Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/o2Q8yNTdiVfGSVpRY4s_5sLQ_I4.roa
File: o2Q8yNTdiVfGSVpRY4s_5sLQ_I4.roa (raw, json)
Hash identifier: t7sNfhS0H2RgRYiFLpiwP2+GkCO6VC5Toc2i5On3O0Y=
Subject key identifier: A3:64:3C:C8:D4:DD:89:57:C6:49:5A:51:63:8B:3F:E6:C2:D0:FC:8E
Certificate issuer: /CN=b415beef9ea1dd4772c2ee952761d655d9865026
Certificate serial: 018655FF62415717C0D69EB5875CE6228586
Authority key identifier: B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/o2Q8yNTdiVfGSVpRY4s_5sLQ_I4.roa
Signing time: Wed 15 Feb 2023 16:54:05 +0000
ROA not before: Wed 15 Feb 2023 16:54:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202546
IP address blocks: 185.127.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 26 Apr 2023 11:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:ff:62:41:57:17:c0:d6:9e:b5:87:5c:e6:22:85:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b415beef9ea1dd4772c2ee952761d655d9865026
Validity
Not Before: Feb 15 16:54:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3643cc8d4dd8957c6495a51638b3fe6c2d0fc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9e:3d:18:c5:af:2c:58:f5:de:5b:f5:3e:3e:
cd:19:83:79:d5:5b:8d:d8:13:1a:5f:fe:a0:f0:0a:
a8:36:ae:e1:d7:53:55:0d:a5:e7:17:c9:3c:9a:76:
e5:dc:50:f3:a7:47:eb:53:87:02:74:a8:a0:04:ad:
0c:4c:f9:11:d2:c9:ff:f4:09:da:48:ef:9d:7e:95:
c2:4f:59:c1:a7:51:ee:7d:1a:df:d2:a7:03:cc:0f:
e6:a9:a6:e4:57:42:d9:5e:74:89:d6:c9:38:b3:3c:
4a:9b:a2:5c:f5:8d:74:e9:46:d4:b5:c4:b4:6d:ea:
08:dd:3e:2c:4b:41:b5:fc:73:8f:07:15:90:80:cc:
db:e5:f3:7e:40:2b:9e:12:e6:35:5c:68:4d:1e:1e:
d6:0c:cf:0b:df:37:b7:14:60:8a:b3:10:e0:c8:71:
4c:87:a2:38:06:23:99:8e:7f:18:c6:68:a4:39:9e:
d3:60:93:74:c8:9c:17:fd:2a:ae:9f:0f:ae:c0:61:
a9:59:ec:c2:10:d5:7d:81:0b:d8:15:b0:87:ab:45:
86:60:d9:3b:93:33:f8:83:44:85:e2:60:d1:53:ec:
9c:57:f1:94:e4:81:63:22:2a:35:a6:47:da:19:cc:
8a:36:a7:38:42:88:0e:52:f9:a4:a1:0e:c5:7f:b0:
39:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:64:3C:C8:D4:DD:89:57:C6:49:5A:51:63:8B:3F:E6:C2:D0:FC:8E
X509v3 Authority Key Identifier:
keyid:B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/o2Q8yNTdiVfGSVpRY4s_5sLQ_I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:88:d1:7e:c0:40:a3:38:c1:37:07:0a:d6:08:ac:4c:4e:94:
d5:59:01:79:a8:68:3f:8e:9c:c7:6e:38:b5:98:fe:4d:89:7d:
2a:12:9b:0b:1d:82:05:1f:1a:ac:02:4f:73:97:f4:28:1e:26:
fe:cb:20:a9:e6:5e:f6:30:6b:70:7b:81:e7:06:65:81:3c:60:
be:06:7e:51:d0:5f:10:d4:a6:11:19:8a:22:0a:a8:93:b1:fc:
8e:a5:e9:10:2c:21:7a:82:78:4c:c1:69:f1:46:0f:5e:85:cd:
9d:1c:9d:7c:7e:d3:4a:97:49:05:cb:8c:30:a8:21:12:dd:ea:
7c:ab:78:8f:2a:0a:24:5f:4a:e6:21:2d:9d:cc:22:e2:95:28:
63:5a:77:c6:b8:f5:17:a9:79:7c:8e:1b:2f:68:cf:00:1a:96:
46:e0:21:98:46:40:54:f9:62:76:1c:e7:98:99:d3:8a:d0:29:
26:55:d2:95:27:d1:75:4e:ca:2e:2d:bb:fe:1d:bb:1f:7b:e0:
05:02:f1:23:ac:76:7c:f7:4c:ca:e8:12:c7:df:43:1f:6f:69:
3c:86:45:e4:fe:c2:21:3a:78:3f:13:80:5a:38:56:ea:01:f9:
3a:51:ac:44:78:35:a3:48:a1:a4:d7:41:fe:dd:82:c2:0c:e9:
1f:d0:d4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:44 2024 by rpki-client on console-fra.rpki-client.org