Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/a_0UqxWIfPmO1qIyPvdWZp8O5-w.roa
File: a_0UqxWIfPmO1qIyPvdWZp8O5-w.roa (raw, json)
Hash identifier: PlGk8NfQh1qXEZTBAF0YQ9b+bs6pNfqRhbkrJ+WzGyY=
Subject key identifier: 6B:FD:14:AB:15:88:7C:F9:8E:D6:A2:32:3E:F7:56:66:9F:0E:E7:EC
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 0188D29251AE48D8C43F9135462B855B0502
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/a_0UqxWIfPmO1qIyPvdWZp8O5-w.roa
Signing time: Mon 19 Jun 2023 07:33:04 +0000
ROA not before: Mon 19 Jun 2023 07:33:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41075
IP address blocks: 185.6.136.0/22 maxlen: 22
94.199.176.0/23 maxlen: 24
185.234.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Nov 2023 19:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:92:51:ae:48:d8:c4:3f:91:35:46:2b:85:5b:05:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Jun 19 07:33:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bfd14ab15887cf98ed6a2323ef756669f0ee7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:64:95:18:24:97:90:f2:cb:6f:27:f8:98:9e:
50:75:47:06:7c:ae:ff:e5:5f:8b:29:f2:71:fb:29:
79:05:93:64:b3:40:0b:f3:5c:4c:c3:8b:98:28:90:
bd:73:1a:d8:10:3b:4d:76:89:6a:47:93:06:04:2b:
21:b7:c8:a5:ef:b4:ab:a3:3f:84:61:cb:71:99:cd:
a8:80:b1:ad:b7:40:ae:5c:e1:bd:c6:2f:14:44:86:
36:2a:b5:25:af:be:10:74:09:46:c6:e6:c5:c0:05:
b3:71:bf:6d:0b:73:94:1a:d4:a0:cc:be:92:9f:d9:
73:d8:36:20:e7:5f:4d:c8:b6:10:04:c5:00:da:5f:
49:5f:11:b1:00:1f:c3:a7:1d:74:0b:31:89:da:4f:
0e:2e:6f:a5:f8:aa:db:54:18:98:fd:5d:ab:59:ee:
b7:92:cc:02:ab:e8:35:e1:ce:2c:b3:b5:ff:03:69:
c2:1a:a1:ca:03:f4:02:21:37:90:cd:d7:d8:91:a9:
b1:ed:f8:b4:a4:9b:da:21:31:fd:69:42:7e:cc:52:
86:f4:33:9e:ec:44:5c:d2:35:3b:a1:49:46:6b:55:
1f:9e:56:bd:84:53:24:8a:f9:a9:e2:ad:80:b0:5a:
c6:ba:27:aa:71:a5:3e:c4:02:52:0f:fb:cb:1c:72:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FD:14:AB:15:88:7C:F9:8E:D6:A2:32:3E:F7:56:66:9F:0E:E7:EC
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/a_0UqxWIfPmO1qIyPvdWZp8O5-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.176.0/23
185.6.136.0/22
185.234.182.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:18:86:dc:43:9d:71:b5:17:76:a0:d6:83:fb:6c:6e:f8:aa:
ad:9b:0c:fa:bc:46:55:ed:4e:55:4f:cf:89:a4:96:37:ca:5b:
d3:58:ec:30:b8:21:fd:7d:3e:e2:e7:54:0f:1b:37:ad:8b:7b:
e1:0e:a6:6e:6d:f8:2b:d0:7a:58:34:cd:6a:51:03:ec:c3:42:
cc:5c:90:3b:bd:70:eb:80:da:a0:7e:f6:23:c9:89:87:39:b6:
fa:17:05:75:15:fb:77:a6:9d:f6:2b:74:9a:f3:cb:86:67:1e:
c4:33:44:cc:2f:bb:56:22:4a:81:29:39:31:24:3c:86:76:c9:
dc:f7:5f:1f:f2:39:ea:ea:92:16:ae:b3:71:77:b5:fd:c2:4f:
4f:ad:0c:ab:0a:a6:44:45:c3:eb:34:87:d5:42:3d:32:98:36:
97:cc:c5:19:a4:af:f3:77:e3:62:c4:1d:15:bc:b7:1f:e6:72:
e0:95:72:80:c2:9d:ac:72:d9:f3:b3:8f:42:27:fe:36:1e:fd:
e0:40:0a:32:28:1d:61:e0:fd:b3:65:6a:97:c6:a7:f7:67:ec:
43:b4:37:fb:ea:72:85:92:f7:7f:1e:cb:7d:8f:20:84:1e:25:
c5:0c:4a:f9:48:dc:a9:08:ca:b2:cf:92:e2:5c:91:9c:79:53:
40:3a:44:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:32 2024 by rpki-client on console-fra.rpki-client.org