Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/cBmTmuqjnk-aOow00V1hcs6myUw.roa
File: cBmTmuqjnk-aOow00V1hcs6myUw.roa (raw, json)
Hash identifier: BZmQAGv+/7Zfd/f4cbCvhsOWlzSTnGSnLwpjb+FepZM=
Subject key identifier: 70:19:93:9A:EA:A3:9E:4F:9A:3A:8C:34:D1:5D:61:72:CE:A6:C9:4C
Certificate issuer: /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial: 01856F54928DAFCB438DBB2CE0B2C128E01D
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/cBmTmuqjnk-aOow00V1hcs6myUw.roa
Signing time: Sun 01 Jan 2023 21:54:51 +0000
ROA not before: Sun 01 Jan 2023 21:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61327
IP address blocks: 185.164.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:92:8d:af:cb:43:8d:bb:2c:e0:b2:c1:28:e0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
Validity
Not Before: Jan 1 21:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7019939aeaa39e4f9a3a8c34d15d6172cea6c94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d5:99:9a:19:e3:09:e1:29:ee:37:e5:68:66:
6c:30:8e:95:87:24:ce:70:5c:a3:aa:03:ef:51:68:
b1:fb:57:1a:2d:86:2d:f0:f0:4d:f3:5d:a0:55:6e:
90:f2:03:0f:cf:ec:88:58:4b:c9:f2:5e:40:68:95:
e7:fe:24:a7:62:e7:6d:87:8c:7f:20:8f:c5:1d:7f:
39:7b:c5:5e:0c:45:b1:79:71:fe:22:45:85:b6:bc:
5e:d8:cb:d3:4d:00:88:5c:b8:8d:b0:f1:fb:30:3d:
ab:42:ba:86:eb:7f:dc:a3:ec:d5:95:b9:76:43:7e:
12:7c:16:78:cb:3e:b8:43:72:af:89:f9:57:4d:84:
1f:29:43:d2:d7:3a:a6:8e:2f:2d:55:d8:b1:4b:c7:
a5:b1:e7:39:b6:b0:5a:c8:0b:30:47:19:35:d4:c4:
28:b2:17:75:31:49:c8:3b:36:ff:de:a0:08:91:84:
74:25:52:0e:e8:da:3a:d8:a0:cd:f1:97:a4:fb:63:
cc:b7:38:72:25:4f:8d:74:74:66:71:86:41:a4:f9:
5f:d3:ac:c2:ca:95:a8:b6:b0:ef:91:08:04:8a:fc:
26:e5:86:b4:8e:44:ec:5a:6d:b4:96:2b:07:e3:8a:
5c:2d:81:4b:66:f9:da:51:36:b6:2c:47:7b:0c:c2:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:19:93:9A:EA:A3:9E:4F:9A:3A:8C:34:D1:5D:61:72:CE:A6:C9:4C
X509v3 Authority Key Identifier:
keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/cBmTmuqjnk-aOow00V1hcs6myUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.63.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:79:9e:a6:96:be:c9:c4:a2:e9:0d:b8:68:93:4d:64:7e:1d:
af:76:0e:c2:da:d3:b1:05:82:64:ae:a6:16:26:92:85:5c:d0:
b5:9f:ed:02:d6:a4:14:d9:fb:d7:f0:81:80:20:3c:b1:c7:5b:
50:ce:63:85:8a:51:24:24:4f:65:57:b9:50:4e:69:e2:10:e2:
3e:fb:c3:66:b3:12:0a:4b:a9:d5:39:65:65:b0:2f:92:a9:61:
d8:41:19:bc:5f:65:11:32:4b:84:2d:c4:44:18:8f:fe:78:74:
4e:9f:60:a8:12:ab:ef:69:e7:7e:5e:a7:4c:d7:a1:8e:99:c2:
2f:16:7f:fd:59:02:ef:b3:97:78:b9:df:93:7b:f1:46:e7:dd:
23:3a:b3:d4:50:8c:4f:b2:f1:62:3a:4f:0a:17:c3:14:b5:07:
ca:24:fe:c1:cd:f3:2e:d6:2a:a4:78:2f:7f:bf:36:55:de:82:
2a:07:d8:75:1d:86:18:06:30:86:56:60:da:aa:63:00:bc:3b:
cf:55:61:b3:3a:aa:3b:55:bc:0d:b3:ba:e1:50:39:22:58:26:
54:cb:23:c1:b5:c9:76:21:6c:eb:93:6b:f5:43:47:40:a4:f8:
63:64:95:d0:55:ca:5b:86:c2:6a:bd:cf:15:da:6e:32:c5:c8:
1d:92:a7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:11 2024 by rpki-client on console-ams.rpki-client.org