Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/Lx1qUGvGfqUq4iT08me_YkWZsEA.roa
File: Lx1qUGvGfqUq4iT08me_YkWZsEA.roa (raw, json)
Hash identifier: 6B4+l91H8R0B6N/JxyFR/3CgCoXgw9vkNpbhfnpB3Nw=
Subject key identifier: 2F:1D:6A:50:6B:C6:7E:A5:2A:E2:24:F4:F2:67:BF:62:45:99:B0:40
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 018570B0658D778CD742549C702413CF1711
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/Lx1qUGvGfqUq4iT08me_YkWZsEA.roa
Signing time: Mon 02 Jan 2023 04:14:46 +0000
ROA not before: Mon 02 Jan 2023 04:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200547
IP address blocks: 185.192.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 03 Mar 2023 15:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:65:8d:77:8c:d7:42:54:9c:70:24:13:cf:17:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Jan 2 04:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f1d6a506bc67ea52ae224f4f267bf624599b040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:41:47:e2:bf:1d:93:83:84:c4:41:3e:e1:
0a:cc:8b:d0:ec:da:b9:e4:2c:8c:e3:ac:01:57:c8:
e7:d3:1f:b1:a8:96:7c:35:f3:6d:19:14:24:bc:26:
7c:86:1f:bc:b0:0c:5a:3b:99:01:7b:07:45:59:0a:
34:e1:2d:b0:18:4b:20:19:40:c4:8a:22:ec:70:20:
70:c2:3d:cf:e2:76:68:25:d9:1c:4d:71:d5:14:9c:
03:d3:0c:1e:5d:08:49:f8:da:0d:1a:ee:d8:55:a4:
3d:fa:50:54:51:3e:0e:e9:12:c5:2d:97:7b:90:e4:
40:a6:86:7e:2e:19:b8:df:92:f9:24:c0:a1:73:0d:
47:1f:48:aa:1d:37:03:6b:13:55:5a:50:c2:28:3a:
7b:fd:d3:e0:a3:78:79:73:e5:0e:f0:87:9b:31:eb:
1d:42:cd:63:39:1d:76:ad:f2:55:b8:5f:d5:d8:91:
a5:a0:34:84:11:fd:b5:6a:8d:83:7c:4a:56:cf:3e:
ee:e9:e5:ae:3d:75:7c:c5:47:f1:2b:cd:89:07:8c:
b9:7a:d7:21:59:27:ae:33:22:9d:84:62:2b:ac:ee:
a9:ba:51:41:8b:78:05:91:0a:a4:c1:4e:a9:30:52:
83:01:27:72:76:cf:2e:ae:04:3f:01:fc:19:66:8a:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1D:6A:50:6B:C6:7E:A5:2A:E2:24:F4:F2:67:BF:62:45:99:B0:40
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/Lx1qUGvGfqUq4iT08me_YkWZsEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.212.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:9e:6d:bc:56:62:f8:5b:07:b8:9b:bb:64:dd:6d:ff:4e:53:
ad:26:72:e1:25:74:e1:9b:8e:de:fd:d5:1e:22:2d:c3:78:49:
42:3e:cc:42:5b:98:e8:f6:5b:33:99:1f:b1:9d:33:fb:bf:bf:
c7:ee:40:f7:1f:e7:6a:c5:34:8e:77:ca:d5:15:38:26:0b:95:
6e:c5:9e:58:ad:a7:d6:46:98:a8:b2:76:e9:c4:38:5e:c9:99:
28:a1:0f:49:a7:a4:fd:a2:6e:ff:8b:ad:16:4b:a5:ea:cb:90:
96:f8:5d:e6:b5:15:37:3b:8d:ab:21:8c:2f:e4:84:22:6e:1c:
84:6f:7c:33:87:70:04:9c:ac:54:4d:00:c1:b2:60:33:1f:d8:
8e:7b:4e:69:cc:8c:19:e8:92:72:09:86:e0:aa:ac:37:43:06:
f1:bb:3e:9f:17:d7:19:91:80:9a:bd:9e:0e:ef:93:21:26:1d:
bd:3a:04:02:80:c2:41:ba:c0:d8:2a:16:b1:2d:39:3d:b3:7b:
bc:e2:5b:11:15:d0:36:ad:71:24:3a:be:9e:ec:2a:41:4a:fe:
48:b1:28:35:c1:01:a4:8d:a6:e8:99:38:93:8b:54:c3:be:a1:
ef:bc:a4:34:54:db:0e:c4:c7:58:de:85:27:e8:e2:e7:69:1c:
3c:ff:02:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:09 2024 by rpki-client on console-ams.rpki-client.org