Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/8i59b94RRmKVBvyp6OTrMQ79pJs.roa
File: 8i59b94RRmKVBvyp6OTrMQ79pJs.roa (raw, json)
Hash identifier: wPcL8AUcr0pwrj/Ga/q+5rr8QL9fthRc3i7LpQGAUto=
Subject key identifier: F2:2E:7D:6F:DE:11:46:62:95:06:FC:A9:E8:E4:EB:31:0E:FD:A4:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 0186F3D76D023CB819D81F4002F6209EFB63
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/8i59b94RRmKVBvyp6OTrMQ79pJs.roa
Signing time: Sat 18 Mar 2023 08:30:27 +0000
ROA not before: Sat 18 Mar 2023 08:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58075
IP address blocks: 185.187.100.0/22 maxlen: 24
2a0a:47c0::/48 maxlen: 48
2a0a:47c0:20::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 18 Mar 2023 08:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f3:d7:6d:02:3c:b8:19:d8:1f:40:02:f6:20:9e:fb:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Mar 18 08:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f22e7d6fde1146629506fca9e8e4eb310efda49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:d0:78:cd:57:b2:56:c4:06:db:e1:eb:0e:
6c:41:a7:38:f9:7f:84:00:e8:52:fe:d1:79:d3:05:
08:6e:af:37:c7:a4:f6:c0:14:ea:0d:a9:b6:02:21:
2a:bc:9b:2b:3a:3c:3c:f5:cf:5f:47:e7:b8:d3:ea:
f5:18:c1:73:01:6d:be:0e:5a:af:f8:c2:b3:7f:a8:
5a:57:6d:6e:81:ce:8c:95:eb:0e:e0:7c:10:28:c9:
b7:cb:2e:cc:d5:d0:11:73:9e:02:b8:2e:a5:89:42:
cb:be:0f:09:9e:c9:cf:de:00:ff:e5:4a:a9:2f:24:
f8:5e:02:47:26:fc:18:77:47:7a:01:b2:10:5a:7c:
15:fe:04:28:7c:0a:ed:c1:c0:47:1c:5d:a1:df:ca:
30:13:ca:3d:73:83:45:ae:15:59:fe:ce:57:52:fd:
7e:9a:9c:e9:5c:03:1d:7b:6b:ff:17:2c:da:e8:9b:
6b:e7:be:24:09:30:68:96:1a:33:0f:c2:05:4c:04:
c0:db:67:68:f2:5f:5d:86:f4:a2:39:9e:ff:3a:1a:
70:53:0c:6e:c7:df:7e:f1:d2:a3:b0:6b:35:d0:c9:
d4:14:39:db:55:ee:2c:e9:59:3d:61:36:aa:8c:4a:
20:88:d4:7c:de:db:53:30:e8:85:71:69:88:a1:41:
fd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2E:7D:6F:DE:11:46:62:95:06:FC:A9:E8:E4:EB:31:0E:FD:A4:9B
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/8i59b94RRmKVBvyp6OTrMQ79pJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.100.0/22
IPv6:
2a0a:47c0::/48
2a0a:47c0:20::/48
Signature Algorithm: sha256WithRSAEncryption
0a:d1:ca:36:b5:89:e6:09:3e:1d:2e:9f:01:98:d2:22:4c:80:
86:8d:2f:89:9a:ab:bd:c8:04:14:79:47:a9:e2:00:5d:a4:ee:
61:9d:01:ac:cc:da:94:e4:82:c3:15:b0:e7:35:af:f0:f1:02:
09:3c:81:41:19:1b:3d:f1:8a:4e:62:19:e3:39:0e:35:b2:eb:
b1:33:6c:0b:1e:2e:c5:7d:2c:c2:40:ed:b1:0d:9e:8d:eb:64:
69:10:6f:e7:9c:1f:b1:ab:f7:2a:42:c8:bf:29:13:c2:e3:b4:
36:e7:63:09:1c:d4:81:6b:50:1a:fc:05:88:95:cc:9f:55:68:
bc:06:67:44:8f:1c:b9:8b:cb:3e:29:be:52:42:56:6f:33:0a:
a0:9e:09:e8:a2:67:67:9f:de:08:2c:b6:56:da:7b:49:95:1c:
3d:f8:32:83:93:b6:01:b5:88:43:5a:dd:56:47:d7:ff:2c:f1:
83:a9:64:7a:2e:34:2f:0e:d1:e1:a1:25:10:b9:b2:ff:3f:57:
0b:9d:8d:27:52:92:3f:57:51:85:39:a9:4a:6b:e8:4e:1f:cc:
e5:23:a7:f0:b9:fc:0f:d6:77:2f:06:f7:fa:44:78:54:b3:f0:
17:53:c1:06:e2:c3:f9:e7:ae:be:fe:b1:68:fb:68:d4:9c:e1:
66:2e:26:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:00 2024 by rpki-client on console-ams.rpki-client.org