Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/5uXBr-twHLjLJMFZSysJ5tfVMt4.roa
File: 5uXBr-twHLjLJMFZSysJ5tfVMt4.roa (raw, json)
Hash identifier: GdKgaILycVjNUaYYqT2/Xob3wMl52sXx9XzyrtfOkNs=
Subject key identifier: E6:E5:C1:AF:EB:70:1C:B8:CB:24:C1:59:4B:2B:09:E6:D7:D5:32:DE
Certificate issuer: /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Certificate serial: 0185708CA4C3F44168EBCDC413D58ACD1AAC
Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/5uXBr-twHLjLJMFZSysJ5tfVMt4.roa
Signing time: Mon 02 Jan 2023 03:35:43 +0000
ROA not before: Mon 02 Jan 2023 03:35:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.144.16.0/22 maxlen: 24
2a04:2f81::/42 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:a4:c3:f4:41:68:eb:cd:c4:13:d5:8a:cd:1a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Validity
Not Before: Jan 2 03:35:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6e5c1afeb701cb8cb24c1594b2b09e6d7d532de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:e5:f8:d4:6c:3a:c4:ff:36:01:df:f0:2b:
24:9e:13:f4:20:60:d7:80:bb:ad:4c:29:6c:e0:fe:
60:9e:28:97:d8:93:84:f9:3b:18:7a:70:2b:e4:9a:
08:38:ee:4b:75:85:c2:86:9b:1c:ca:f6:57:0d:a4:
95:cf:0d:84:f9:07:40:8d:6e:8b:e3:62:cb:ea:88:
ea:65:5b:80:e9:cf:68:95:95:ec:b1:f6:52:a9:1b:
c0:a4:5d:70:f7:58:11:7e:9a:d5:ee:36:d1:e2:06:
09:ec:ee:83:f2:eb:f5:07:89:24:02:74:24:02:49:
69:83:e0:b7:a7:28:ff:9c:ad:10:ba:74:5d:ea:e4:
1f:64:d1:fa:0f:a9:69:c8:8a:7a:96:88:cf:8d:45:
72:80:45:69:62:1b:5e:65:b5:01:be:62:3b:e8:d2:
e8:c8:52:43:57:c2:c4:5b:cf:7c:6e:b7:4f:03:71:
ad:8e:6a:ae:60:6c:c7:ca:96:99:73:a6:ec:df:37:
96:2e:e3:14:1c:88:13:88:e7:03:eb:d8:99:ef:9d:
03:ba:36:62:c5:88:d5:b9:bb:a1:7a:a9:f4:2c:97:
a5:bb:52:e6:3f:07:13:c3:a0:4b:e1:51:93:21:8e:
18:86:a6:9e:57:c6:2a:ba:51:57:4d:6a:e3:3f:e0:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E5:C1:AF:EB:70:1C:B8:CB:24:C1:59:4B:2B:09:E6:D7:D5:32:DE
X509v3 Authority Key Identifier:
keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/5uXBr-twHLjLJMFZSysJ5tfVMt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.16.0/22
IPv6:
2a04:2f81::/42
Signature Algorithm: sha256WithRSAEncryption
73:ee:f9:8d:61:52:8f:ed:37:bd:13:83:3a:39:43:90:03:c3:
94:a1:68:b2:67:57:9d:02:a9:9e:35:b8:1b:90:3e:af:7a:5f:
cb:94:7c:db:0d:89:a8:92:b8:48:ab:9c:44:f8:ca:6c:b0:3d:
14:23:36:32:a3:5b:98:e0:c1:65:65:23:4c:29:d3:13:94:b9:
df:74:47:75:a5:4f:0f:68:e3:f9:a6:6f:f5:5d:e1:10:f3:f7:
67:2b:61:d8:fc:a5:05:e2:b7:16:b1:2e:ac:f5:fe:00:c6:fc:
2c:96:5d:01:75:fb:7d:93:26:dd:24:9f:43:e6:c9:bf:da:ae:
b3:84:9c:06:62:13:a6:b9:ee:19:1c:32:03:60:23:0c:1a:00:
e5:26:ed:65:ff:3d:31:f5:58:8b:af:c5:18:f2:73:7e:9b:56:
61:a2:28:be:4e:08:f5:75:e6:65:e2:14:22:54:d1:2a:86:05:
21:91:de:d0:4e:39:6d:78:f5:ec:e0:15:46:af:6d:86:6c:32:
22:86:ea:93:29:6e:7f:09:91:35:51:31:57:53:95:46:ba:23:
9c:ed:14:ce:cb:58:fc:02:4d:2b:5a:66:02:f5:35:ad:53:78:
d6:73:3b:79:06:1c:59:95:22:6b:f9:51:96:9f:8d:70:6e:41:
fe:31:ae:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:53 2024 by rpki-client on console-ams.rpki-client.org