Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/_23zqrdVssWhuZilfoY3qGq710Y.roa
File: _23zqrdVssWhuZilfoY3qGq710Y.roa (raw, json)
Hash identifier: J890sR0e2sLhKT7kQ0TuOI2f7Uypk+YMhBdO923nG/g=
Subject key identifier: FF:6D:F3:AA:B7:55:B2:C5:A1:B9:98:A5:7E:86:37:A8:6A:BB:D7:46
Certificate issuer: /CN=597582bc3f0badb661a69fb9a483b37ec905827e
Certificate serial: 0189BA7243C77FBEA32C6A523F9A3CD8F392
Authority key identifier: 59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/_23zqrdVssWhuZilfoY3qGq710Y.roa
Signing time: Thu 03 Aug 2023 08:09:57 +0000
ROA not before: Thu 03 Aug 2023 08:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62244
IP address blocks: 185.43.96.0/22 maxlen: 22
2a01:65e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:72:43:c7:7f:be:a3:2c:6a:52:3f:9a:3c:d8:f3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597582bc3f0badb661a69fb9a483b37ec905827e
Validity
Not Before: Aug 3 08:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff6df3aab755b2c5a1b998a57e8637a86abbd746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:4a:88:52:e4:9c:a9:30:8b:2b:9d:f9:e8:
b9:4f:a4:74:2c:d2:bb:91:5a:64:de:ec:bb:b3:06:
4d:10:80:ed:69:b1:34:ea:a5:60:db:5d:de:6c:cc:
65:d7:ed:75:28:c4:19:fd:f3:a2:2d:90:98:55:0a:
38:66:27:19:78:f1:9d:c1:b6:1b:07:bc:e4:de:23:
b9:2a:3d:8c:65:a4:7c:3b:c4:03:a8:f7:6c:72:8f:
7d:78:88:2a:8c:00:25:57:28:ad:37:a7:f0:41:66:
b8:48:c9:6c:d4:89:76:98:67:14:dd:f1:a9:28:b2:
4b:17:56:7b:57:60:f6:fc:15:20:13:5f:e8:1e:0c:
59:b8:a2:7a:18:e0:25:64:51:10:c1:1b:4a:67:35:
ce:6f:5b:b1:ec:fc:12:af:19:4e:91:d1:fd:bf:17:
ab:e8:c4:a9:c2:4f:7c:07:5e:a6:7c:db:7d:1c:97:
6c:7a:76:17:d2:17:0a:cc:da:d3:91:d1:f4:09:f1:
bd:85:cc:74:47:4c:01:83:ee:69:83:20:98:be:d0:
ce:05:29:ea:af:c3:3b:94:b6:2b:d0:75:0f:08:f5:
27:0d:90:15:b3:20:52:c8:f5:ff:65:af:6e:ec:df:
33:0e:07:7e:a8:90:5f:19:48:83:5e:34:c2:1e:bd:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6D:F3:AA:B7:55:B2:C5:A1:B9:98:A5:7E:86:37:A8:6A:BB:D7:46
X509v3 Authority Key Identifier:
keyid:59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/_23zqrdVssWhuZilfoY3qGq710Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.96.0/22
IPv6:
2a01:65e0::/32
Signature Algorithm: sha256WithRSAEncryption
c3:d7:1d:58:54:58:f0:01:fb:ec:32:b1:b9:5e:bc:ee:0c:b8:
a6:07:01:17:c5:13:25:b9:62:ea:70:c9:a3:d1:7d:02:08:7a:
ee:15:60:0d:a3:cb:5e:22:e4:0c:fe:02:64:08:69:c7:2a:55:
0d:f8:89:9d:88:53:f8:10:7f:70:5b:36:2b:98:cd:f3:14:98:
3c:af:58:88:a9:ba:ca:65:93:57:ca:b8:13:c8:17:13:94:17:
ae:38:1d:aa:f9:e4:0b:fc:fb:5f:44:18:f4:75:47:5d:01:90:
aa:ff:dd:37:e3:e9:7c:72:11:c0:4d:6f:ae:98:fc:e3:1d:ce:
85:2a:0d:ee:53:9a:e6:1d:30:47:cf:89:a7:bd:cc:c1:bb:88:
c6:b3:4b:e5:06:0e:65:36:65:e0:5c:6c:c0:25:47:71:5d:d4:
ba:42:ab:07:a4:9d:ae:f1:2e:bf:0f:5f:97:47:f1:80:1f:92:
d6:38:75:4a:5b:1f:aa:84:8d:d1:24:da:b9:6c:2c:ef:19:fc:
e7:e4:32:3b:3f:3b:d3:9b:8e:bc:19:bb:c9:3a:65:d8:7d:dc:
96:c4:e1:8e:c1:94:e5:50:0f:10:09:22:2d:7c:0e:0a:94:71:
42:d8:0f:5c:7d:b3:17:d3:1b:9d:0b:29:1c:c0:81:8c:02:c9:
89:87:bf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:52 2024 by rpki-client on console-ams.rpki-client.org