Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/t_AtJPkXFsd7dcpkGysSwsPuuvM.roa
File: t_AtJPkXFsd7dcpkGysSwsPuuvM.roa (raw, json)
Hash identifier: kZU4Q6HQCHFtlyVjfH3+YkgS4qA3whjln3I2DpERrTM=
Subject key identifier: B7:F0:2D:24:F9:17:16:C7:7B:75:CA:64:1B:2B:12:C2:C3:EE:BA:F3
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 01856D7893F9D9EEEB45A6F3526EF1139998
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/t_AtJPkXFsd7dcpkGysSwsPuuvM.roa
Signing time: Sun 01 Jan 2023 13:14:56 +0000
ROA not before: Sun 01 Jan 2023 13:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42306
IP address blocks: 185.137.144.0/22 maxlen: 22
176.123.12.0/22 maxlen: 22
2a07:4c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:93:f9:d9:ee:eb:45:a6:f3:52:6e:f1:13:99:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Jan 1 13:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7f02d24f91716c77b75ca641b2b12c2c3eebaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fe:91:31:23:1c:51:0a:04:57:d7:ff:45:12:
3d:49:79:74:ca:ba:0a:f6:86:c9:06:a7:02:4e:a1:
4e:55:ac:50:49:f1:bf:2b:de:bf:d4:f8:02:8b:b5:
f1:26:58:41:8d:06:3a:ee:75:cc:c7:75:1c:b1:b7:
56:00:1b:a0:4d:6e:b1:dc:b0:43:cb:15:ed:32:70:
a6:62:37:38:6e:55:af:30:b1:6d:eb:ee:ea:c7:61:
e9:c3:a4:ab:49:9e:69:e2:8f:a2:8f:35:b8:77:8f:
bf:a8:1e:df:44:36:2d:51:c0:d6:49:7f:18:77:22:
9a:42:75:17:be:21:d0:d9:3c:a6:13:17:8e:92:f1:
d9:80:18:88:9a:ea:6a:62:41:bf:47:96:93:26:17:
da:dd:05:94:31:26:ee:1b:3f:21:bc:14:78:5b:a3:
44:2a:2e:59:47:c2:68:02:af:27:91:49:c0:10:33:
d3:36:b8:7b:d9:5d:79:82:ad:d1:cc:64:59:1c:0d:
83:22:76:a4:31:9d:c2:17:ef:94:0e:9c:c3:f7:59:
c9:4d:57:a3:3c:19:25:0a:15:5a:03:1f:cb:1c:1a:
b3:2c:19:33:60:96:70:98:93:3e:0f:e3:e0:a1:f3:
d1:ab:6e:88:f9:7f:c2:dd:bd:3f:eb:5d:82:0b:0a:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F0:2D:24:F9:17:16:C7:7B:75:CA:64:1B:2B:12:C2:C3:EE:BA:F3
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/t_AtJPkXFsd7dcpkGysSwsPuuvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.12.0/22
185.137.144.0/22
IPv6:
2a07:4c0::/29
Signature Algorithm: sha256WithRSAEncryption
70:7d:41:a7:19:ad:ac:2a:51:a5:ec:ff:0b:30:24:63:47:10:
02:43:ff:f1:03:65:29:4a:11:3c:a8:04:f0:8e:f2:f7:f9:20:
91:e0:ab:95:06:24:53:d2:df:a7:17:cd:73:a8:c2:fc:36:5f:
63:27:74:ba:5a:10:cc:8f:f3:30:6a:44:bb:f5:f6:fa:bd:20:
d1:ce:bc:9e:a9:c9:0c:38:09:df:c0:7b:aa:51:c7:a9:51:bb:
da:81:0f:82:9b:aa:a8:60:a2:43:ae:9d:06:1c:11:00:a0:14:
3c:14:bc:fa:11:bc:2f:b9:d7:06:fa:2e:4f:78:b3:d8:93:6c:
90:70:70:be:bc:b6:5d:41:f2:91:ff:ad:5c:0d:b9:7d:f4:3f:
ed:92:c3:15:06:dd:df:6e:cc:22:d3:76:cc:5a:a2:d8:bd:00:
42:e1:ca:be:90:4c:00:5a:c1:97:ba:a4:04:bf:e0:db:87:e1:
6e:0b:ac:8f:4c:aa:f2:6f:e9:d3:1a:ea:74:8c:56:fb:cb:64:
37:ed:ca:98:24:17:b3:4f:7a:64:f8:34:9b:eb:a8:30:12:0f:
d7:84:5d:49:38:b5:b9:39:28:ba:3d:c4:b3:ff:25:7f:7a:b8:
14:19:f2:00:79:f5:ca:c6:c5:8c:51:6b:94:8c:b4:8a:96:b8:
1b:f7:17:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:34 2024 by rpki-client on console-ams.rpki-client.org