Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/ammE7PjQctI344k6Gr38p6UCjYE.roa
File: ammE7PjQctI344k6Gr38p6UCjYE.roa (raw, json)
Hash identifier: bGqtI0S4CFzAgUDZtyccG11oV/nw1yBw505dmqfvn/M=
Subject key identifier: 6A:69:84:EC:F8:D0:72:D2:37:E3:89:3A:1A:BD:FC:A7:A5:02:8D:81
Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial: 0188B9C434D970679744E9B1B693EBFC7F88
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/ammE7PjQctI344k6Gr38p6UCjYE.roa
Signing time: Wed 14 Jun 2023 11:57:03 +0000
ROA not before: Wed 14 Jun 2023 11:57:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48645
IP address blocks: 94.143.208.0/21 maxlen: 24
185.63.20.0/22 maxlen: 24
2a02:27c8::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:c4:34:d9:70:67:97:44:e9:b1:b6:93:eb:fc:7f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Validity
Not Before: Jun 14 11:57:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a6984ecf8d072d237e3893a1abdfca7a5028d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:76:87:3c:af:59:e7:97:51:1a:96:e8:ab:
78:dc:7d:0e:ed:7f:d7:df:ca:7c:80:50:4e:e2:8e:
28:ec:09:1b:29:de:ab:58:d4:cc:70:db:de:b7:e5:
ee:80:0f:0c:cc:9d:18:93:77:b1:21:7f:5a:26:51:
ca:cf:f5:d9:c4:7d:74:d2:cb:5c:52:04:15:5f:71:
80:64:d4:bb:58:fa:75:45:69:3b:4c:10:ed:a3:d9:
9c:20:b2:f9:63:e1:dc:0c:11:c4:46:fe:46:23:3f:
07:46:29:f9:9c:c3:40:d5:92:c3:ce:eb:ec:21:8d:
06:87:0b:c7:b7:47:d4:ef:c5:b2:ae:7d:d3:3a:f3:
8a:5d:90:08:c5:5a:f8:c8:8b:50:9b:0f:53:19:c9:
b5:c3:c5:d6:3b:38:6e:28:44:18:76:a3:54:ca:b8:
f5:87:91:55:c8:54:0f:d3:45:f0:09:36:8a:4d:04:
a6:5b:3c:22:3e:4d:b3:ae:ad:cd:49:51:0c:7e:aa:
11:21:d5:59:6f:39:9e:35:26:40:f9:b3:35:c7:87:
c5:ae:1b:96:99:d0:d4:c0:df:d6:b4:4d:d7:68:d2:
7f:3b:4c:c2:25:42:c9:fc:8a:2e:bc:16:88:8e:6c:
94:ea:19:7f:10:5a:4f:83:b0:82:70:8e:1b:0e:d0:
2f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:69:84:EC:F8:D0:72:D2:37:E3:89:3A:1A:BD:FC:A7:A5:02:8D:81
X509v3 Authority Key Identifier:
keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/ammE7PjQctI344k6Gr38p6UCjYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.208.0/21
185.63.20.0/22
IPv6:
2a02:27c8::/32
Signature Algorithm: sha256WithRSAEncryption
59:0e:0d:e3:24:c0:0d:f1:2e:57:60:51:1a:43:0d:f9:cc:78:
9c:5b:59:78:6b:3a:e0:97:38:ba:13:89:fc:ca:db:0b:96:f1:
2f:56:d2:bf:8c:cc:14:98:48:a5:5a:ad:64:e7:4f:66:6b:46:
f0:47:c8:df:ed:1c:22:c8:09:4f:dd:45:47:53:e6:12:f8:8d:
79:54:13:1c:37:e2:ad:0a:0c:ef:d0:29:8a:e3:20:c4:c3:3d:
f5:22:8f:71:9f:7b:7b:b4:a3:37:fb:c1:e7:20:39:31:a7:04:
0a:6c:1c:a2:e0:73:09:03:9c:8e:cf:e4:5e:fe:31:49:f8:3a:
94:de:80:89:c5:84:24:6d:bb:60:b1:a1:c3:0b:c5:76:9e:80:
00:91:09:26:c7:6a:1c:bf:e1:1f:54:24:0f:d4:23:89:12:00:
f3:6e:ff:d6:28:65:a6:fb:9c:69:d1:01:d6:af:4f:37:7e:df:
eb:ac:fd:91:b8:51:e2:73:39:c7:f5:77:32:b9:b6:da:c9:af:
6c:ef:48:75:83:95:d4:b8:7f:82:bf:90:3f:df:b3:44:2e:9e:
a9:3d:12:d8:c1:be:b1:61:0c:3e:b4:17:fd:16:0d:c6:1b:56:
bc:35:04:71:a0:1a:c0:a8:4e:08:5d:c3:de:ab:19:d2:6a:7c:
2a:35:aa:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:06 2024 by rpki-client on console-fra.rpki-client.org