Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/1-kOmXjluN2Yft_I54rk5k553Ms.roa
File: 1-kOmXjluN2Yft_I54rk5k553Ms.roa (raw, json)
Hash identifier: ZYwJfSLaNogwNWOEBLoiysHNaB68dK28KhZF5kDwJZk=
Subject key identifier: D7:E9:0E:99:78:E5:B8:DD:98:7E:DF:C8:E7:8A:E4:E6:4E:79:DC:CB
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 01856B257B631D9C302330AF9A1DE6F1533D
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/1-kOmXjluN2Yft_I54rk5k553Ms.roa
Signing time: Sun 01 Jan 2023 02:24:56 +0000
ROA not before: Sun 01 Jan 2023 02:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39583
IP address blocks: 185.7.4.0/22 maxlen: 22
195.244.20.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:25:7b:63:1d:9c:30:23:30:af:9a:1d:e6:f1:53:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Jan 1 02:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7e90e9978e5b8dd987edfc8e78ae4e64e79dccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:b3:d9:7d:99:a0:1a:dd:40:53:3f:d8:14:
7f:a5:12:7d:15:b4:5a:4d:a1:88:83:a9:cd:2b:8a:
79:aa:21:7b:d7:0c:20:8d:50:5e:4a:b4:4b:e0:34:
b9:bb:32:40:1d:94:ce:ea:6a:6e:5b:e6:da:09:6f:
7b:ac:0d:05:98:2e:cf:a6:20:c1:f2:14:d2:df:33:
0e:f3:cb:37:78:d0:89:9a:11:f3:de:0d:04:5a:f6:
22:6e:53:77:49:0e:69:ee:fb:9a:22:47:4d:a0:19:
41:72:b4:93:62:50:5e:04:9b:aa:a0:97:1c:a1:aa:
4d:d2:95:79:c9:f2:c2:55:2f:e6:44:32:e7:48:a6:
62:33:53:7b:d0:8f:9f:02:a9:0f:03:f0:ee:54:53:
b3:67:c4:a8:a4:5d:52:e8:1f:f7:b8:82:ee:23:86:
22:28:50:8b:ae:ff:0a:66:4e:80:c1:26:49:e4:fa:
04:24:7d:08:c6:4c:3b:89:33:65:95:1f:82:0c:c3:
23:29:3a:8b:a5:ba:82:82:70:37:d1:45:7a:0e:8c:
5b:ad:36:7b:a2:64:70:43:bc:c9:44:74:73:fd:ec:
43:d4:5b:75:59:5a:55:f1:46:c0:6c:bd:0b:a6:83:
2a:16:73:a8:09:6d:23:c4:1b:9b:00:0e:18:b4:d3:
a0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E9:0E:99:78:E5:B8:DD:98:7E:DF:C8:E7:8A:E4:E6:4E:79:DC:CB
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/1-kOmXjluN2Yft_I54rk5k553Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.4.0/22
195.244.20.0/23
Signature Algorithm: sha256WithRSAEncryption
83:96:e4:b8:23:19:46:ad:a7:60:e2:2f:53:c4:29:c1:aa:77:
04:65:8c:94:86:4f:0c:14:0d:68:6e:49:9f:7b:a4:fa:16:00:
f3:f2:ce:86:7c:24:59:8a:8c:43:42:06:06:24:52:25:90:62:
90:a4:fa:c6:37:fb:df:e8:80:64:b4:75:b0:03:fa:35:6d:9b:
fa:73:9c:e1:38:f6:07:11:b2:1d:cd:5d:43:56:1a:17:f0:83:
47:7b:51:85:da:2d:76:64:d1:7b:5c:91:4d:d1:8c:95:d5:4d:
c7:52:c3:f6:47:03:98:cf:9b:36:01:3c:a2:b7:39:a7:4d:c8:
a5:2a:34:48:6b:57:bc:1a:69:64:d9:f6:bb:0d:7f:6d:4e:51:
3e:df:b0:83:d5:d8:95:80:b1:15:03:35:5a:38:3c:4e:62:a8:
16:a5:b4:9d:e6:66:8f:ba:0f:30:38:e9:c4:c9:b2:89:65:43:
42:78:d4:a6:39:5b:ff:b1:39:54:b5:e5:c0:33:b4:b9:d8:67:
d6:4a:86:77:a7:58:e2:f3:fd:d2:45:37:71:9b:a4:51:09:b7:
23:58:3c:ee:8f:02:06:7f:5a:6c:32:99:64:48:69:48:db:93:
3f:4d:2a:5b:5d:a8:27:4b:2b:1b:41:d0:16:c0:b0:de:8c:f8:
9e:fd:7e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:53 2024 by rpki-client on console-ams.rpki-client.org