Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/srZYdYleGzwaImhumd4O9NjUE88.roa
File: srZYdYleGzwaImhumd4O9NjUE88.roa (raw, json)
Hash identifier: VhB884UmAqkB85UaWURNUMa2ano52gGp0X3iDCNRwfc=
Subject key identifier: B2:B6:58:75:89:5E:1B:3C:1A:22:68:6E:99:DE:0E:F4:D8:D4:13:CF
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 01856F6FF16EE4E402F03EA52ABB1FC6104C
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/srZYdYleGzwaImhumd4O9NjUE88.roa
Signing time: Sun 01 Jan 2023 22:24:45 +0000
ROA not before: Sun 01 Jan 2023 22:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21032
IP address blocks: 185.133.112.0/22 maxlen: 22
188.209.160.0/19 maxlen: 19
109.226.128.0/18 maxlen: 18
2a0d:c80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 20 Jun 2023 08:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:f1:6e:e4:e4:02:f0:3e:a5:2a:bb:1f:c6:10:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Jan 1 22:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2b65875895e1b3c1a22686e99de0ef4d8d413cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c3:6a:7b:15:76:2c:eb:c6:76:10:b3:38:dd:
01:05:1e:b7:9a:e8:7e:6b:79:51:3d:37:ec:ca:73:
04:e7:d5:c6:47:1a:92:e8:c2:8a:87:ff:cb:73:8b:
dc:20:7f:91:fd:d2:99:0b:4d:b7:c7:01:16:4e:d2:
e8:88:ab:a1:2f:82:5c:14:71:30:86:d8:05:a5:2d:
8a:cb:02:95:87:3e:66:41:0c:0e:c6:ed:37:61:4e:
00:7f:a4:b3:4a:e2:d3:80:fe:4c:3b:35:38:87:b2:
53:2f:0b:03:18:6d:f4:00:28:60:df:14:a3:5f:1c:
58:ce:50:62:dd:47:ff:1d:76:37:c8:bd:06:ab:d0:
a9:c4:7e:89:5b:53:26:69:b9:08:ff:38:1f:a8:80:
89:01:6e:99:00:4c:f5:ea:69:95:73:58:d0:92:d9:
9c:4c:37:67:d3:e8:3d:8d:63:a0:19:e1:8d:c2:f3:
ee:d8:08:68:14:10:c8:93:fc:4b:bd:f1:49:8a:82:
08:ce:b0:fa:ba:e8:57:f4:01:bf:03:85:5f:9d:cd:
62:d5:61:2f:54:c2:59:db:b8:8e:da:21:3a:4b:7d:
7e:d9:9a:67:e7:3c:38:ed:7c:ef:80:07:8d:36:ff:
c6:36:7d:b4:06:d1:63:2a:10:3b:0c:b3:bc:e0:12:
fc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B6:58:75:89:5E:1B:3C:1A:22:68:6E:99:DE:0E:F4:D8:D4:13:CF
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/srZYdYleGzwaImhumd4O9NjUE88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.226.128.0/18
185.133.112.0/22
188.209.160.0/19
IPv6:
2a0d:c80::/29
Signature Algorithm: sha256WithRSAEncryption
88:d0:65:80:10:24:58:1f:b8:aa:20:54:d4:23:c9:96:4e:5b:
99:de:c1:88:42:26:49:0f:cb:d6:1d:3e:5f:8b:da:af:8d:f8:
b4:40:e9:f5:e5:61:86:ec:54:68:57:da:7a:75:89:c6:92:d2:
5f:e0:bf:b8:7a:d0:8c:f8:9b:13:69:30:89:90:8e:73:d1:83:
e1:4e:bb:54:cb:ea:14:89:88:f6:55:02:c1:d9:4e:ab:8e:00:
cf:8c:e2:29:da:9e:23:65:e7:01:6d:e0:7b:f0:8b:0e:f4:d1:
ba:18:1a:d5:ba:85:89:8a:41:dc:a3:97:2e:4a:10:59:a8:6e:
55:1f:10:c6:1d:36:2f:de:11:6e:f5:ea:6f:33:3f:82:98:2c:
c0:73:41:70:8b:4f:dd:1b:78:63:9e:20:01:3b:4c:0d:e4:56:
62:d0:d1:d9:15:1f:d8:79:56:bb:c9:45:65:df:bf:21:1f:e2:
c2:f2:6f:dc:db:f8:1f:a4:21:9d:cf:c5:e1:d5:7c:ae:46:50:
35:c5:f2:91:87:fd:80:9e:49:14:14:55:fb:38:3d:1c:96:fd:
e8:f2:b7:78:92:77:2f:8c:f6:0d:08:39:60:b2:a3:12:82:9b:
0c:5c:02:5d:21:7a:e8:61:92:f1:11:1d:f9:3c:75:97:73:e5:
fe:29:fe:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:26 2024 by rpki-client on console-ams.rpki-client.org