Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/PWsFEpnWi2H9T8Ec0J24bymR8ts.roa
File: PWsFEpnWi2H9T8Ec0J24bymR8ts.roa (raw, json)
Hash identifier: 7hd/BOkba6udGBWt8a0Cqxm2VtnNHpAeD5E4x4Zyx1k=
Subject key identifier: 3D:6B:05:12:99:D6:8B:61:FD:4F:C1:1C:D0:9D:B8:6F:29:91:F2:DB
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 018572A7E1EDB8FB59EE5FA54A7BCC6953FC
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/PWsFEpnWi2H9T8Ec0J24bymR8ts.roa
Signing time: Mon 02 Jan 2023 13:24:42 +0000
ROA not before: Mon 02 Jan 2023 13:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30848
IP address blocks: 185.16.132.0/22 maxlen: 22
185.77.162.0/24 maxlen: 24
185.77.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a7:e1:ed:b8:fb:59:ee:5f:a5:4a:7b:cc:69:53:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Jan 2 13:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d6b051299d68b61fd4fc11cd09db86f2991f2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:d8:ca:22:79:ec:78:a1:9d:8f:02:bf:20:
20:e9:eb:00:ec:6e:a7:6e:b4:e9:56:20:01:e1:3b:
93:fe:78:4b:9b:70:0b:fd:80:5f:18:90:9a:d6:17:
f1:f7:73:ac:af:c8:34:b9:6e:6e:64:63:46:02:15:
ab:a5:91:cf:37:45:93:53:21:44:7c:46:48:fc:c7:
91:c9:e5:d3:2e:24:86:9d:1c:ba:87:0e:a6:26:41:
4f:24:ae:f1:09:89:c3:45:19:8e:13:d1:9c:0a:7e:
be:e7:76:0c:72:45:a5:c8:7e:ca:c3:95:66:e0:62:
96:78:46:82:8d:41:5a:c3:59:22:b4:b6:59:0f:bc:
50:16:f7:de:0f:e0:45:be:03:b8:25:c8:66:17:04:
3a:fc:0f:48:da:32:0c:03:99:75:e7:69:7b:73:34:
78:68:90:31:0b:ad:e2:e8:79:26:74:47:6b:d4:3b:
07:f5:b0:d9:33:0a:2e:3f:3a:d6:4a:a3:e1:4e:d7:
28:5e:50:5e:10:3a:4b:3a:97:c6:a3:84:95:64:36:
e7:b7:28:6b:46:51:30:42:ca:fd:fe:ee:98:30:57:
98:9a:80:75:c5:68:df:cd:2b:4f:88:af:55:81:e9:
14:e2:db:07:2e:ec:71:7d:9e:6a:d5:50:e8:45:bf:
07:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6B:05:12:99:D6:8B:61:FD:4F:C1:1C:D0:9D:B8:6F:29:91:F2:DB
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/PWsFEpnWi2H9T8Ec0J24bymR8ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.132.0/22
185.77.160.0/24
185.77.162.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e0:25:b5:be:cd:d9:99:96:11:39:22:66:3b:66:50:fa:71:
03:a3:db:e0:5f:02:4b:53:7b:4b:c1:43:a9:eb:89:d3:e4:fc:
72:fe:97:ba:d2:84:db:88:bf:f5:bb:4f:f9:9b:94:83:b5:0a:
95:7c:00:4a:7b:b6:93:b4:6d:33:bd:4e:7c:7e:d9:59:6b:07:
8a:29:05:08:9b:b3:62:08:6e:da:a0:f9:a9:8f:69:1d:6b:fa:
a5:cd:fe:00:90:59:5e:60:42:6f:cf:1e:1e:29:9d:23:f6:2f:
4a:20:6c:52:09:75:87:66:7e:db:d4:e8:54:88:cf:19:04:da:
dc:5a:f4:9f:6f:a0:2f:91:d9:64:92:25:cb:b4:d9:fc:87:b4:
90:cf:ba:ac:59:43:51:a0:c9:cf:7f:f0:93:05:80:24:8a:ab:
6b:30:78:ad:3f:12:ac:6a:fd:c9:ab:fb:b9:35:6c:90:6f:f4:
2c:6b:72:ea:03:66:b6:00:d9:ce:1a:41:12:9e:8d:e3:95:ed:
17:a9:02:c2:42:28:e8:c4:8d:5f:37:bc:99:df:67:89:a7:97:
ff:f7:ff:16:07:df:e8:c6:42:d1:fd:55:3b:3a:5d:bf:06:c8:
2c:77:ba:74:d5:88:ec:fd:14:39:0e:66:05:76:8c:41:4a:4a:
a8:f3:a3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:28 2024 by rpki-client on console-ams.rpki-client.org