Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/F20ky0Yk052W-0qmtLszK9fEnos.roa
File: F20ky0Yk052W-0qmtLszK9fEnos.roa (raw, json)
Hash identifier: gsxhZmakQlqzW8SzCJKJgTTchAJ6gWNiTvfvHou7jRA=
Subject key identifier: 17:6D:24:CB:46:24:D3:9D:96:FB:4A:A6:B4:BB:33:2B:D7:C4:9E:8B
Certificate issuer: /CN=5e803b66b306008fb172c2dfd522b5655057360d
Certificate serial: 0185718C140FAE54FFD152FA5E599F8DAB16
Authority key identifier: 5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/F20ky0Yk052W-0qmtLszK9fEnos.roa
Signing time: Mon 02 Jan 2023 08:14:43 +0000
ROA not before: Mon 02 Jan 2023 08:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200851
IP address blocks: 185.243.76.0/22 maxlen: 24
2a0d:a80::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:14:0f:ae:54:ff:d1:52:fa:5e:59:9f:8d:ab:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e803b66b306008fb172c2dfd522b5655057360d
Validity
Not Before: Jan 2 08:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=176d24cb4624d39d96fb4aa6b4bb332bd7c49e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:88:88:f7:52:f3:bc:98:2b:82:c4:0e:9f:
22:a4:b5:7a:41:0d:da:d1:66:58:ab:de:ba:a1:91:
eb:de:a2:0f:9d:f0:12:99:4d:f5:66:03:5c:20:2a:
2a:2e:6f:50:40:83:95:8d:95:e0:f9:f7:46:3a:ce:
36:42:c1:29:ab:98:60:27:5f:43:5b:48:60:c5:3c:
75:7d:ba:4c:17:c3:49:e6:79:99:80:9e:5e:1e:62:
07:70:e7:08:61:5f:2a:98:51:d5:1a:c2:97:eb:7a:
c6:a7:7a:e9:c7:fd:dd:56:97:f4:fc:98:87:83:47:
5f:e9:66:90:42:85:03:99:54:81:50:7b:72:59:e1:
ef:75:57:e4:7f:3b:0d:29:a5:f5:c2:6f:d8:57:6f:
46:df:fc:3f:29:22:d6:aa:29:0d:c0:fd:26:33:e7:
6b:e4:b2:30:e6:93:aa:23:db:55:a3:34:92:14:58:
5b:07:82:48:8b:42:7c:5a:2b:5f:cf:d0:66:3b:d0:
c9:5f:ff:14:3c:8e:ea:eb:a7:bf:5b:6b:3e:68:16:
46:ff:9b:b9:6e:ee:f4:d3:ee:59:97:da:b1:e9:57:
1b:e4:90:a7:92:65:a4:a1:82:cc:fa:90:e2:b1:40:
51:83:07:ed:89:d7:45:3e:83:4b:f3:28:6e:16:62:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6D:24:CB:46:24:D3:9D:96:FB:4A:A6:B4:BB:33:2B:D7:C4:9E:8B
X509v3 Authority Key Identifier:
keyid:5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/F20ky0Yk052W-0qmtLszK9fEnos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.76.0/22
IPv6:
2a0d:a80::/29
Signature Algorithm: sha256WithRSAEncryption
10:5d:39:92:27:59:f9:3c:19:4d:45:f5:85:67:69:70:d0:b1:
b9:49:bc:93:30:b8:78:6d:18:5a:b6:5b:ac:56:55:f7:57:61:
22:04:b9:5b:db:e2:af:6d:54:a7:d0:f9:00:d2:b6:88:48:84:
62:c0:65:b6:81:26:71:45:4c:8c:14:15:c6:aa:1d:dc:0d:fb:
bb:23:b6:bb:9e:e5:6d:44:7a:6b:5a:4b:52:1b:c2:c4:6e:5e:
9e:ea:1c:2e:15:d8:fa:cb:d2:f0:7c:29:86:03:93:72:8e:6a:
49:6f:ce:94:56:64:97:8f:a3:4c:b4:e3:97:48:2b:5c:da:d5:
4e:3a:4c:0b:13:63:11:aa:9b:0e:95:5c:91:1c:b1:3b:65:b8:
06:16:cf:54:e6:ff:86:f1:a1:69:22:f0:1a:9a:17:07:f6:d1:
22:0c:cd:4c:f4:3b:6c:75:95:65:7e:b7:7c:0f:cf:87:55:26:
30:a4:c6:87:f1:5e:6a:40:bf:f7:e9:da:ee:d2:21:aa:71:e2:
bf:9e:ed:4d:69:c6:e3:2e:77:fd:6e:2f:b4:5b:98:1d:71:bf:
7d:bf:99:ac:5e:80:98:39:03:a7:b0:8e:08:cc:2a:24:fb:78:
ed:d0:56:f1:0a:be:c0:66:4c:fc:24:cc:a7:d4:4e:8b:55:5d:
06:e6:ef:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:09 2024 by rpki-client on console-ams.rpki-client.org