Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/cpL3sVaYiitQtEy8VFN9kY2C0ag.roa
File: cpL3sVaYiitQtEy8VFN9kY2C0ag.roa (raw, json)
Hash identifier: zf6chBzBGGYZ7g4LZqGKWweGWLA/0MXinxfrwjllRVE=
Subject key identifier: 72:92:F7:B1:56:98:8A:2B:50:B4:4C:BC:54:53:7D:91:8D:82:D1:A8
Certificate issuer: /CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Certificate serial: 018A4767E00081BE5689AA73B0D0B742ADD2
Authority key identifier: ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/cpL3sVaYiitQtEy8VFN9kY2C0ag.roa
Signing time: Wed 30 Aug 2023 17:05:04 +0000
ROA not before: Wed 30 Aug 2023 17:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15663
IP address blocks: 185.203.76.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 30 Aug 2023 17:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:47:67:e0:00:81:be:56:89:aa:73:b0:d0:b7:42:ad:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Validity
Not Before: Aug 30 17:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7292f7b156988a2b50b44cbc54537d918d82d1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cc:84:04:2a:6d:ca:ac:43:5a:58:45:c2:5c:
8c:38:da:40:d4:77:3e:d3:e1:da:4a:62:be:98:e7:
26:a1:15:24:5e:c9:c7:4b:d1:34:d4:d7:06:61:6a:
4a:56:d7:6f:0b:12:ea:53:3e:fc:58:48:4f:a5:ff:
d0:5e:ed:39:c3:fa:1f:7b:76:b9:96:ca:28:f2:c5:
cd:88:5d:55:d3:5c:ab:44:7c:bc:53:86:38:c4:ad:
06:18:e6:86:b2:bc:bc:f1:c5:38:98:0d:79:f1:90:
06:39:17:cf:69:87:3f:fa:13:48:45:07:5a:0d:0f:
c2:83:93:2e:ad:f3:8b:cd:6c:32:86:6c:11:32:91:
ca:dc:26:9c:bf:4b:5b:77:e4:d5:bd:42:ee:58:ec:
e9:63:0a:53:d9:f6:96:c8:98:68:1f:1f:04:be:be:
f8:c7:37:ed:07:40:7e:57:a2:45:8a:58:1f:8f:e7:
a0:08:68:b0:c7:95:13:d4:25:69:5e:3b:97:23:5e:
08:6f:fb:b3:33:fe:b3:48:9a:f2:52:c2:03:49:96:
36:1f:9d:0d:13:f9:10:50:e3:1f:1e:ba:aa:0b:37:
1e:25:0b:46:27:ba:cc:56:45:31:17:18:55:11:a6:
90:6a:d4:52:a1:8b:9d:3a:57:15:17:28:87:95:ee:
3d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:92:F7:B1:56:98:8A:2B:50:B4:4C:BC:54:53:7D:91:8D:82:D1:A8
X509v3 Authority Key Identifier:
keyid:ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/cpL3sVaYiitQtEy8VFN9kY2C0ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.76.0/22
Signature Algorithm: sha256WithRSAEncryption
03:be:3b:6d:e9:64:b6:b4:73:9c:27:a9:8e:51:44:d2:54:0c:
44:88:f9:2e:23:3c:2f:3d:f3:c4:56:d4:aa:cb:ee:fd:98:87:
30:47:3a:11:81:4c:c8:10:c7:ba:d7:76:66:89:f2:cd:fb:c8:
8e:70:0a:45:c5:c9:34:38:f7:26:93:19:b4:9c:73:20:b7:82:
e5:78:68:0a:12:6c:f0:a3:84:86:1e:23:2f:c2:84:25:6c:86:
92:0f:7d:6e:87:3d:fd:ae:64:b6:8d:6b:cd:33:94:5f:e5:e5:
46:a3:04:12:8c:c6:16:a1:0a:ca:76:4a:37:3d:2e:ea:6f:c8:
7e:c5:dd:46:85:2f:9c:20:8d:13:db:3d:57:7a:69:b9:38:a0:
47:5a:8c:9c:5e:60:f6:1f:9c:80:ae:0e:98:95:7a:bd:23:9e:
58:60:17:86:e5:86:06:e8:40:35:6e:8e:03:6b:2c:86:af:5f:
09:ad:64:02:cb:7d:1b:ea:c5:98:ad:b7:c5:4c:b4:bc:1b:66:
fa:91:bb:c8:b0:2a:49:b8:4a:28:93:9e:fe:33:85:f1:6c:46:
b0:52:04:29:66:a5:0a:7e:e8:66:77:e8:c8:de:31:82:79:f6:
6f:8b:6e:63:5e:a4:fa:0c:7c:b3:ea:f1:a9:66:cf:2e:58:dd:
54:07:54:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:47 2024 by rpki-client on console-ams.rpki-client.org