Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/4MU_iBtbm6MJ7FPOt0Ffx2RCmiA.roa
File: 4MU_iBtbm6MJ7FPOt0Ffx2RCmiA.roa (raw, json)
Hash identifier: w9gNr7G+7GqUjE3X8XSjHu8pKbQ9FOf6j8rYJxM6ej8=
Subject key identifier: E0:C5:3F:88:1B:5B:9B:A3:09:EC:53:CE:B7:41:5F:C7:64:42:9A:20
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 01856F392CC7EBA7AA02C1D3B276F137A075
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/4MU_iBtbm6MJ7FPOt0Ffx2RCmiA.roa
Signing time: Sun 01 Jan 2023 21:24:55 +0000
ROA not before: Sun 01 Jan 2023 21:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201782
IP address blocks: 185.63.180.0/22 maxlen: 22
2a03:da0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:2c:c7:eb:a7:aa:02:c1:d3:b2:76:f1:37:a0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Jan 1 21:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0c53f881b5b9ba309ec53ceb7415fc764429a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:ef:bd:92:4f:17:ff:3e:63:6f:56:e2:60:
c8:e0:a6:d7:2e:1f:93:94:f3:9e:3a:92:74:a5:46:
12:77:2b:ef:f1:b0:38:8e:e5:00:52:c0:ea:c7:c3:
ee:36:5f:52:a4:5c:7c:1c:6a:07:13:e9:13:77:89:
b2:ce:a3:9c:6d:2a:14:57:86:89:6c:02:a7:76:22:
1b:53:f3:33:e5:8a:64:4a:da:e1:25:07:10:13:44:
99:1c:b7:b2:3e:2c:51:0e:44:6f:b6:62:b4:71:7b:
f4:d0:64:e1:63:ec:7b:c7:76:c5:16:14:75:11:dd:
f4:9f:86:8a:6c:96:82:af:3e:a6:6e:d9:d7:bd:05:
91:5d:e0:7c:22:80:9a:37:fc:7b:ff:ac:12:ad:2a:
26:f1:17:a3:8a:98:24:39:1a:77:c6:a0:09:8f:ae:
f1:a9:4d:d8:05:81:e6:87:a2:a5:84:fa:70:11:95:
30:d0:9f:e0:50:e8:7f:92:6b:82:d0:53:19:3e:d8:
04:d5:23:99:1a:64:b8:17:f4:29:3d:ea:57:4f:72:
1d:a0:a8:54:ca:74:1a:67:fe:43:8b:b0:e5:d9:41:
7e:30:1f:09:08:90:f0:e6:f3:4d:47:40:b8:ad:2e:
fa:0f:7c:f0:1d:82:4e:d6:5f:5b:b8:3a:f7:1d:91:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C5:3F:88:1B:5B:9B:A3:09:EC:53:CE:B7:41:5F:C7:64:42:9A:20
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/4MU_iBtbm6MJ7FPOt0Ffx2RCmiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.180.0/22
IPv6:
2a03:da0::/32
Signature Algorithm: sha256WithRSAEncryption
8e:c2:ec:dc:9a:f2:9b:8d:58:2c:72:dc:f7:c4:20:a9:ac:c3:
7b:7d:a4:9d:ec:6f:d0:82:e3:d5:6c:b2:b2:8f:50:d5:36:67:
07:70:d5:fa:5d:95:81:af:18:f0:2d:c5:99:04:a5:d4:97:f0:
6a:a6:90:58:10:99:6a:eb:b1:66:7c:91:e0:62:b5:c1:0b:dc:
ce:d9:bc:f8:85:14:ab:2a:c2:66:c1:98:27:93:f0:02:34:be:
76:0f:f3:56:15:5d:ab:7f:aa:b0:37:80:00:cb:5f:a0:96:c7:
30:dd:a0:53:e6:08:ed:4d:29:2b:c5:57:2a:ec:25:d9:d0:64:
92:06:3c:96:5d:aa:1f:59:2d:33:20:99:20:b1:34:ad:08:ca:
a2:d5:70:51:d8:d7:1f:23:33:50:09:a3:7a:36:18:db:6b:de:
cf:28:cb:7f:bb:1c:01:5c:98:8c:5a:4f:8d:97:27:60:b9:0e:
6b:fc:a6:fb:86:45:ec:cb:94:86:3f:58:49:20:74:2f:80:4f:
54:b9:de:7a:14:71:66:da:17:e2:7e:ea:a7:76:fe:9d:9f:c5:
66:a2:93:62:d9:72:d9:a4:4e:5c:44:54:b4:f3:22:12:f1:54:
68:81:39:52:ae:41:81:25:f8:6f:6b:b3:38:c0:78:7e:04:0e:
36:33:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:04 2024 by rpki-client on console-fra.rpki-client.org