Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/2_0RDRNM5cGvVBtTiW3zXM-N-T0.roa
File: 2_0RDRNM5cGvVBtTiW3zXM-N-T0.roa (raw, json)
Hash identifier: CzQdQb2vIpMhvVk1WMZlkSfIcK8h8C+CT9QABHnsSvA=
Subject key identifier: DB:FD:11:0D:13:4C:E5:C1:AF:54:1B:53:89:6D:F3:5C:CF:8D:F9:3D
Certificate issuer: /CN=6ce2ee84ccf56cdc00fc2caa5929279dae14888a
Certificate serial: 018570C2D56B27062473F222C1186E9C27E6
Authority key identifier: 6C:E2:EE:84:CC:F5:6C:DC:00:FC:2C:AA:59:29:27:9D:AE:14:88:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/2_0RDRNM5cGvVBtTiW3zXM-N-T0.roa
Signing time: Mon 02 Jan 2023 04:34:54 +0000
ROA not before: Mon 02 Jan 2023 04:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12450
IP address blocks: 185.162.132.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:d5:6b:27:06:24:73:f2:22:c1:18:6e:9c:27:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce2ee84ccf56cdc00fc2caa5929279dae14888a
Validity
Not Before: Jan 2 04:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbfd110d134ce5c1af541b53896df35ccf8df93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:93:cd:49:34:5d:2f:6c:32:f7:f8:7f:12:
b8:47:f1:9b:5e:8d:22:d3:0d:61:57:34:94:81:b3:
26:68:c0:65:c2:64:f0:69:ef:94:c4:c9:7c:0b:95:
fa:e4:df:9e:38:c2:44:a6:4b:a0:b7:b6:2e:15:50:
62:86:32:51:e6:a8:34:e1:ed:d3:c1:f8:38:5f:55:
f6:f0:b0:4e:90:08:7d:9a:41:35:7d:28:e0:71:2f:
f2:9e:49:d4:01:cc:cd:81:bb:c3:86:1a:a9:37:3d:
a7:63:39:73:04:97:93:00:f2:3a:02:cc:40:2c:f9:
c3:7d:c7:08:44:a7:ae:34:cb:cc:90:a3:53:55:d6:
58:c6:49:d9:31:ba:a8:00:8c:df:96:fa:d2:8e:60:
dd:23:c4:55:2c:e8:a1:10:2f:07:7a:54:3e:8a:2a:
c9:81:bc:d6:a9:27:79:d8:f9:72:d1:d5:97:01:40:
c9:40:37:aa:3c:ea:d0:87:1f:cb:b6:80:4a:ad:97:
10:31:9d:9a:24:16:22:ca:16:bb:01:31:f5:c8:a7:
a4:f9:6e:4b:97:d8:0e:7e:c9:d0:72:88:5b:10:1d:
e1:56:8e:36:62:c1:69:50:12:12:e3:b6:55:e2:56:
95:95:ff:00:e1:06:03:c2:16:c5:cb:6b:fe:12:58:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FD:11:0D:13:4C:E5:C1:AF:54:1B:53:89:6D:F3:5C:CF:8D:F9:3D
X509v3 Authority Key Identifier:
keyid:6C:E2:EE:84:CC:F5:6C:DC:00:FC:2C:AA:59:29:27:9D:AE:14:88:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/2_0RDRNM5cGvVBtTiW3zXM-N-T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.132.0/22
Signature Algorithm: sha256WithRSAEncryption
45:9a:90:b0:d7:c8:cb:a4:4d:25:a4:f6:83:29:37:2f:95:75:
93:12:8f:37:62:78:63:f7:c9:cd:5a:01:23:1d:7f:ad:b9:41:
57:8e:d6:fc:6e:48:7a:04:ca:1b:f4:c0:22:5d:11:f1:4a:21:
55:96:31:a9:0b:47:e7:53:34:6e:4c:0f:b3:f5:64:b3:89:7c:
e8:cb:f1:8e:95:2a:62:74:c0:a1:4c:15:28:58:3f:eb:a4:82:
91:51:bc:81:82:44:ce:fb:36:b5:ef:a8:1a:95:74:5a:52:28:
52:6f:ee:75:46:e8:2f:dd:84:77:62:74:c1:74:a7:34:9e:9f:
de:10:25:0c:c8:5b:d3:17:be:b5:1a:00:df:ae:84:cf:26:86:
8a:54:88:81:6b:55:34:29:36:e8:09:bd:99:89:e8:6d:b0:1b:
fc:f2:d5:9d:dd:96:99:bc:a1:dd:fb:18:04:03:dc:ab:aa:fd:
1b:33:bf:11:c0:2b:2f:bd:72:37:e1:38:f8:2b:79:17:7b:77:
60:02:00:31:b0:08:2d:45:38:1e:af:81:4c:1c:e0:79:1c:ca:
5b:31:a6:76:6a:6c:84:44:cc:64:71:23:fe:d2:7b:e1:21:fb:
ea:86:6f:09:11:2c:a5:bc:62:43:4d:47:24:3a:99:bb:27:6a:
eb:b4:7b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:19 2024 by rpki-client on console-ams.rpki-client.org