Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/3CZ1iWt-LDXtzVOznK86ba1JSUc.roa
File: 3CZ1iWt-LDXtzVOznK86ba1JSUc.roa (raw, json)
Hash identifier: dr9XD2kgfmUF2h55Y5z7WV4NwWo0yHfqZm0sNd9EQpE=
Subject key identifier: DC:26:75:89:6B:7E:2C:35:ED:CD:53:B3:9C:AF:3A:6D:AD:49:49:47
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 018570B9847B4AF7D4148A7EF4FBF35CA785
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/3CZ1iWt-LDXtzVOznK86ba1JSUc.roa
Signing time: Mon 02 Jan 2023 04:24:44 +0000
ROA not before: Mon 02 Jan 2023 04:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206270
IP address blocks: 185.188.100.0/22 maxlen: 32
2a0a:10c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:84:7b:4a:f7:d4:14:8a:7e:f4:fb:f3:5c:a7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jan 2 04:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc2675896b7e2c35edcd53b39caf3a6dad494947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:1e:bd:25:3f:ec:f2:e1:2b:af:4e:cd:7f:
7b:81:9c:02:14:73:c7:9e:6c:d8:30:26:3e:af:0b:
ec:e6:bf:d8:95:ff:1e:2c:48:21:43:7f:61:47:51:
f3:90:43:ff:78:da:78:83:d7:d2:8d:f8:3e:af:64:
fa:5b:c6:6b:80:0c:32:b8:37:2d:6c:19:2a:cb:30:
54:8f:74:ae:39:ef:25:d2:87:92:b2:3f:88:07:ea:
17:5b:cc:e2:81:f3:de:6f:f1:a3:db:0f:58:7b:c8:
57:37:ff:fc:35:d7:f9:77:d7:3c:5c:58:11:64:e0:
e7:6b:88:9f:24:dd:18:da:9a:86:85:9f:2b:3e:6d:
01:53:b8:72:b8:23:0a:f2:ed:90:e4:56:c4:73:7e:
d3:a5:77:1a:6d:61:1e:91:3f:6e:6f:45:5f:85:5a:
34:6e:07:76:b3:c8:59:45:07:32:89:36:66:b9:22:
3f:46:e4:36:03:79:9a:45:de:87:61:93:a3:ed:a8:
01:0a:dc:2f:db:90:5c:39:95:30:a8:98:15:8c:6b:
5a:dd:7b:2f:91:33:e3:72:dc:0a:37:a6:90:27:5d:
0d:fd:5c:a4:ef:dc:bd:dc:fe:93:c1:6c:8d:f0:09:
8d:c2:63:3b:ad:87:9a:1d:20:e6:45:bb:74:ff:5f:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:26:75:89:6B:7E:2C:35:ED:CD:53:B3:9C:AF:3A:6D:AD:49:49:47
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/3CZ1iWt-LDXtzVOznK86ba1JSUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.100.0/22
IPv6:
2a0a:10c0::/29
Signature Algorithm: sha256WithRSAEncryption
bf:69:b4:51:b6:79:81:67:ee:8d:0a:f2:62:02:d3:6e:2c:a7:
cf:0f:53:ad:d4:f3:8d:e2:79:e5:b3:4c:e3:1b:0e:9d:20:db:
2e:00:2c:c2:ca:c6:ec:17:b2:7e:64:92:03:f0:61:ca:bd:02:
87:c0:d7:8d:40:4b:11:15:fa:aa:17:68:cc:e9:7a:00:55:7a:
2b:6e:23:33:8a:0d:c8:ba:41:44:0a:2b:aa:eb:4e:88:0a:d6:
22:a7:96:78:81:a2:5a:8e:08:d3:65:4b:57:56:e1:6b:0b:ea:
d3:7c:f6:fd:62:11:a4:6c:18:93:6b:a5:d9:28:2a:a1:a7:03:
b6:7e:fd:f8:ab:1a:3d:61:a6:ca:3a:1f:0e:a8:03:4c:d3:0d:
45:31:ee:9d:61:84:20:26:e2:70:46:6f:71:29:fb:4c:c7:94:
47:a4:f2:c9:3a:61:c2:de:33:28:d3:c6:60:99:5f:e2:c6:7b:
2a:9f:5e:d8:ff:7d:18:c4:6d:3d:38:5d:55:73:41:91:ce:f9:
2e:76:13:01:46:b5:53:18:ee:35:6e:f2:29:64:9b:a8:5b:95:
0d:83:47:c6:17:e7:2c:3c:d7:a4:17:59:06:ac:53:29:d6:8c:
1f:ed:4e:05:d7:22:18:4b:4d:a3:80:46:f9:69:e9:92:f6:ec:
a9:70:62:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:32 2024 by rpki-client on console-fra.rpki-client.org