Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/Afl4J2CnqafRzjX9Vxo7itcrrvE.roa
File: Afl4J2CnqafRzjX9Vxo7itcrrvE.roa (raw, json)
Hash identifier: VuPs5OJrpQcOQGq9N46TWXdSEC9iEkMUtlRyZgtEyLU=
Subject key identifier: 01:F9:78:27:60:A7:A9:A7:D1:CE:35:FD:57:1A:3B:8A:D7:2B:AE:F1
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 01856FA7044F2947E5BC4DFF6F8BF598D094
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/Afl4J2CnqafRzjX9Vxo7itcrrvE.roa
Signing time: Sun 01 Jan 2023 23:24:54 +0000
ROA not before: Sun 01 Jan 2023 23:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57357
IP address blocks: 185.11.68.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:04:4f:29:47:e5:bc:4d:ff:6f:8b:f5:98:d0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: Jan 1 23:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01f9782760a7a9a7d1ce35fd571a3b8ad72baef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:30:f2:7d:3d:bb:be:50:1f:69:7a:38:59:ed:
90:7d:87:da:70:5e:6a:98:93:31:e4:2c:b9:99:6f:
69:5c:2d:11:81:5d:27:62:01:ba:5b:d8:2a:d0:e2:
ec:ce:14:23:f9:da:d6:4e:b9:72:f9:d7:74:10:10:
2a:25:0b:e1:bf:a3:93:09:c4:d6:a0:a8:a7:5e:5a:
ce:5b:b5:0d:70:7b:9f:78:39:46:60:3a:2a:01:ee:
71:69:14:b7:05:e1:9b:ce:18:ce:05:14:c3:3c:f8:
f6:28:a1:15:db:0d:d7:f8:c0:f6:2e:87:0c:33:95:
ee:8f:71:ba:21:c0:5d:0e:d3:c2:d5:a1:db:e2:e2:
30:e7:2a:7b:94:99:79:bc:b8:4a:45:d7:91:35:73:
8e:f1:8d:ed:19:65:48:e7:dd:ee:51:e9:cb:03:80:
f4:97:bb:01:cd:96:31:e7:4f:82:bf:d8:30:b4:c1:
d6:78:33:6a:a9:95:06:42:4c:0b:79:5e:e4:6f:5b:
78:a4:b2:db:95:c9:be:08:10:77:e0:82:a8:5c:63:
40:18:e5:62:99:a2:5d:48:b4:92:4e:00:2e:f2:4d:
b7:4d:d8:5c:f2:d7:c8:c9:6a:a9:10:51:ba:ca:1e:
25:87:46:42:17:90:6d:d4:c4:56:17:48:29:8e:d3:
33:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F9:78:27:60:A7:A9:A7:D1:CE:35:FD:57:1A:3B:8A:D7:2B:AE:F1
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/Afl4J2CnqafRzjX9Vxo7itcrrvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.68.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:ab:2b:79:58:5d:a0:02:59:73:f9:28:43:66:a4:01:48:87:
3c:95:cf:8e:24:fb:26:fa:02:42:69:58:06:17:d0:e7:98:db:
f9:81:ca:7e:36:69:43:80:c5:12:3d:32:20:8a:54:7c:a4:80:
93:e1:06:49:23:ad:9c:29:b4:e3:d6:34:1d:27:9d:f5:fc:34:
04:19:1d:bf:3d:f1:b5:95:da:4d:bb:b3:d3:63:44:4e:e2:91:
7b:c4:38:1d:08:a3:a4:6a:63:1a:38:3d:ff:29:a9:69:96:2c:
ac:71:54:6d:f0:af:e2:c7:b3:4c:69:84:1f:c1:14:45:c3:2c:
4b:55:52:30:df:b7:b9:96:b2:2e:12:4e:2b:1a:93:4f:64:32:
53:f6:55:01:74:e8:45:89:b3:03:4e:cb:60:dc:b4:38:3d:91:
5f:0b:98:f8:e7:ab:39:a7:01:93:d4:c9:58:30:e3:57:5a:d0:
66:bf:1b:c3:23:9d:00:55:ab:d8:bb:5e:1d:c9:b9:42:b0:59:
24:9a:eb:af:37:92:00:d2:6a:00:25:4b:07:85:36:fb:d8:a5:
93:fc:46:3f:73:aa:ad:6d:ba:79:84:d6:15:56:a5:07:61:13:
9e:3a:7e:72:c0:92:09:23:c8:a3:ff:92:b5:9c:85:9a:a8:e4:
9f:37:10:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:06 2024 by rpki-client on console-fra.rpki-client.org