196.0/23
188.253.4.0/22
212.90.100.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:75:37:51:86:01:1a:e7:96:7d:cb:b7:c4:04:46:d9:68:10:
fc:2d:83:63:aa:12:4b:6f:4d:00:24:bb:43:ac:f7:2a:05:ab:
ce:b6:a4:2a:4b:f9:32:0d:ad:4b:fa:24:82:f5:37:63:e5:12:
ae:b5:ca:f6:b8:0b:3e:4a:23:ac:fb:b3:ea:b1:93:20:b2:0a:
21:01:68:20:5b:1f:6a:4d:68:5d:c4:fc:ca:ef:bf:68:a5:47:
27:e9:72:66:37:fb:2b:2b:56:fc:eb:76:7d:6c:b2:ca:e2:c3:
18:fb:68:9e:39:36:b0:5b:cc:f9:13:3e:02:e7:03:b8:c9:ed:
dd:31:1a:34:c8:aa:a6:74:eb:bf:87:50:11:22:1f:58:40:22:
59:c7:77:51:87:43:bb:e9:be:da:f6:61:25:2f:be:0d:24:66:
ab:db:f5:72:c1:26:4a:2a:6b:29:64:4a:7a:10:bd:de:de:40:
06:46:03:ec:e2:9c:1e:d6:f0:70:d6:70:a0:de:5e:c2:9e:f8:
7e:54:29:f3:50:6f:b0:c4:44:b8:de:9d:fe:a2:c3:66:6e:92:
63:20:74:a8:b0:ef:8f:bc:63:12:23:db:da:ed:23:f6:63:16:
e5:f5:50:2c:8f:c2:2b:c9:9b:48:9c:07:15:6b:f4:89:21:51:
a9:7d:1a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:16 2024 by rpki-client on console-ams.rpki-client.org