Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SW1VSMTcM_bAXvtn01JI2OgAf68.roa
File: SW1VSMTcM_bAXvtn01JI2OgAf68.roa (raw, json)
Hash identifier: SvVjaitthV6JeYIy67c8vnujbfLWrbCYl3VHfSzbFTY=
Subject key identifier: 49:6D:55:48:C4:DC:33:F6:C0:5E:FB:67:D3:52:48:D8:E8:00:7F:AF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCD4D741467D5D3EFFA5D0ED15587C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SW1VSMTcM_bAXvtn01JI2OgAf68.roa
Signing time: Tue 02 Jan 2024 06:29:24 +0000
ROA not before: Tue 02 Jan 2024 06:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22653
IP address blocks: 185.252.160.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 09:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:d4:d7:41:46:7d:5d:3e:ff:a5:d0:ed:15:58:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=496d5548c4dc33f6c05efb67d35248d8e8007faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:79:e7:d0:c3:de:9e:2f:6f:4d:84:5e:c9:
d5:8c:f2:95:18:e0:f7:0c:65:5a:39:16:3c:db:4d:
b1:ea:43:d6:87:3a:21:ec:bd:ff:ef:92:19:e7:45:
d8:6d:35:ea:0d:bb:f9:26:31:28:c9:e5:e5:05:32:
4d:40:7a:1a:62:ae:3f:0b:ef:d8:68:3e:ec:82:a4:
00:03:53:25:f7:1f:96:be:e0:26:40:e8:5a:df:d9:
7b:ba:11:9a:21:c1:51:53:d7:e3:b6:e4:6b:a2:7b:
66:ae:4d:e4:71:e9:e0:0e:ca:39:05:ea:52:63:63:
49:4c:d2:19:6c:89:6a:3a:db:6d:d0:59:51:6b:55:
9e:29:00:c8:c3:5f:24:df:34:d2:fc:b0:28:bf:d1:
3d:61:76:c3:c1:ee:48:8c:d6:8a:87:b1:80:e6:f5:
83:27:1b:7a:34:6a:6f:39:73:a0:e2:26:75:e8:64:
bd:c1:bc:86:5f:95:20:c1:32:0a:47:41:aa:32:4f:
1d:d9:23:35:d0:1d:a5:00:4e:e8:7c:2f:08:fb:83:
dd:17:06:11:66:a6:84:6a:23:85:09:a1:16:cc:bb:
70:a4:48:96:ae:2e:b5:cd:32:92:43:24:a0:d4:6a:
4e:5e:53:c1:08:4a:41:e2:96:29:21:e3:f0:91:fd:
2e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6D:55:48:C4:DC:33:F6:C0:5E:FB:67:D3:52:48:D8:E8:00:7F:AF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SW1VSMTcM_bAXvtn01JI2OgAf68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.160.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:f3:b9:b5:2a:46:3f:36:ac:c1:af:f5:af:0d:bd:e2:a5:32:
df:3f:f7:c0:03:85:7b:e2:49:2d:9b:21:15:24:27:54:3b:77:
73:b2:aa:90:01:f7:f7:06:a3:87:4c:b1:61:5a:53:b1:75:65:
5e:5a:89:c6:7b:25:d1:ce:de:ca:6b:c2:95:4c:ba:14:7e:45:
e3:99:8f:61:b8:af:b2:1f:b5:11:d4:6d:71:a5:6f:b2:69:88:
9e:2f:2a:ad:61:d8:04:0b:c3:01:5f:38:e8:30:69:90:e0:f3:
97:48:ac:ab:27:7c:d8:8c:5e:8d:73:94:ea:ba:4f:4f:91:f3:
c1:13:54:93:f8:93:e8:01:6d:ff:36:d1:f1:34:23:e7:04:46:
ad:8b:61:8c:de:16:40:28:0b:fd:ab:da:e8:ca:bc:5d:4f:ae:
b9:47:58:09:6e:45:e3:35:0f:d7:88:fb:1b:9c:0f:85:1d:db:
5d:16:b4:db:1f:12:b8:02:89:9d:8f:4c:8f:db:08:0a:db:f5:
8b:de:f7:be:37:21:c2:68:96:cb:51:3e:cf:64:85:1d:ad:56:
86:bf:cb:99:61:8d:de:c3:7d:e8:36:a7:ac:2f:8a:fc:c3:1e:
ae:d4:a7:bf:23:b5:d2:dd:c7:b8:4c:d8:7e:db:0a:6b:0d:7f:
e7:36:04:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 13:45:37 2024 by rpki-client on console-ams.rpki-client.org