Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/U0HkbGUBqFh7_CNdFv97zV__TTk.roa
File: U0HkbGUBqFh7_CNdFv97zV__TTk.roa (raw, json)
Hash identifier: lPcDyooxIaKQ6P8iHcweY19PEubJFq64dURebyu2Cc8=
Subject key identifier: 53:41:E4:6C:65:01:A8:58:7B:FC:23:5D:16:FF:7B:CD:5F:FF:4D:39
Certificate issuer: /CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Certificate serial: 018CC793E83F0D172DCBA6CF1B73591AB6F5
Authority key identifier: 58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/U0HkbGUBqFh7_CNdFv97zV__TTk.roa
Signing time: Tue 02 Jan 2024 00:30:08 +0000
ROA not before: Tue 02 Jan 2024 00:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12046
IP address blocks: 94.138.224.0/20 maxlen: 20
185.222.76.0/22 maxlen: 24
2001:1a70::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 10 Jan 2024 12:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:e8:3f:0d:17:2d:cb:a6:cf:1b:73:59:1a:b6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Validity
Not Before: Jan 2 00:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5341e46c6501a8587bfc235d16ff7bcd5fff4d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f2:37:1f:96:29:eb:8b:8d:dc:66:8f:66:d0:
24:b4:ad:35:53:01:83:ed:c3:e3:23:61:17:99:a7:
31:35:99:6e:07:6b:53:41:96:46:a5:e2:39:2b:36:
6d:85:33:94:96:38:cd:c5:bb:92:b4:50:0b:06:9e:
9e:23:56:01:37:87:67:9f:89:d1:56:4c:97:bf:2b:
17:fb:16:52:1d:78:50:28:d6:b5:7d:24:f9:c5:5d:
f9:c8:c3:6d:6a:10:e3:0f:e5:28:f4:0b:ea:77:1e:
12:65:4b:c5:3b:63:11:aa:c4:28:cf:d4:82:67:97:
1b:f8:4f:f1:80:eb:9a:2c:5d:d9:b5:4f:42:73:3c:
e9:4a:0e:b2:b7:4b:59:25:94:bc:02:d5:aa:bb:12:
b2:70:80:64:88:a6:b0:ea:a7:27:6d:35:90:3d:ed:
6e:ba:22:27:7f:ba:02:35:df:21:df:26:7e:f8:8e:
13:e8:14:25:db:28:4d:47:2e:61:6b:76:29:b0:dd:
18:5a:0c:70:d1:83:15:88:50:08:45:a8:f1:44:7e:
e9:dc:8b:49:10:91:de:24:b4:07:67:c1:12:71:4b:
3d:a0:ba:1c:2c:b2:d7:de:9a:8d:e6:77:01:78:48:
e2:83:5d:c0:32:db:9b:44:ca:c6:61:4a:cf:b3:56:
e7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:41:E4:6C:65:01:A8:58:7B:FC:23:5D:16:FF:7B:CD:5F:FF:4D:39
X509v3 Authority Key Identifier:
keyid:58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/U0HkbGUBqFh7_CNdFv97zV__TTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.138.224.0/20
185.222.76.0/22
IPv6:
2001:1a70::/32
Signature Algorithm: sha256WithRSAEncryption
99:e7:a0:80:3f:f9:13:b6:b1:d4:f5:97:71:91:a8:9d:01:d5:
e8:4c:c0:a9:b9:ab:73:6b:f9:e8:b7:02:9e:84:f2:1a:08:c4:
df:c2:23:96:50:18:48:83:29:70:84:b7:e3:a3:b2:f4:04:7c:
4f:e6:7d:1f:93:69:5c:08:88:64:7e:8c:b3:2c:39:64:05:bf:
15:ad:69:ee:69:62:88:5e:e0:18:19:ee:e8:b6:04:ad:c9:18:
1e:a8:d7:a4:35:2e:d3:06:8b:05:72:8a:26:a1:c1:3a:95:38:
86:a1:c3:fd:30:a5:6a:b5:ba:ba:97:1e:df:6d:e2:35:b2:aa:
e7:cb:b2:25:ff:44:c3:c2:7b:4e:be:34:22:d4:f3:13:a8:bf:
d9:5c:f6:9c:78:bb:9c:06:a1:4a:59:d0:a2:cf:38:38:1e:8b:
06:d6:67:28:b0:72:7d:da:0f:76:06:32:41:81:df:9b:40:2d:
b9:94:8b:2d:bb:01:0b:e9:9d:eb:76:b9:41:1d:c1:7e:a1:02:
1a:8c:49:07:5e:4a:53:35:01:1d:b5:08:bc:00:da:62:cb:7a:
a9:33:20:73:0f:0e:36:b6:a6:ee:b1:08:cd:ae:20:49:63:02:
96:91:0a:75:ce:35:5b:fc:5b:46:c8:e4:1e:dc:cc:0d:87:3a:
31:96:5e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:05 2024 by rpki-client on console-ams.rpki-client.org