Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/SyobNeSUHw9YXKjJsBUw0qgqwK0.roa
File: SyobNeSUHw9YXKjJsBUw0qgqwK0.roa (raw, json)
Hash identifier: COXRjkhRqkB0A+2RyVyKcFfULYLuoOzuPe7/SPYko+Q=
Subject key identifier: 4B:2A:1B:35:E4:94:1F:0F:58:5C:A8:C9:B0:15:30:D2:A8:2A:C0:AD
Certificate issuer: /CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Certificate serial: 0188D37E856B157D7898150AC984B257A82C
Authority key identifier: C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/SyobNeSUHw9YXKjJsBUw0qgqwK0.roa
Signing time: Mon 19 Jun 2023 11:51:04 +0000
ROA not before: Mon 19 Jun 2023 11:51:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35575
IP address blocks: 185.152.216.0/22 maxlen: 22
185.219.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 21 Jun 2023 15:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:7e:85:6b:15:7d:78:98:15:0a:c9:84:b2:57:a8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Validity
Not Before: Jun 19 11:51:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b2a1b35e4941f0f585ca8c9b01530d2a82ac0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:65:14:73:f8:dc:68:e0:ef:7c:0f:66:77:28:
de:80:22:23:6f:f6:b4:76:a1:da:19:90:7e:6c:7e:
db:26:0a:62:d6:b2:ff:44:14:c0:dd:04:b2:96:7d:
c0:b7:30:78:c7:57:96:da:e2:3a:22:a5:33:2d:29:
5b:e8:59:ac:03:40:1c:ba:1a:89:9c:fb:ac:72:8b:
81:6c:d7:af:fa:1c:48:bd:92:dd:d8:15:9a:d6:51:
94:7e:f7:f8:d6:b8:c9:41:29:f2:fe:4f:e8:d8:d6:
88:68:56:27:d1:fe:10:40:a5:cc:31:1c:77:b9:de:
d3:d0:de:8c:56:7c:19:35:e9:e2:5d:a1:34:75:b2:
e4:45:8b:88:57:f3:f8:ba:62:d6:d3:99:db:86:2c:
5b:a7:77:e1:1e:1a:db:e8:80:f4:2a:be:d3:f7:71:
c5:de:a1:f1:1d:95:58:c8:54:34:c8:e4:9b:4a:67:
9a:aa:07:03:b3:6c:2c:2e:ad:5a:f5:bb:10:c5:2b:
bc:d0:52:72:5a:c1:fb:c6:89:83:c1:4f:43:f9:2f:
f9:c9:82:a3:8c:df:ad:da:4e:73:f1:c4:85:23:2a:
13:ac:77:3d:c2:32:10:21:84:39:7b:92:20:28:9f:
4c:35:dc:fd:4a:d9:fc:18:c6:31:07:20:d3:dd:70:
5d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2A:1B:35:E4:94:1F:0F:58:5C:A8:C9:B0:15:30:D2:A8:2A:C0:AD
X509v3 Authority Key Identifier:
keyid:C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/SyobNeSUHw9YXKjJsBUw0qgqwK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.216.0/22
185.219.92.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:10:38:59:04:7e:77:4a:f1:7c:c0:4f:b7:77:9a:7a:df:ff:
e5:01:69:9e:df:6b:f0:e4:cd:67:ed:a5:4b:59:d8:7e:db:19:
fb:3a:73:5f:c0:18:a0:c7:8c:88:be:04:36:4c:cf:89:51:05:
19:56:5b:6a:01:b9:a2:61:32:70:ba:2a:46:03:d2:d6:ce:d8:
fc:00:b8:73:f5:24:dd:17:17:42:a4:ff:95:b8:18:4d:70:d5:
4f:04:53:ff:32:d7:54:ee:4b:84:d5:82:2c:f9:92:e4:e0:e7:
05:2e:de:59:2b:bb:97:99:38:91:cd:54:02:4a:18:69:d3:71:
0b:02:32:fc:8b:42:83:ba:1c:a0:0a:20:f4:c6:a1:4d:47:23:
b4:eb:00:3f:24:98:4e:e8:b4:63:39:d6:e6:56:2e:07:1a:0f:
24:15:1d:68:61:93:7c:64:8a:58:60:e8:ef:fa:e2:97:1a:77:
16:8a:63:d2:ed:32:50:ff:90:5a:aa:77:58:aa:87:f2:5c:6a:
c2:9e:ca:48:95:9f:a4:a0:5f:1b:69:ed:b1:3b:75:33:89:49:
25:70:49:8a:01:f4:6f:cb:bd:8a:54:c9:63:07:46:eb:98:f9:
78:b6:56:24:eb:f4:81:4c:6c:5d:fe:99:be:cd:e1:f1:f0:90:
4e:29:c2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:35 2024 by rpki-client on console-fra.rpki-client.org