Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/rJAQmR-6QcxUhpMPeWQC0DgBXyc.roa
File: rJAQmR-6QcxUhpMPeWQC0DgBXyc.roa (raw, json)
Hash identifier: mEIPYeArvoCJHO2B+wHfVeDBCV5YUTJWsRAJbKQjHN4=
Subject key identifier: AC:90:10:99:1F:BA:41:CC:54:86:93:0F:79:64:02:D0:38:01:5F:27
Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial: 0185719E629C82EA7D1E2BC309B6E6E50594
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/rJAQmR-6QcxUhpMPeWQC0DgBXyc.roa
Signing time: Mon 02 Jan 2023 08:34:43 +0000
ROA not before: Mon 02 Jan 2023 08:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62125
IP address blocks: 185.46.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:62:9c:82:ea:7d:1e:2b:c3:09:b6:e6:e5:05:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Validity
Not Before: Jan 2 08:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac9010991fba41cc5486930f796402d038015f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:1a:18:81:6c:04:c1:03:a5:e4:2e:96:0f:
6b:40:68:4f:f8:fa:23:d1:ed:c3:ea:b9:33:cc:2f:
ad:0b:78:09:8f:da:28:f6:59:ee:8a:4d:da:42:06:
7c:95:98:18:83:58:a3:81:58:4e:4e:0a:45:a6:3c:
35:8f:e1:ba:96:cb:44:69:6f:05:84:1b:51:6b:86:
92:9d:5b:87:29:80:a3:3f:10:18:30:86:1b:1c:d1:
aa:b2:45:c9:3f:e4:d8:4a:6e:8f:f8:8a:f4:b3:04:
9f:8c:da:7e:a6:bd:01:cc:5e:d3:f9:8f:d0:08:e2:
2f:32:d0:d0:ea:5c:3e:9f:15:3c:50:1d:a5:b2:c6:
5d:97:01:3e:05:83:64:61:0f:26:43:54:d9:19:6c:
44:63:78:47:7c:6f:85:61:10:b8:35:1d:b6:be:ab:
d8:8f:b3:e8:d9:d0:3b:6e:95:d7:df:dd:2a:64:f0:
b6:6e:3b:06:c7:0d:55:22:2e:d5:65:60:d7:c4:72:
ab:44:24:04:c5:67:2b:6b:7b:0a:99:65:48:84:13:
9e:e0:86:6c:ef:0f:b7:12:32:8f:f6:38:1e:46:c7:
b9:fc:11:f6:6d:0c:2e:3b:67:3a:2c:65:ca:61:c8:
4b:01:58:b1:d2:af:7e:9e:0c:0d:74:ed:0a:0d:ef:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:90:10:99:1F:BA:41:CC:54:86:93:0F:79:64:02:D0:38:01:5F:27
X509v3 Authority Key Identifier:
keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/rJAQmR-6QcxUhpMPeWQC0DgBXyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.192.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:81:59:5a:25:ea:c4:7b:d0:a2:1a:2b:f9:a0:5c:3a:e9:52:
7e:49:d0:52:5a:d6:2d:1f:7f:36:93:d5:42:dd:7f:51:8c:b8:
47:32:90:a3:da:17:11:58:96:ef:43:d7:f8:00:97:94:08:d1:
c3:25:c8:a3:ec:0a:d0:7a:56:6c:55:e1:fb:47:6b:6d:c8:41:
9b:a9:3e:e4:33:5b:87:6c:7d:a7:3e:b4:93:b4:70:14:93:65:
62:bf:4b:f9:ce:b1:fa:fa:dc:ac:e2:fe:49:c5:bb:5f:56:c7:
92:03:22:da:04:9e:1b:2f:70:b1:f8:f7:b5:53:29:21:d2:9d:
67:0a:62:9d:7e:9d:41:db:81:d6:4f:17:8f:ae:ce:36:c9:c8:
42:ec:92:fb:71:0d:0c:14:b9:25:cf:dd:f7:e9:dc:2c:98:a7:
f1:42:f4:5c:11:a9:f9:44:3c:d4:b8:1d:be:be:0b:be:80:05:
fc:38:c4:a4:c7:64:ae:12:d0:ac:ca:34:32:df:96:38:8c:1a:
c0:c0:7e:ce:f4:a6:d8:b8:a6:56:35:51:b1:69:e0:ee:65:be:
c0:ff:b9:a1:c5:7c:3a:7e:c4:32:ce:32:26:e0:ba:98:d4:5f:
ce:28:2d:9f:dd:bb:c4:29:f8:27:c7:52:79:c6:8c:9f:b3:42:
cc:3b:51:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:34 2024 by rpki-client on console-ams.rpki-client.org