Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/dHo5oUgZtzbm0Kzu4BHfQFAkyYE.roa
File: dHo5oUgZtzbm0Kzu4BHfQFAkyYE.roa (raw, json)
Hash identifier: CgSJbPOzTx4yK/5En8bA8Kki44ohIAlAjKqOVa8bEQ8=
Subject key identifier: 74:7A:39:A1:48:19:B7:36:E6:D0:AC:EE:E0:11:DF:40:50:24:C9:81
Certificate issuer: /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial: 018570703F886E4822074E7E8463A250331F
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/dHo5oUgZtzbm0Kzu4BHfQFAkyYE.roa
Signing time: Mon 02 Jan 2023 03:04:42 +0000
ROA not before: Mon 02 Jan 2023 03:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.187.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:3f:88:6e:48:22:07:4e:7e:84:63:a2:50:33:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Validity
Not Before: Jan 2 03:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=747a39a14819b736e6d0aceee011df405024c981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:61:cc:66:e5:29:e8:e3:23:bd:30:3a:c3:
d3:a1:2e:1b:64:42:04:6d:01:77:87:a8:47:ee:dd:
1b:cd:70:b0:b5:b8:7c:8b:84:41:24:5d:2c:57:55:
79:bf:d5:df:93:3e:a9:ca:9c:1e:e5:7a:51:4f:2d:
cb:02:20:8c:31:0f:ab:70:33:4f:9f:0f:3c:e5:2a:
aa:e6:95:dd:1a:6f:23:45:5c:36:eb:ad:3b:89:96:
40:85:58:69:65:86:f3:72:5d:c2:c2:3c:96:9a:2e:
b1:a0:14:42:a3:39:4e:91:3a:6c:e3:da:1c:9e:4f:
83:d5:5d:58:8d:80:83:43:5c:12:05:5c:9f:6a:1b:
28:c3:f0:89:33:4b:c6:0d:a5:ac:bc:51:1a:7c:94:
ad:88:69:ec:ea:e8:a9:bb:72:78:03:61:35:11:0c:
ad:6e:98:34:65:c5:b8:41:1a:97:25:f4:3c:5a:e8:
47:a2:f8:d7:70:c8:dd:b1:a3:11:29:ab:c8:23:c4:
c7:e4:cf:7a:84:c4:3d:8b:1c:f9:81:c5:59:18:03:
ba:e9:3b:49:26:cf:93:6b:f5:54:1c:9a:f3:b7:89:
ec:f2:9c:10:5a:5e:0b:fb:c0:dc:2f:5b:bf:19:9e:
9f:68:4e:df:82:69:bb:45:ed:67:77:f4:cf:57:e5:
da:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7A:39:A1:48:19:B7:36:E6:D0:AC:EE:E0:11:DF:40:50:24:C9:81
X509v3 Authority Key Identifier:
keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/dHo5oUgZtzbm0Kzu4BHfQFAkyYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.116.0/22
Signature Algorithm: sha256WithRSAEncryption
05:54:be:f3:ce:3d:09:2f:3b:0e:6c:76:5d:68:07:8a:e3:0e:
68:1e:01:71:5a:cc:8d:a0:9a:ea:2f:2f:20:a1:d6:2d:61:a8:
71:7f:55:a1:a1:b7:c0:6b:e3:64:f5:64:18:6b:63:40:f5:20:
78:05:96:5f:dc:00:0f:a4:79:95:47:c1:2e:85:24:98:f2:f6:
77:25:c4:ce:ef:2f:d4:2a:31:bb:b3:40:a4:bf:c9:0b:5e:7f:
59:f9:d6:93:01:7f:a8:ec:62:58:d6:92:2b:64:ec:e5:3c:48:
d3:a9:f5:65:91:b7:fb:20:12:e0:11:a3:af:1e:3c:48:19:67:
d3:2b:73:f6:7c:bd:ac:08:10:30:be:1a:ac:d5:5c:4f:21:72:
f5:6f:a1:3f:b4:3e:67:6a:1f:61:6c:cb:5e:44:1b:40:7c:a5:
6f:d6:cb:30:70:0e:26:04:11:24:cd:57:fb:cb:68:38:d2:e6:
79:fa:bf:ed:6b:0f:5a:fe:d9:d0:3e:54:c3:31:14:ee:4c:7c:
f6:4f:dd:6e:c2:90:73:38:b1:1b:85:11:f5:92:43:eb:9c:11:
db:03:5f:1e:35:5f:3d:8d:c0:73:89:ec:f1:45:e5:3c:c0:2c:
a3:f4:eb:31:df:1a:53:b4:64:90:99:78:d6:86:4e:40:ba:62:
9a:4e:84:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:44 2024 by rpki-client on console-ams.rpki-client.org