Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/dIAq91TYuO-7RZEQEnQXWublMhk.roa
File: dIAq91TYuO-7RZEQEnQXWublMhk.roa (raw, json)
Hash identifier: +QQO5WgcGrgGBwOWTWNU+AgTH13itCd5MVAK9IpbSh8=
Subject key identifier: 74:80:2A:F7:54:D8:B8:EF:BB:45:91:10:12:74:17:5A:E6:E5:32:19
Certificate issuer: /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial: 01856FE7145545BDF3C150C21F353CF5E8AB
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/dIAq91TYuO-7RZEQEnQXWublMhk.roa
Signing time: Mon 02 Jan 2023 00:34:53 +0000
ROA not before: Mon 02 Jan 2023 00:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200797
IP address blocks: 185.95.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:14:55:45:bd:f3:c1:50:c2:1f:35:3c:f5:e8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Validity
Not Before: Jan 2 00:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74802af754d8b8efbb4591101274175ae6e53219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:fe:76:5d:81:8b:da:e9:f6:9d:c2:cf:b5:
ff:9e:1a:45:6f:18:64:33:f5:74:37:56:8a:80:cc:
a3:c8:d5:19:8d:8f:e2:e3:0a:6e:6e:29:3e:b8:15:
88:1e:c0:7a:86:3a:65:62:43:ae:44:d2:93:bd:fd:
32:92:96:6d:4a:7a:64:96:6c:12:be:bc:8c:ce:99:
ed:12:7b:d4:62:7b:ea:98:29:a0:91:ae:7b:da:f4:
d9:db:54:5c:1f:1b:d6:23:c2:2b:99:50:c7:97:da:
df:a6:c4:05:3f:8a:8d:90:b1:35:a4:d4:56:d4:b7:
68:07:8d:f7:83:2a:d5:f5:b5:38:81:55:9f:aa:09:
4b:25:59:98:10:b9:b5:4f:cb:58:87:53:30:fe:19:
9a:f9:63:21:fa:97:a8:f2:61:40:4d:d4:df:12:1e:
b8:af:0a:af:0a:c9:96:32:aa:8c:bc:73:35:a3:cc:
0e:20:6d:3f:3b:dc:65:41:1e:79:57:ff:8f:a2:c5:
95:58:4f:67:b2:24:64:3e:41:dc:fd:5b:30:3b:47:
20:12:03:68:23:ae:1a:67:f8:08:af:94:68:17:58:
4c:4f:9e:12:25:e2:22:cb:61:cc:a9:f4:fb:fe:da:
44:5d:06:38:4a:15:c6:c1:9c:89:fc:6b:87:ce:d5:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:80:2A:F7:54:D8:B8:EF:BB:45:91:10:12:74:17:5A:E6:E5:32:19
X509v3 Authority Key Identifier:
keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/dIAq91TYuO-7RZEQEnQXWublMhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:54:4a:42:e8:95:92:4c:d5:7c:0c:0b:f5:5f:24:da:29:d6:
9a:2d:b3:b6:9c:5a:c0:d2:ca:f7:c4:48:93:69:2c:9a:e9:ef:
74:71:59:7a:9b:04:6c:fd:fd:14:1b:fe:9a:30:ef:dc:c9:ad:
29:8f:fa:f7:ee:e0:63:75:7a:22:07:5d:a7:c7:2f:df:1a:66:
91:38:a3:4b:35:d0:03:9e:6e:cf:f0:d8:35:5b:1e:bf:85:6a:
e5:0b:9d:91:a1:51:03:d1:46:1a:6d:bc:2b:f5:d5:01:f9:01:
97:6d:6f:28:4a:b7:26:ed:6d:02:0d:da:56:67:86:8b:d5:99:
bb:d8:0b:8c:44:fa:93:bf:5e:94:00:6a:11:1e:80:8d:c7:25:
30:b5:a1:97:41:b2:2a:98:7b:88:c1:f2:80:e0:08:72:92:ba:
9f:bc:fb:3f:50:8a:aa:ed:3f:d4:5e:1c:bb:7f:b8:01:fd:b3:
d8:ca:e9:14:01:3f:71:61:59:35:3c:0c:83:1f:81:1c:14:97:
ad:f2:5b:67:b8:c9:17:6e:48:e0:95:ae:dd:f2:c8:88:55:f8:
30:1f:64:29:6e:6f:2b:29:d5:83:c3:1d:0f:da:a2:b2:78:b4:
8f:1b:20:57:a9:d0:21:1d:6f:d9:fa:68:f3:07:76:fa:70:99:
16:3d:5b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:39 2024 by rpki-client on console-fra.rpki-client.org