Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/_9Uprtzxa5vidKoSp6gOUKzIxns.roa
File: _9Uprtzxa5vidKoSp6gOUKzIxns.roa (raw, json)
Hash identifier: PPtc3EtTYRzgTjZDvsuRPSquPOrLRifGvCE6wFQfgfA=
Subject key identifier: FF:D5:29:AE:DC:F1:6B:9B:E2:74:AA:12:A7:A8:0E:50:AC:C8:C6:7B
Certificate issuer: /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Certificate serial: 01856CE60C301593C7F52E75B762F89F62C7
Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/_9Uprtzxa5vidKoSp6gOUKzIxns.roa
Signing time: Sun 01 Jan 2023 10:34:53 +0000
ROA not before: Sun 01 Jan 2023 10:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202629
IP address blocks: 185.138.180.0/22 maxlen: 22
2a07:b40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 08 Jun 2023 11:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:0c:30:15:93:c7:f5:2e:75:b7:62:f8:9f:62:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Validity
Not Before: Jan 1 10:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffd529aedcf16b9be274aa12a7a80e50acc8c67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:67:73:d1:bb:9b:95:17:e2:aa:0d:d5:5c:
4e:17:10:99:3c:32:88:98:33:52:30:ba:c9:45:75:
4b:f6:5d:d7:84:01:05:e7:cc:f6:11:da:24:53:df:
3b:2a:a5:5a:45:9a:77:7c:15:f4:59:f9:0e:49:d3:
ba:25:4b:5b:da:17:f9:2c:ef:e9:e4:20:72:a3:81:
e2:85:96:39:30:46:0c:34:8a:19:b0:7e:78:d3:60:
63:11:4b:72:b1:a3:22:26:52:e3:33:8e:a6:3a:89:
a6:35:bf:24:b0:b3:89:5f:92:76:bc:e0:4e:0d:19:
95:a1:79:a5:c0:6e:84:9f:30:22:8f:58:69:48:08:
45:9d:82:8a:79:93:99:14:4c:11:fe:56:48:7a:16:
55:62:04:57:0a:71:2c:59:7b:e5:23:42:fe:b8:be:
53:b4:e3:ba:fb:db:55:17:9b:a2:a4:39:cf:fe:d1:
a6:1d:8c:67:a9:28:4a:29:f0:9d:a4:86:30:96:3e:
90:fa:c0:9f:0d:9e:d2:9b:86:c5:1d:76:1c:5a:bc:
cb:11:b1:ac:1c:c7:60:41:16:b9:f7:07:e5:c3:b7:
a8:72:cb:25:df:a1:85:ab:7a:d5:ac:bb:c6:e0:e1:
30:89:1a:b2:18:b6:f4:da:4f:f0:cc:0a:88:f1:e1:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D5:29:AE:DC:F1:6B:9B:E2:74:AA:12:A7:A8:0E:50:AC:C8:C6:7B
X509v3 Authority Key Identifier:
keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/_9Uprtzxa5vidKoSp6gOUKzIxns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.180.0/22
IPv6:
2a07:b40::/29
Signature Algorithm: sha256WithRSAEncryption
6a:15:7b:87:df:85:ab:87:f9:86:fc:23:83:a8:cf:6e:e4:99:
10:2f:08:18:76:ee:07:45:71:0d:01:43:af:77:7e:3a:98:e3:
2a:11:ab:4d:a3:92:25:5f:cb:4c:e9:35:92:75:fd:5d:96:f4:
bd:a5:3a:60:8c:0e:5f:45:f5:c3:5d:b1:a4:b8:f3:37:19:da:
0a:1b:0d:35:fe:c0:d6:bd:04:89:3f:69:01:67:d1:fd:dd:79:
39:55:e7:64:dd:72:6b:6a:03:81:ee:70:55:ed:53:f6:0c:d3:
45:73:46:63:4d:33:6b:e3:a4:f0:f1:ab:ae:c8:d0:23:00:93:
bd:27:e6:52:14:53:06:f6:e1:09:69:78:b6:9f:da:3c:d8:e8:
65:81:ac:3b:10:07:8d:29:11:1e:b6:f6:06:a6:bb:6c:39:b1:
50:4c:ed:dc:5c:54:6e:be:d9:eb:64:83:d1:d1:22:a5:b5:6a:
c8:4e:9c:c3:1c:26:c3:9a:0b:69:b9:2a:0c:61:b7:76:d5:fe:
7e:b6:b9:c6:fc:52:29:66:38:2a:01:f5:03:e7:53:0c:ec:f2:
dc:c8:36:d1:63:35:06:d6:58:30:6b:a8:81:64:9d:24:73:e6:
0a:d2:51:e4:f2:a5:44:5c:ad:9e:0b:68:2a:cf:a1:1a:de:04:
5f:58:5a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:06 2024 by rpki-client on console-fra.rpki-client.org