Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/tH0iUywt5d_a2zbvGBZ-NrUWaJc.roa
File: tH0iUywt5d_a2zbvGBZ-NrUWaJc.roa (raw, json)
Hash identifier: s3oCrVCAa9GEGKgpgYqv3JL5vx2lGcrrJWML9ZJV7vM=
Subject key identifier: B4:7D:22:53:2C:2D:E5:DF:DA:DB:36:EF:18:16:7E:36:B5:16:68:97
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 0186C0AB3C7FCE34AA72A91CC569D461F704
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/tH0iUywt5d_a2zbvGBZ-NrUWaJc.roa
Signing time: Wed 08 Mar 2023 10:01:32 +0000
ROA not before: Wed 08 Mar 2023 10:01:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 185.33.94.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Jun 2023 03:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:ab:3c:7f:ce:34:aa:72:a9:1c:c5:69:d4:61:f7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Mar 8 10:01:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b47d22532c2de5dfdadb36ef18167e36b5166897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:21:2a:a3:d0:68:e7:7a:97:7a:ca:be:17:51:
d6:2b:be:e3:ca:a9:cb:11:c9:a5:31:d6:88:ec:f3:
fd:a7:5b:0c:db:ef:f4:a7:b3:0c:a8:f6:7c:f2:0b:
ad:fd:ce:6e:99:c4:81:a9:bb:5b:fd:a0:16:6f:93:
a1:e8:19:69:1a:5e:50:fb:98:d3:fe:31:ef:30:e1:
5c:6d:ae:83:bc:8f:07:ac:b6:95:8d:20:e2:bb:cc:
5e:19:d0:ac:0d:8a:2b:4c:72:4e:bb:14:29:06:c0:
3e:fa:c0:82:23:8c:9f:06:f0:2c:fb:e8:c5:a7:45:
1f:95:7f:0f:07:6c:6e:7d:76:4d:81:97:f8:f0:70:
6d:be:63:c9:4a:48:42:30:c1:ec:fb:42:ba:c1:88:
25:1a:43:e5:aa:c8:1a:e2:8c:9f:75:b7:98:86:31:
1f:b2:30:53:71:8e:b6:01:4f:59:de:2a:bb:85:6d:
47:f2:38:1f:7b:44:07:62:7d:a6:f3:12:84:36:f7:
bf:73:2b:4a:d3:28:d2:ba:56:59:ad:f1:48:87:4a:
e4:76:a0:81:46:ff:91:28:42:77:f4:e5:ef:6e:9b:
15:81:b6:f6:cc:dd:6d:f4:03:6a:ea:83:50:62:b0:
77:d7:ce:6a:b6:e8:79:ff:05:4e:a0:4d:5a:5b:09:
27:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7D:22:53:2C:2D:E5:DF:DA:DB:36:EF:18:16:7E:36:B5:16:68:97
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/tH0iUywt5d_a2zbvGBZ-NrUWaJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.94.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:86:5b:86:eb:19:1a:b6:49:77:55:e6:c0:73:97:56:58:9c:
62:01:4f:25:b6:e3:b1:96:d4:a0:68:1a:4d:c6:f0:17:8c:8d:
26:67:a8:30:ba:dd:23:73:2a:c3:ba:13:5a:61:6e:84:f1:fc:
28:59:ad:71:7f:12:f9:97:ec:66:58:a5:e0:a1:e6:f5:4c:b0:
73:94:82:3b:49:61:ba:57:52:58:c0:b5:ba:b5:a2:f4:fc:c7:
39:5c:39:c1:ca:3f:c9:d0:86:af:87:06:90:ed:01:39:b3:b1:
df:ff:7e:b1:ac:93:a9:66:f5:8a:59:7f:62:33:5e:28:02:ad:
36:cd:98:b4:3f:db:9d:2a:98:41:82:4c:13:b3:48:24:c2:51:
cb:fe:23:c2:0a:ed:f3:a3:62:56:9b:37:03:62:16:6d:79:fe:
c5:04:e8:e0:03:bf:a0:54:e1:51:59:20:bb:7a:8c:df:a9:92:
97:34:67:4e:bb:98:38:a0:16:2b:16:e3:35:73:ee:03:3e:44:
1d:73:39:07:b1:a3:51:1d:dd:71:28:6a:bc:e6:89:57:2c:11:
b0:f4:c7:27:51:6a:c1:96:27:c9:92:76:53:b1:6c:f4:82:3b:
e3:6e:4c:da:d7:41:c6:43:c7:ef:db:b8:e0:b7:82:a8:75:93:
68:2b:a6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:50 2024 by rpki-client on console-fra.rpki-client.org