Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/58dQhjWCVhxqIIvWB4TzKrCJ0iw.roa
File: 58dQhjWCVhxqIIvWB4TzKrCJ0iw.roa (raw, json)
Hash identifier: LlihSRNTxtv949WXdAASnVVhoPq031AB49ygOVYBpx0=
Subject key identifier: E7:C7:50:86:35:82:56:1C:6A:20:8B:D6:07:84:F3:2A:B0:89:D2:2C
Certificate issuer: /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Certificate serial: 01857082A50B868F23C79F7F5FDC3300197A
Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/58dQhjWCVhxqIIvWB4TzKrCJ0iw.roa
Signing time: Mon 02 Jan 2023 03:24:48 +0000
ROA not before: Mon 02 Jan 2023 03:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41906
IP address blocks: 185.88.118.0/23 maxlen: 23
185.88.116.0/23 maxlen: 23
185.88.116.0/22 maxlen: 22
2a05:ca40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:a5:0b:86:8f:23:c7:9f:7f:5f:dc:33:00:19:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Validity
Not Before: Jan 2 03:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7c750863582561c6a208bd60784f32ab089d22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:96:98:9a:5e:4e:b9:18:a1:61:c8:e1:50:fe:
51:f3:d5:19:93:87:f2:f6:b9:40:3e:46:67:05:fd:
f1:05:5d:85:e8:c0:07:72:3f:61:c3:5e:f0:78:fb:
a5:ed:2c:76:95:7e:7d:68:a9:f4:6c:11:ac:45:04:
8d:88:33:3f:f9:67:25:ba:e3:20:ea:b1:f7:f9:e4:
6f:3e:0f:fd:38:fe:ed:15:cc:8f:0a:2e:67:b1:e5:
8f:43:25:d8:54:71:3a:4b:b7:da:0e:fa:cf:3e:d2:
5c:43:31:92:6a:cb:87:8a:fe:3a:01:a2:a1:2e:bf:
c0:c0:2d:a1:15:c9:9d:0a:e1:61:7a:b5:7b:0d:01:
8b:39:1a:b3:4f:0f:60:b7:c1:39:d1:22:31:f7:47:
f3:8b:0c:ad:16:9e:66:cd:1a:e4:a4:17:5f:f3:e5:
7a:03:f8:91:c9:88:00:6a:c0:b9:56:c7:88:be:f8:
c8:df:be:1c:af:fb:ba:23:e5:d8:1e:cd:72:44:54:
4f:5b:83:95:d5:c7:f8:91:2e:6d:72:9a:b4:d6:88:
1d:ee:5e:3f:e4:4b:b7:f5:2e:0a:a0:1a:0a:b1:eb:
d7:a6:28:ca:c2:33:c2:74:b1:0a:03:62:e5:1d:b0:
dc:dd:9d:88:7b:86:bc:5e:b2:15:29:a5:7e:39:c0:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C7:50:86:35:82:56:1C:6A:20:8B:D6:07:84:F3:2A:B0:89:D2:2C
X509v3 Authority Key Identifier:
keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/58dQhjWCVhxqIIvWB4TzKrCJ0iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.116.0/22
IPv6:
2a05:ca40::/29
Signature Algorithm: sha256WithRSAEncryption
14:02:0f:f4:e3:77:ff:69:ff:fb:36:16:cd:dd:5b:c6:7c:99:
1e:1d:d9:ec:c6:fa:fd:8b:9c:2a:d3:f0:9d:ca:9a:2d:b0:f8:
52:ef:1c:4a:25:62:60:52:f2:66:10:a2:2a:57:7d:d7:16:ff:
00:1e:14:6f:41:5c:3b:98:1c:98:23:30:9b:4b:3f:58:ed:58:
bb:4f:8d:48:61:df:3d:7f:dc:71:73:66:a8:b6:f1:6f:15:8b:
f0:f2:4e:78:5a:19:d0:9d:a1:75:3b:48:ad:86:3d:5f:d6:06:
70:a0:f8:b0:22:88:ae:35:56:41:7b:a2:79:b7:dc:8e:47:c7:
d1:bf:c7:8c:62:53:05:9a:09:02:89:92:bf:6d:f1:a1:0b:99:
46:80:76:b4:0d:1e:6c:65:52:27:e1:0e:64:76:a3:63:e0:7e:
0d:88:1d:6c:a4:c6:eb:55:b0:59:20:73:68:98:db:fb:c6:eb:
ce:2a:90:19:1e:04:cd:de:61:f3:49:c6:f7:80:86:79:d8:8f:
78:1a:97:d6:69:51:46:0f:d8:a8:eb:f8:10:f9:60:c8:68:3f:
6f:72:6b:43:89:1b:23:28:ea:8b:bf:95:83:69:e3:ce:a2:48:
bd:7d:6b:75:6e:37:1a:00:3f:bc:79:76:85:50:76:7f:ee:33:
a8:31:56:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:15 2024 by rpki-client on console-ams.rpki-client.org