Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/L9yMTEG34vB-QNswnxUghwsgRR0.roa
File: L9yMTEG34vB-QNswnxUghwsgRR0.roa (raw, json)
Hash identifier: eOp80WedcJ/MoFZZetoX0F0pQWyiijF2oCOG3lU5w50=
Subject key identifier: 2F:DC:8C:4C:41:B7:E2:F0:7E:40:DB:30:9F:15:20:87:0B:20:45:1D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCFE3D44C9C5B156B5AEAA5A1F9698
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/L9yMTEG34vB-QNswnxUghwsgRR0.roa
Signing time: Tue 02 Jan 2024 06:29:35 +0000
ROA not before: Tue 02 Jan 2024 06:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200623
IP address blocks: 185.222.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 14:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:fe:3d:44:c9:c5:b1:56:b5:ae:aa:5a:1f:96:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fdc8c4c41b7e2f07e40db309f1520870b20451d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:06:60:f5:80:88:18:30:a1:7c:64:6f:50:
8e:13:80:fa:f9:3c:8b:c9:b3:ef:14:df:6f:95:e3:
3d:00:40:5f:9e:62:7d:1e:9d:e3:9a:4a:56:1d:a4:
39:a4:5c:69:f6:f2:e4:76:b2:f2:1e:d0:d4:6d:a2:
bf:a0:cd:59:98:8a:32:39:52:1d:68:80:b7:1c:f0:
b8:d4:b7:f6:37:ec:6b:83:47:f3:3a:bd:85:a0:60:
22:6d:17:14:90:0e:89:36:50:8e:44:68:fa:af:2d:
b2:8f:d3:2d:b9:9d:67:b1:45:22:90:e7:c8:c7:8f:
d8:36:1d:e6:b7:b6:b7:86:0d:65:b2:96:e5:9f:6e:
3e:12:2e:0c:61:be:f4:13:f5:b8:c3:49:46:1a:c9:
7f:75:55:04:4c:be:91:d7:17:07:25:9c:90:24:ae:
c6:3d:48:7c:1c:49:0b:77:39:9f:34:6a:06:ca:d4:
5d:26:12:62:0d:74:c1:44:92:2f:54:9c:9f:a5:ed:
12:2d:84:41:a2:de:0a:90:ae:de:4a:7f:e4:0b:a2:
d0:ff:84:d0:83:d5:aa:40:de:9c:d1:5c:19:05:4b:
84:d1:47:04:be:30:4c:e9:cd:1c:50:15:d5:8e:d0:
29:55:6d:a8:cd:2a:db:6e:bc:bc:75:12:99:16:46:
c6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DC:8C:4C:41:B7:E2:F0:7E:40:DB:30:9F:15:20:87:0B:20:45:1D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/L9yMTEG34vB-QNswnxUghwsgRR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:65:b7:df:4a:d3:d4:7c:f6:6d:dc:3f:13:31:11:55:8a:77:
89:79:3b:37:75:54:24:c6:15:06:26:a3:78:37:5d:05:ae:74:
28:21:95:65:04:c9:30:04:2c:58:62:ac:ec:d9:f1:6d:eb:1b:
bb:63:4d:80:be:2a:f5:e2:b3:4b:0e:8e:7c:1c:f2:5c:f6:d2:
48:5d:7c:7a:60:c0:d8:1f:49:71:91:27:a2:ed:8f:54:bb:d6:
4c:06:61:a2:64:c4:ce:1c:f0:06:f4:a1:0d:79:70:5e:49:9b:
c2:00:95:9a:90:18:25:06:76:4f:f5:11:31:9e:b0:dc:7a:91:
12:8e:ae:32:f8:60:6c:7f:13:69:91:1e:67:86:29:47:21:82:
8b:a8:ca:fd:15:64:8f:ba:e3:22:c8:0f:ff:a8:57:26:c5:1d:
1c:17:48:7e:8c:70:ce:56:ca:c0:e7:fc:a8:70:a8:c1:93:09:
fb:9e:4b:f2:36:5e:bd:fe:44:ee:d2:92:e8:f8:df:8a:21:b0:
66:74:aa:c8:3b:4d:48:ae:14:bc:d4:d2:b9:67:4f:1b:5c:33:
d3:4e:e2:f2:aa:b2:f6:b1:f7:c7:57:af:99:04:51:90:10:88:
7e:ba:7f:19:b6:73:4b:04:2c:58:33:a0:b6:7b:cd:86:de:7a:
6e:5c:f6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 18:17:00 2024 by rpki-client on console-ams.rpki-client.org