Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/u8uZkemv-HjeWz8TnBEqOTh_9ww.roa
File: u8uZkemv-HjeWz8TnBEqOTh_9ww.roa (raw, json)
Hash identifier: 8pJKVN6fdY1nVhKCKKhIqx3Dww7wo40L85QCD1itl3o=
Subject key identifier: BB:CB:99:91:E9:AF:F8:78:DE:5B:3F:13:9C:11:2A:39:38:7F:F7:0C
Certificate issuer: /CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Certificate serial: 01856CB82E48E52C81FDBAC0EA9C49E0A0E8
Authority key identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/u8uZkemv-HjeWz8TnBEqOTh_9ww.roa
Signing time: Sun 01 Jan 2023 09:44:47 +0000
ROA not before: Sun 01 Jan 2023 09:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203676
IP address blocks: 185.126.172.0/22 maxlen: 24
2a06:ca40::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:2e:48:e5:2c:81:fd:ba:c0:ea:9c:49:e0:a0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Validity
Not Before: Jan 1 09:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbcb9991e9aff878de5b3f139c112a39387ff70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:71:74:9a:bc:ad:cc:94:9a:57:81:be:70:
a0:ae:45:9b:0f:a7:5b:eb:29:5d:02:65:ce:1d:70:
2b:d4:27:c6:02:fc:e9:e6:32:20:93:f8:a6:3e:28:
3f:d7:e8:e3:ea:32:f1:c1:f2:a5:e0:8b:97:c2:c6:
59:ba:1e:94:a0:31:04:6d:a2:aa:f2:24:a6:dd:45:
3e:cb:10:0f:7a:07:ad:74:38:b1:3f:14:56:c1:73:
e4:ac:f7:e2:18:e2:32:c9:a3:2d:6f:58:80:45:ad:
f3:ac:5a:4e:30:78:d6:02:92:a0:72:53:a9:44:d1:
06:9c:0e:a1:24:fe:bd:55:24:1e:02:5a:7a:1a:ad:
8a:e5:7b:a0:1f:cb:7a:a2:cd:d7:55:25:a9:36:61:
26:c0:70:e6:ee:bc:a0:9e:78:69:6b:79:b5:02:e4:
14:d9:07:a3:1a:a1:e9:de:52:f0:fe:d2:12:ce:eb:
73:52:d5:4a:5f:50:9b:89:e8:6a:21:4b:c4:09:b2:
73:2b:c1:50:da:46:ae:17:4a:0d:5b:60:5a:29:37:
82:fe:b6:46:f6:79:3d:6f:65:05:02:48:d0:f3:fa:
37:42:9e:86:cf:b6:40:5c:5f:6a:7c:b8:4f:6e:ef:
5f:2e:92:93:78:bd:22:ae:0b:4a:1d:9c:90:ea:4b:
31:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CB:99:91:E9:AF:F8:78:DE:5B:3F:13:9C:11:2A:39:38:7F:F7:0C
X509v3 Authority Key Identifier:
keyid:07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/u8uZkemv-HjeWz8TnBEqOTh_9ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.172.0/22
IPv6:
2a06:ca40::/29
Signature Algorithm: sha256WithRSAEncryption
30:f4:84:31:9b:b4:ba:df:b9:69:d8:e0:e1:bc:34:06:76:c6:
d5:d4:ec:7e:6e:83:cf:dd:46:dc:b5:96:36:39:ab:99:8d:e1:
8d:e5:2d:d7:0d:c8:d6:01:0a:5e:53:b6:e9:39:b5:67:2e:9a:
3f:49:77:2d:86:fa:08:05:4d:44:fe:77:39:31:08:55:d4:2f:
9d:46:76:48:93:73:13:de:05:5b:89:60:d7:14:08:7b:8e:ef:
62:1d:08:71:d0:67:fe:ce:d7:cf:91:cc:af:fb:31:a0:03:f5:
96:de:03:65:47:e8:ad:88:69:b5:9c:69:2b:46:1a:6d:44:e3:
51:5e:35:7f:3e:1e:a9:21:d2:33:ea:31:19:6f:e7:52:98:68:
1d:2a:3e:dc:00:87:82:91:c0:aa:62:5b:11:2d:96:99:38:19:
ce:6a:b3:ff:3f:b0:e5:a3:5f:d0:68:64:6e:11:5d:be:4e:89:
7a:69:11:d3:e1:47:47:16:a7:9a:c0:f5:6b:eb:a8:39:e6:fb:
32:43:be:43:86:0f:91:3e:aa:ea:2d:1b:75:37:d2:f3:cf:5b:
8e:d5:35:b3:9e:ba:9a:df:cc:a1:e1:89:26:b2:fe:9c:4f:40:
c7:c5:40:14:d5:02:4f:ed:1e:b7:72:8b:d4:4d:48:6a:3f:6c:
fc:74:bc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:49 2024 by rpki-client on console-ams.rpki-client.org