Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/G2AuWrCib0mMLG0igt10B95r-as.roa
File: G2AuWrCib0mMLG0igt10B95r-as.roa (raw, json)
Hash identifier: fgIvxsUOUeJouV5NH7FYP5WpY9ZuZGeijnjCHUX76wc=
Subject key identifier: 1B:60:2E:5A:B0:A2:6F:49:8C:2C:6D:22:82:DD:74:07:DE:6B:F9:AB
Certificate issuer: /CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Certificate serial: 018C68CE6656F81E43A5F4E971324D55D574
Authority key identifier: 3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/G2AuWrCib0mMLG0igt10B95r-as.roa
Signing time: Thu 14 Dec 2023 14:50:06 +0000
ROA not before: Thu 14 Dec 2023 14:50:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208263
IP address blocks: 185.146.100.0/22 maxlen: 22
2a03:ab60::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:ce:66:56:f8:1e:43:a5:f4:e9:71:32:4d:55:d5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Validity
Not Before: Dec 14 14:50:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b602e5ab0a26f498c2c6d2282dd7407de6bf9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:eb:4d:ed:0d:f3:f8:62:57:e8:65:08:fb:4a:
bc:83:cc:28:98:6c:94:eb:2d:31:a7:c0:dc:47:a7:
f5:84:e4:01:e0:7f:22:32:cf:90:77:b7:a6:30:99:
44:c6:2c:32:37:3a:de:30:df:4e:e1:9a:ac:bc:7b:
1f:f1:92:5f:37:f9:09:e5:30:cf:1b:68:64:db:5b:
26:19:ca:a4:62:6c:29:32:0a:f2:f2:68:ee:56:8d:
57:7e:96:ba:40:5e:27:31:dc:18:9c:b8:75:6e:d9:
57:89:be:df:7c:08:70:62:5a:0f:e8:43:56:c2:c8:
84:09:39:8f:a8:69:c9:2c:ea:7e:e8:ae:64:c9:be:
a9:d6:2e:55:ab:59:20:52:7f:42:1d:03:af:0c:a2:
b9:90:cb:9b:a8:09:4b:7d:83:f0:46:d3:ec:66:4d:
2b:8c:bd:aa:cf:d8:88:a7:82:de:f3:93:d9:cf:9b:
1f:66:ff:d7:c0:9f:b1:42:1c:98:ab:c0:8d:21:d5:
4f:51:e8:b5:31:fd:e7:9f:e0:f5:7e:f3:96:75:b9:
a9:dc:b1:42:43:86:1a:80:56:df:41:ec:ef:66:d6:
64:75:9a:0f:2d:af:95:db:1b:42:82:00:68:31:be:
ec:12:3a:13:04:ca:63:cb:a2:3c:a3:3a:24:1c:fe:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:60:2E:5A:B0:A2:6F:49:8C:2C:6D:22:82:DD:74:07:DE:6B:F9:AB
X509v3 Authority Key Identifier:
keyid:3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/G2AuWrCib0mMLG0igt10B95r-as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.100.0/22
IPv6:
2a03:ab60::/32
Signature Algorithm: sha256WithRSAEncryption
13:7f:73:5f:8e:f2:5e:b9:52:4d:1a:a9:00:c2:85:58:58:b2:
33:a0:9e:76:40:ed:b2:18:44:22:ad:7c:91:da:1b:3b:e1:7f:
ef:7c:57:95:98:70:f7:0a:32:e2:e1:c8:8a:28:34:a7:17:65:
13:65:20:d6:8a:61:49:7b:78:6f:ec:30:64:a7:07:ab:85:5e:
bb:2b:d3:a7:10:06:a8:b1:a0:10:e0:d2:00:5d:e8:de:f5:bc:
26:c3:c5:d3:a5:75:f0:89:8d:49:13:a6:59:93:d8:5b:3b:54:
68:1a:42:4e:a6:ae:50:db:d2:ee:f0:4d:1d:f9:77:ec:02:b7:
58:1e:2d:80:22:f9:79:eb:c1:47:6e:e5:b6:14:7f:b6:53:47:
42:1d:d5:0a:c1:38:ef:3b:06:15:d0:1a:da:9e:da:49:e8:b5:
29:07:36:2b:50:ef:60:b8:84:a9:4a:61:74:73:d3:7c:c3:60:
b4:1a:5e:7d:6e:20:7a:55:5f:52:67:06:89:01:ac:94:be:41:
cb:cd:c5:b8:32:59:70:1a:d4:eb:e0:58:6a:a5:9d:73:a8:28:
4f:bf:67:9c:a2:4a:cf:47:e6:e9:32:ed:97:82:3e:6f:45:eb:
33:f2:32:22:fe:f9:ab:e1:c7:e8:49:a9:a6:c5:0d:d9:9e:59:
03:55:90:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:16 2024 by rpki-client on console-ams.rpki-client.org