Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/105ZxO6bhfnSQ-myT4F0YkZjImY.roa
File: 105ZxO6bhfnSQ-myT4F0YkZjImY.roa (raw, json)
Hash identifier: FzRpxZrLMkipYKr7YjyOZj/x4lgsZFT1AnD5mDH8BrE=
Subject key identifier: D7:4E:59:C4:EE:9B:85:F9:D2:43:E9:B2:4F:81:74:62:46:63:22:66
Certificate issuer: /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial: 018A41295D932F66AC7F8324BB3BB0D07B3B
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/105ZxO6bhfnSQ-myT4F0YkZjImY.roa
Signing time: Tue 29 Aug 2023 11:59:04 +0000
ROA not before: Tue 29 Aug 2023 11:59:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203823
IP address blocks: 185.122.196.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:29:5d:93:2f:66:ac:7f:83:24:bb:3b:b0:d0:7b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb190d102ac9603b405b36374d429868604937af
Validity
Not Before: Aug 29 11:59:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d74e59c4ee9b85f9d243e9b24f81746246632266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:7e:55:bc:7d:4c:62:85:ad:49:a8:f7:7a:
ab:ab:3b:ed:0a:31:cf:79:dc:af:69:9e:d0:c9:35:
16:c9:53:35:9a:42:1f:ff:8a:8a:21:23:cf:62:c4:
d4:74:11:05:7c:28:f6:c2:4f:48:9d:78:a6:93:3e:
bb:85:15:46:35:4e:60:c6:df:76:73:2e:e8:b7:75:
c6:d5:2f:11:01:74:f1:59:1c:00:27:e3:79:a4:61:
ff:5e:ab:23:38:25:c2:7f:99:9b:e0:93:4c:91:ea:
3c:a5:ad:42:60:7a:44:a5:73:81:b9:6e:19:c5:f1:
64:46:9b:90:b6:13:94:a9:8f:f4:60:55:45:e1:c2:
43:ae:57:93:91:6b:87:b0:91:ac:58:4f:42:3b:5a:
01:26:a2:f1:df:bf:2c:3c:bd:70:9e:5c:e9:b1:b9:
20:8e:73:ec:82:31:7b:92:df:91:30:7c:f1:4b:c1:
c4:f8:f2:cf:48:5c:81:0d:0b:54:2b:b7:b8:85:0b:
b4:76:53:5b:f6:e0:dd:de:bd:d0:02:4e:df:80:60:
3e:c1:a5:e3:39:74:56:7c:a1:28:13:65:61:a6:f9:
ed:5a:4d:7e:8d:11:ee:56:d4:3c:41:99:10:e4:f1:
e2:b8:95:77:39:52:19:e2:da:91:89:3b:bb:cb:8d:
69:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4E:59:C4:EE:9B:85:F9:D2:43:E9:B2:4F:81:74:62:46:63:22:66
X509v3 Authority Key Identifier:
keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/105ZxO6bhfnSQ-myT4F0YkZjImY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.196.0/22
Signature Algorithm: sha256WithRSAEncryption
90:71:e1:77:9e:07:a2:24:16:4b:64:7d:d8:49:21:e3:d4:db:
e7:ca:c0:a2:b5:6f:a7:09:94:b5:36:03:c7:60:98:58:7f:f8:
38:23:64:6b:9a:27:e9:ac:38:ea:5f:97:7d:0d:2e:3e:4a:9d:
05:14:71:2c:98:ec:2e:48:c9:77:5c:43:4e:38:f7:90:6a:b6:
da:e6:4a:28:3d:37:94:b6:5e:f5:64:4d:1d:64:2d:2e:37:ab:
ed:d0:f9:5d:a6:ad:87:40:f8:05:ab:b8:a1:5b:54:e4:77:4c:
5c:a7:77:78:e3:10:66:f0:48:47:ed:94:09:54:33:5e:89:3d:
a5:22:f2:92:bf:9a:79:3c:0c:c3:a3:cd:79:35:be:d7:42:e5:
e9:e1:45:63:78:e6:6f:28:8c:f7:a1:07:5b:74:b0:ed:27:ec:
37:82:44:f5:20:dc:20:92:93:dd:20:b7:0b:52:4c:5e:b4:57:
16:83:f6:88:67:d9:a2:ed:8c:36:07:6f:67:40:7e:49:89:08:
d9:f6:1f:cc:3b:fc:62:70:73:49:7c:b7:28:d6:cb:3d:53:27:
87:92:1a:39:2a:8c:0a:84:94:e3:0e:69:3a:d2:25:47:bf:70:
fa:66:ec:98:67:11:07:25:52:d8:74:54:e9:a3:1f:a1:27:7c:
7c:7d:98:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:04 2024 by rpki-client on console-ams.rpki-client.org