Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/J3ZgItmzlMZA-6qiG68AVCvutn0.roa
File: J3ZgItmzlMZA-6qiG68AVCvutn0.roa (raw, json)
Hash identifier: kDIhf20/fzCPk80oRJfaXq3Rl1MHjAiZokEj4JlbOKs=
Subject key identifier: 27:76:60:22:D9:B3:94:C6:40:FB:AA:A2:1B:AF:00:54:2B:EE:B6:7D
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0185EC67F21C6671197FBC8A58E65BDEAB79
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/J3ZgItmzlMZA-6qiG68AVCvutn0.roa
Signing time: Thu 26 Jan 2023 04:48:33 +0000
ROA not before: Thu 26 Jan 2023 04:48:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26548
IP address blocks: 146.185.206.0/24 maxlen: 24
146.185.200.0/22 maxlen: 24
146.185.204.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jan 2023 18:19:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ec:67:f2:1c:66:71:19:7f:bc:8a:58:e6:5b:de:ab:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 26 04:48:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27766022d9b394c640fbaaa21baf00542beeb67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d0:66:db:51:52:2b:db:48:aa:ad:7b:26:02:
8d:64:37:6c:94:7d:89:0c:cf:79:94:f5:54:95:98:
f6:46:37:fb:47:27:fa:1a:61:db:c9:8e:24:3a:4d:
cd:4b:72:7a:d2:83:b2:b9:99:61:44:a2:bc:2a:cc:
83:b7:ab:73:81:7d:b1:fe:e0:20:8e:ff:cb:d9:4c:
a2:76:cd:38:ae:e2:de:19:a6:27:d6:b4:30:67:71:
c5:15:f0:84:0c:13:78:03:70:6c:c4:23:24:2d:c9:
84:45:a1:eb:d3:c7:23:f7:c2:be:d4:05:eb:49:96:
96:67:b7:05:c3:e5:a0:b7:91:be:97:9e:0b:23:56:
74:ce:9a:b8:9d:93:3a:79:8d:a1:ed:c0:75:61:d0:
15:af:74:a9:96:01:05:e3:5f:5a:7c:f5:17:7b:d7:
39:2d:11:c1:7f:d0:ce:56:0f:7d:4a:e8:af:c1:70:
ec:ad:1f:d9:d4:54:61:fa:6f:fd:78:c7:8f:19:15:
59:d2:50:d3:cf:c6:0b:90:7a:e3:e9:40:db:d6:86:
03:03:a4:16:f7:45:2f:d6:d8:29:e2:1b:03:54:d6:
41:69:98:98:75:69:bb:f4:07:a6:c2:69:7e:55:88:
62:0f:6b:08:0b:cb:86:be:c9:71:a8:5d:39:59:a7:
cc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:76:60:22:D9:B3:94:C6:40:FB:AA:A2:1B:AF:00:54:2B:EE:B6:7D
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/J3ZgItmzlMZA-6qiG68AVCvutn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.185.200.0-146.185.206.255
Signature Algorithm: sha256WithRSAEncryption
05:80:d6:ab:28:7b:ac:c2:f4:0f:8a:8a:d9:9b:3c:ac:a4:41:
1d:48:72:8f:77:dc:80:c1:89:01:20:8b:57:f6:f4:ab:ab:db:
f0:c5:b3:21:50:83:01:22:6d:ba:90:ea:c1:34:ba:23:ef:c1:
98:26:93:f6:7c:77:d1:fb:2c:51:e1:99:b0:14:48:07:56:dc:
b0:5e:53:64:06:9e:76:39:59:84:4f:7f:aa:e4:7d:9a:6b:0d:
63:5b:12:b8:ef:61:f5:73:95:7c:6e:c2:63:7b:fb:5f:84:dd:
10:98:ca:6e:c5:8e:8b:b5:f3:79:06:86:e2:40:d2:df:99:b8:
c7:7b:f2:97:59:52:d5:f2:39:02:cf:d2:12:ee:19:f7:70:74:
f9:7f:5d:23:8f:2d:57:c9:69:26:a1:69:db:f8:e9:20:00:37:
48:f0:fd:2b:d3:9e:b7:7b:0f:d8:6e:4d:ec:d1:fa:77:85:c8:
5d:19:1b:c1:42:a0:22:1c:69:92:16:c7:0b:07:e6:70:d7:fb:
51:19:b8:e3:84:4f:e4:c9:60:7d:8d:8d:ec:33:a8:c7:90:58:
5e:2c:d1:9f:e0:4a:be:59:08:bb:1f:58:cc:e8:08:e3:d0:38:
03:03:5f:81:71:3c:a0:19:ab:6d:14:0c:97:13:2c:45:ec:24:
88:ff:93:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:29 2024 by rpki-client on console-fra.rpki-client.org