Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/1RG6IqwHgBmjI1fYrtHai84b9CM.roa
File: 1RG6IqwHgBmjI1fYrtHai84b9CM.roa (raw, json)
Hash identifier: qasEdKRmEMsZ8h/PRKyGmvjz3v9WtOlrE1rwUD55qJg=
Subject key identifier: D5:11:BA:22:AC:07:80:19:A3:23:57:D8:AE:D1:DA:8B:CE:1B:F4:23
Certificate issuer: /CN=c53435f4be2c543bf3483e377f80314d28230184
Certificate serial: 018572C37774856704D0F0B31ABADAA1AEE0
Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/1RG6IqwHgBmjI1fYrtHai84b9CM.roa
Signing time: Mon 02 Jan 2023 13:54:50 +0000
ROA not before: Mon 02 Jan 2023 13:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8639
IP address blocks: 185.121.20.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:77:74:85:67:04:d0:f0:b3:1a:ba:da:a1:ae:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184
Validity
Not Before: Jan 2 13:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d511ba22ac078019a32357d8aed1da8bce1bf423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:43:d7:56:60:b9:58:1a:b0:32:e5:48:ea:
41:a5:58:91:15:80:e1:d9:ff:ee:57:f6:7d:f8:1f:
5e:e3:0d:d8:da:42:2d:33:f7:6a:39:85:e5:aa:db:
b6:54:68:0c:63:30:50:7b:dd:ea:6e:7f:01:a2:07:
9b:b3:01:e6:df:41:dd:ac:12:28:56:2e:85:98:b7:
0d:b2:74:a2:8f:91:b8:d3:c3:20:8f:cd:c9:4e:17:
38:cd:95:99:ed:49:8a:c5:19:38:6f:20:40:b4:e8:
8c:cc:52:41:84:83:2f:c3:e6:fe:5c:0a:e8:f3:3a:
76:b0:8f:45:4a:74:71:34:06:1a:28:87:63:c7:d3:
3c:04:43:ab:94:7d:e8:bd:28:3d:ff:60:62:ae:c1:
e8:81:37:1a:ae:60:86:65:77:ed:8b:76:23:bf:aa:
7d:32:39:09:9f:2c:c1:2d:36:a5:9f:5a:19:23:e8:
1f:99:b1:bd:ef:eb:64:c8:ab:11:29:6b:fe:0b:1e:
84:0a:07:d9:89:6b:33:23:eb:2b:1f:a2:6a:09:c0:
a6:3b:7c:e7:c1:73:97:1b:d8:e3:22:98:2e:75:5f:
3a:31:56:0e:9a:3e:bb:36:14:87:85:48:2f:43:f6:
a0:c9:89:10:9b:cb:ca:79:5d:28:15:3c:93:b9:4d:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:11:BA:22:AC:07:80:19:A3:23:57:D8:AE:D1:DA:8B:CE:1B:F4:23
X509v3 Authority Key Identifier:
keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/1RG6IqwHgBmjI1fYrtHai84b9CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.20.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:2a:66:94:55:12:4e:19:ed:32:8f:b2:65:24:61:ea:1b:c6:
f7:9c:57:ab:20:60:30:00:87:57:b6:ff:0c:a7:93:23:81:54:
55:4b:25:45:b0:85:9e:83:a0:5e:3b:61:b6:ed:81:a0:72:d8:
0b:fc:69:99:ef:e4:f5:4f:5b:27:3b:e9:4f:0a:a7:e2:ff:29:
db:1a:5b:21:79:5a:2f:cd:07:b6:d2:2e:50:41:64:26:a6:93:
a9:c4:ce:4f:91:3d:a9:53:b2:5a:16:19:58:7e:e3:9d:ee:37:
5f:0e:cd:28:9b:e5:a3:d0:8b:75:5e:f3:ea:49:31:cd:d8:d6:
60:cd:56:53:40:d6:dd:1e:8d:ae:d5:d8:fc:05:b2:dc:eb:21:
cb:fe:c2:90:42:82:90:d0:54:dc:07:68:e3:ac:6d:1a:a8:28:
96:9e:1b:d8:85:a0:45:c8:41:21:6a:69:59:08:22:6c:28:fe:
10:c8:46:4d:a3:78:61:c4:5b:e8:01:07:98:4f:27:af:2f:cd:
e0:11:39:db:b5:c4:cb:ac:85:c5:a2:35:b1:32:2e:e4:08:d3:
20:7b:af:b9:80:2b:90:06:0f:4d:ed:bd:71:03:93:60:3f:92:
a0:fd:20:b0:13:e5:37:b5:16:bb:8d:26:37:83:74:ce:0a:3c:
b2:ec:e6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:28 2024 by rpki-client on console-fra.rpki-client.org