Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/riZ25PgzA-Q54RvKWaxePCQbbQc.roa
File: riZ25PgzA-Q54RvKWaxePCQbbQc.roa (raw, json)
Hash identifier: hbh8IVzRdY0pT4njaDMsp2ydpwLQlriCtEw3PZgWCLM=
Subject key identifier: AE:26:76:E4:F8:33:03:E4:39:E1:1B:CA:59:AC:5E:3C:24:1B:6D:07
Certificate issuer: /CN=bfb548d85725104527f3be47976b674739ae2f13
Certificate serial: 01857067311DD53BD918D04C27439E72FD03
Authority key identifier: BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/riZ25PgzA-Q54RvKWaxePCQbbQc.roa
Signing time: Mon 02 Jan 2023 02:54:49 +0000
ROA not before: Mon 02 Jan 2023 02:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204403
IP address blocks: 185.250.16.0/22 maxlen: 24
2a0b:c700::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:31:1d:d5:3b:d9:18:d0:4c:27:43:9e:72:fd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb548d85725104527f3be47976b674739ae2f13
Validity
Not Before: Jan 2 02:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae2676e4f83303e439e11bca59ac5e3c241b6d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:62:ae:7d:e4:7b:7d:fe:85:40:f9:3b:29:a0:
d1:f1:a0:7b:dc:f3:a2:44:40:d9:05:1c:53:db:5a:
2e:aa:75:77:fa:49:12:e4:55:e7:45:c4:5d:bb:b6:
bc:91:ab:95:46:0a:3b:cd:60:fb:d1:f2:79:44:43:
a0:e5:00:5e:b9:d8:9e:4c:e4:b6:15:ea:1e:d1:ac:
55:58:a3:e6:8e:7b:4d:29:1a:93:ca:d1:cc:e8:97:
41:b5:24:39:f7:b7:ac:8b:b4:05:02:ab:d5:95:61:
27:78:8a:4a:5e:e0:e9:15:d5:17:57:99:e3:7c:0b:
43:c3:a1:b3:b8:2e:37:6a:34:6c:2c:90:d8:c9:bb:
76:b5:79:7d:b6:be:bb:6f:76:c8:5a:c4:90:79:8d:
e2:7f:50:7d:2b:9a:47:76:c6:af:9f:65:a0:67:fd:
66:bb:5b:28:75:4f:e9:cb:b5:d2:0c:c5:9d:b2:47:
03:de:23:c9:2c:91:98:bd:71:a7:7f:e5:a7:0e:d2:
27:d1:1a:e2:a9:61:1a:82:e0:aa:52:81:df:c1:7b:
f0:c8:90:1b:99:c5:12:7e:6d:b3:b4:92:bc:74:16:
ba:e1:8e:45:20:02:62:8f:9a:fb:6e:c2:21:5b:2c:
e1:14:bd:5f:ff:2a:b4:44:e3:05:2a:72:6c:96:ce:
32:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:26:76:E4:F8:33:03:E4:39:E1:1B:CA:59:AC:5E:3C:24:1B:6D:07
X509v3 Authority Key Identifier:
keyid:BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/riZ25PgzA-Q54RvKWaxePCQbbQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.16.0/22
IPv6:
2a0b:c700::/29
Signature Algorithm: sha256WithRSAEncryption
11:b8:94:da:de:91:0e:25:b7:1b:94:42:ae:8a:9b:34:f8:3a:
1c:fa:41:8a:78:2a:db:39:b5:84:f0:59:53:0a:86:11:cd:b5:
b0:0d:aa:14:59:3f:87:a2:de:a8:21:f5:54:f3:40:c5:d3:4c:
76:79:23:d5:05:0a:6d:80:ba:22:b1:d8:ac:9b:f7:af:40:2b:
83:ee:79:a0:ea:89:ff:44:7f:79:88:41:2d:26:e9:80:7f:2d:
f2:61:db:f0:fe:20:2b:e6:03:81:b5:16:2f:43:e0:53:c4:d8:
fd:ee:35:f6:c3:20:2b:fd:f7:08:f8:fb:40:0b:6e:8c:54:4e:
fb:f4:a4:f7:61:e9:6a:bf:9d:da:eb:2e:e7:8c:ba:2d:18:71:
9e:18:6e:61:07:3a:df:f8:99:7d:61:5c:1a:77:c2:03:50:2b:
b1:c0:5f:89:b1:aa:c5:56:ca:b0:1f:d3:ad:a3:ab:f6:15:52:
b4:ba:c9:ef:0b:38:5d:87:e0:48:fd:e6:90:35:4c:0d:80:4b:
81:5b:b0:ec:f9:11:de:e6:2b:64:2d:d6:63:0a:0b:15:37:ca:
98:ad:6c:e2:ba:04:6a:d6:44:45:d9:21:b4:98:1d:31:f3:77:
3e:a8:72:1f:57:08:be:e6:fd:ab:e2:1d:36:05:35:54:d5:ba:
2d:cb:a8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:00 2024 by rpki-client on console-ams.rpki-client.org