Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/C4Zq8g_9dyp1D0NGMivzzx3A4tY.roa
File: C4Zq8g_9dyp1D0NGMivzzx3A4tY.roa (raw, json)
Hash identifier: YIDeGiglZryzlkPuqs30QiIaQvipj2SlTQbOXtr3VlE=
Subject key identifier: 0B:86:6A:F2:0F:FD:77:2A:75:0F:43:46:32:2B:F3:CF:1D:C0:E2:D6
Certificate issuer: /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial: 018572C38169F939E556980F51C0AB916C16
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/C4Zq8g_9dyp1D0NGMivzzx3A4tY.roa
Signing time: Mon 02 Jan 2023 13:54:53 +0000
ROA not before: Mon 02 Jan 2023 13:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12935
IP address blocks: 185.173.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:81:69:f9:39:e5:56:98:0f:51:c0:ab:91:6c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Validity
Not Before: Jan 2 13:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b866af20ffd772a750f4346322bf3cf1dc0e2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:38:fd:96:c5:06:fa:6c:b2:e7:e7:4c:e9:
17:7d:09:96:c8:60:33:b9:24:46:ac:75:e7:85:c6:
29:a0:38:08:d7:7c:17:84:54:5d:7f:42:eb:9d:64:
cf:1f:30:48:d0:c3:e0:f3:fb:88:09:11:2b:cc:34:
9a:07:94:40:bf:f1:16:f9:47:f7:59:be:8d:16:6e:
10:f0:7b:91:58:70:d4:4e:03:99:74:0d:59:c4:84:
3b:26:95:53:f0:12:c0:53:54:8e:81:4e:fc:1e:24:
e2:f1:02:d4:7a:a2:34:2d:d9:fe:fc:51:02:ed:6e:
d5:1c:6b:1e:a9:07:59:c6:19:8f:c7:35:05:89:58:
6b:f6:59:72:c1:fe:aa:af:66:02:9d:47:e3:da:5c:
ff:6c:b5:40:af:ca:8f:a6:e2:46:3f:90:22:ac:e6:
08:56:91:1e:97:00:2a:9f:c1:98:f2:a4:49:9e:a1:
05:ac:ae:be:84:a6:9a:cb:af:06:5f:1a:7a:8c:d9:
b8:e7:6a:8d:a5:04:71:c1:8f:00:db:51:bf:15:22:
0c:d1:3e:79:81:ce:86:a2:d5:7a:ea:66:50:e9:c3:
f4:f1:f7:9a:89:64:88:75:44:d1:df:fc:c2:fe:15:
0b:df:35:86:d0:8f:90:07:8e:4e:18:7a:18:7a:a0:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:86:6A:F2:0F:FD:77:2A:75:0F:43:46:32:2B:F3:CF:1D:C0:E2:D6
X509v3 Authority Key Identifier:
keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/C4Zq8g_9dyp1D0NGMivzzx3A4tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.4.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:ad:aa:5d:7a:41:17:df:23:c1:fe:97:85:9b:76:8d:b2:40:
46:51:f9:3e:fb:ac:17:89:82:17:9e:c0:df:a6:c2:cb:50:1c:
e9:d2:b0:9c:f1:38:45:16:bb:52:92:4c:7f:fc:39:8c:58:14:
b3:ec:90:63:23:bc:41:78:ba:2a:32:04:99:39:ff:b4:9e:36:
28:bb:59:7e:20:d4:69:44:09:b8:9c:26:0b:7d:fd:71:bd:32:
dc:70:ab:d2:f8:00:21:92:25:4b:22:14:84:97:79:e4:82:f7:
c2:73:7f:0d:73:5e:60:bd:d5:91:3b:3b:7f:5d:1c:07:38:7d:
65:4a:23:b7:07:7f:a8:20:68:d7:d4:ba:ee:d4:00:b0:25:2f:
b5:b9:4e:44:b1:ea:0e:4c:1d:dc:4b:e7:35:f6:01:92:5f:18:
f8:b5:bb:67:ef:e3:7f:e3:d7:c4:10:4a:7b:ae:fa:04:d9:87:
72:e7:0c:c1:be:52:1f:c6:32:11:2b:d9:dd:05:4a:84:6a:69:
54:46:79:c5:af:fc:9c:69:ae:f3:fe:83:b0:30:cb:27:75:18:
01:a9:d7:f3:92:8f:b3:bd:1f:36:e0:fe:9a:ff:eb:85:58:2a:
8e:85:a0:ff:a0:22:06:22:8c:ae:8e:1c:39:5a:88:ea:f2:bd:
5d:b9:18:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:36 2024 by rpki-client on console-ams.rpki-client.org