Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/As7QkyWak7gu_6ZdEqy6sqNBOhQ.roa
File: As7QkyWak7gu_6ZdEqy6sqNBOhQ.roa (raw, json)
Hash identifier: IJnT70wNlQB8d7xx+l8NwmrcE2sttkie6LXsBiG9Iho=
Subject key identifier: 02:CE:D0:93:25:9A:93:B8:2E:FF:A6:5D:12:AC:BA:B2:A3:41:3A:14
Certificate issuer: /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial: 018570704023DD78995F89EC5B8045D3579F
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/As7QkyWak7gu_6ZdEqy6sqNBOhQ.roa
Signing time: Mon 02 Jan 2023 03:04:42 +0000
ROA not before: Mon 02 Jan 2023 03:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.187.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:40:23:dd:78:99:5f:89:ec:5b:80:45:d3:57:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Validity
Not Before: Jan 2 03:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02ced093259a93b82effa65d12acbab2a3413a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:8b:c6:da:88:4f:36:04:db:9c:0d:c0:02:
eb:97:b1:33:29:da:dd:b6:ce:ce:59:55:6f:bc:38:
5e:50:0f:d5:0d:cb:01:19:b3:ae:a9:b8:3d:7b:7c:
22:41:3a:bb:d6:2d:6c:e7:f5:9b:d8:e9:68:d4:d3:
fc:c8:1a:ee:da:54:89:72:f8:58:d8:74:31:96:9f:
eb:ae:88:50:6e:57:74:d0:83:c6:3c:cc:3f:00:ca:
dd:3b:c7:78:0b:d9:df:1e:a6:7b:3b:d4:be:d8:ef:
10:d3:da:5d:9f:dc:c1:f1:d4:3e:ad:1b:0d:2d:05:
f2:b8:ed:3c:ae:ab:0b:d8:65:e9:d7:da:a7:80:1b:
87:1c:60:7f:4f:75:c5:21:a2:e6:ab:af:74:a4:2b:
38:67:36:54:8d:2f:b7:96:b2:ac:ba:94:40:09:5b:
58:04:2e:05:07:46:ed:1d:ca:26:6e:49:d1:dd:05:
37:4d:1a:0b:95:61:47:9f:fb:bc:52:0d:13:41:54:
b7:23:1e:3c:d9:8f:40:b2:58:a6:53:9a:21:44:c3:
96:4c:0d:c0:ec:32:5b:69:1c:26:4d:d1:29:39:2c:
ea:dc:e0:77:36:d0:b2:93:4d:c8:f2:e7:4f:64:3a:
47:23:6c:19:52:83:fe:64:b4:fc:6e:4e:c1:8d:be:
9b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CE:D0:93:25:9A:93:B8:2E:FF:A6:5D:12:AC:BA:B2:A3:41:3A:14
X509v3 Authority Key Identifier:
keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/As7QkyWak7gu_6ZdEqy6sqNBOhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.116.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:c2:c3:df:cf:ff:a5:40:dd:86:76:20:15:6c:83:68:8d:e7:
1a:4b:d7:4e:7d:9a:46:55:29:15:d6:aa:49:3f:c9:5f:69:55:
0a:32:ef:ad:e5:1e:03:2b:44:d4:16:62:c3:50:b1:4c:ca:2a:
b9:75:c5:6a:9e:fc:c0:68:97:ec:f7:81:79:70:66:e5:30:b8:
9c:a0:d3:99:fe:70:2d:51:22:1b:7f:0f:e2:f5:7e:ec:61:08:
40:dd:d8:cf:53:67:ab:73:26:24:58:ae:c4:33:7b:91:52:51:
2e:a1:9f:0b:ce:99:28:57:c2:3f:7b:cd:1f:ff:ce:17:d5:78:
cc:28:e7:66:ac:ee:fe:e3:1a:08:a3:9a:34:37:2c:48:40:40:
c2:d5:c1:7b:34:6d:2b:da:68:20:6c:7e:08:a0:68:0d:3c:01:
23:54:0b:33:2d:c5:4c:0d:e1:b6:f4:a7:8c:27:5b:d2:4a:e7:
73:78:f4:ed:e5:f0:22:ae:19:87:c3:4e:73:9f:f7:25:52:ea:
8f:94:e5:a1:68:df:bd:d0:da:52:53:f5:60:a9:4c:d3:8c:29:
c2:f0:02:8c:00:c1:51:45:e0:cc:13:82:0e:d9:67:82:7d:b2:
9d:7e:e0:4f:0c:2d:2e:21:e2:9a:ed:f2:56:9b:a7:d7:76:4d:
15:e3:3a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:44 2024 by rpki-client on console-ams.rpki-client.org