Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/As0A1oqnm_d_945f_gLjrvrG2Gs.roa
File: As0A1oqnm_d_945f_gLjrvrG2Gs.roa (raw, json)
Hash identifier: gifcKn4lOAhcSR4H/V/viBk06URIKqmixRZaeVL5Ot8=
Subject key identifier: 02:CD:00:D6:8A:A7:9B:F7:7F:F7:8E:5F:FE:02:E3:AE:FA:C6:D8:6B
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 018571D7D29AA2F939A21AB95C1C87D66CE1
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/As0A1oqnm_d_945f_gLjrvrG2Gs.roa
Signing time: Mon 02 Jan 2023 09:37:27 +0000
ROA not before: Mon 02 Jan 2023 09:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25009
IP address blocks: 185.21.112.0/22 maxlen: 24
2a03:240::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:d2:9a:a2:f9:39:a2:1a:b9:5c:1c:87:d6:6c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Jan 2 09:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02cd00d68aa79bf77ff78e5ffe02e3aefac6d86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:2c:22:7b:95:f7:49:12:3d:2b:42:40:d9:
2e:a4:87:be:0c:e9:e5:87:9f:a9:28:fe:0d:02:1c:
ec:86:a0:07:26:ac:21:d8:1f:14:2a:2a:b3:80:fb:
f2:c6:f3:ac:f3:f3:50:b7:66:ef:d7:e9:64:52:a5:
27:0e:e1:f8:a5:36:51:8b:26:22:91:5b:5e:fa:e1:
94:fc:f3:f6:fd:01:e1:e5:80:a1:be:f9:17:aa:c5:
ed:d1:1b:bd:44:43:cd:9f:6d:21:ab:b0:fb:e1:0b:
6a:9e:0d:b2:e9:b5:ac:20:35:05:02:70:ee:7a:de:
88:52:81:af:9e:67:80:79:d2:37:27:f8:76:be:50:
97:b8:cf:67:76:a5:5a:fd:1b:23:ca:bb:ea:55:12:
1b:4b:9a:ab:fc:87:77:81:44:5e:75:96:4f:e8:1b:
db:2f:a0:da:b6:b6:73:fe:2d:c4:0c:c8:ea:50:ae:
45:1f:5f:d0:d1:cc:63:6b:45:18:0c:e5:a5:00:91:
a0:7c:ff:e8:3d:00:50:d4:eb:ec:1e:0a:1f:ea:bd:
33:b4:76:19:2a:73:01:f5:0c:58:4f:d6:0e:5c:ab:
48:bc:98:c9:09:31:40:52:a9:b2:b8:bc:06:c2:c7:
14:88:e9:5f:41:3e:ff:45:c9:8e:82:0d:8e:50:cd:
11:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CD:00:D6:8A:A7:9B:F7:7F:F7:8E:5F:FE:02:E3:AE:FA:C6:D8:6B
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/As0A1oqnm_d_945f_gLjrvrG2Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.112.0/22
IPv6:
2a03:240::/32
Signature Algorithm: sha256WithRSAEncryption
42:2e:98:3a:85:34:c0:fa:c6:3f:3e:ff:25:cb:87:82:e3:44:
be:d7:8f:84:f5:b9:17:e6:bb:87:79:1e:58:73:ec:3d:02:a4:
54:ab:ce:cc:d8:ce:8b:6d:17:2e:ea:87:49:8e:5f:ab:7d:7f:
5f:ae:25:53:c2:ea:1b:07:3a:fb:c5:12:28:c2:b0:67:e3:9e:
03:6e:b1:e5:f5:88:e0:09:75:54:4d:aa:63:9a:8a:d4:d6:59:
4e:7e:c3:ac:f5:3e:2f:c6:c7:12:c4:7e:4b:b3:cd:90:c8:15:
38:b5:5a:a9:9a:12:58:63:df:05:05:87:2a:26:75:9e:6c:48:
df:75:e9:dd:e9:0a:53:bc:33:7b:3a:95:b8:35:6e:c5:87:33:
75:e5:dd:d4:47:c4:3d:e2:f7:51:3d:64:35:1c:6e:33:21:75:
cd:7b:da:a7:68:e6:3b:24:ba:59:41:6b:48:04:8d:06:eb:0b:
c4:b2:7f:f7:af:d9:6d:ca:a3:b7:0f:30:1a:73:b0:53:b1:f2:
fb:7f:27:f8:a7:44:0e:b7:d1:3b:14:32:96:88:fb:06:60:a8:
7f:30:dd:e6:d7:59:8c:31:ec:51:ba:32:28:89:bc:11:3d:b3:
3c:8d:0b:6b:4b:c9:55:e0:16:90:28:58:26:4e:e9:b3:42:c4:
02:d0:f0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:11 2024 by rpki-client on console-ams.rpki-client.org