Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/SHualnqr8YvrtaBhIVa_LAAv0JE.roa
File: SHualnqr8YvrtaBhIVa_LAAv0JE.roa (raw, json)
Hash identifier: xEW90a/JYnL/tMkbBN4gqtRxUdoQlikMGIKVb0z0X88=
Subject key identifier: 48:7B:9A:96:7A:AB:F1:8B:EB:B5:A0:61:21:56:BF:2C:00:2F:D0:91
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 01887355F01A85E0B1618A91315BECEA72F7
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/SHualnqr8YvrtaBhIVa_LAAv0JE.roa
Signing time: Wed 31 May 2023 19:43:11 +0000
ROA not before: Wed 31 May 2023 19:43:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34225
IP address blocks: 185.48.92.0/22 maxlen: 22
193.138.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 31 May 2023 19:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:73:55:f0:1a:85:e0:b1:61:8a:91:31:5b:ec:ea:72:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: May 31 19:43:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=487b9a967aabf18bebb5a0612156bf2c002fd091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:32:94:8e:57:24:03:48:cc:04:41:d2:a9:
84:00:0d:28:ad:96:c9:f6:c4:ac:80:56:65:ca:6c:
01:f5:2c:7a:01:ad:78:48:c9:19:a6:d4:47:b7:27:
70:99:c9:5e:0b:4c:bb:6c:86:40:06:0c:c0:12:b2:
25:89:04:4d:b6:2a:ed:4f:d8:b2:f1:52:76:1e:5e:
a8:3a:83:f5:2a:00:0c:90:77:d0:fa:53:22:8f:b9:
d3:0c:96:d4:00:e0:8e:5d:97:3f:a9:81:b1:05:9e:
87:1c:bb:52:0c:f1:3b:13:c4:27:4a:f1:fe:36:4d:
04:6d:a6:a0:a1:16:72:b5:ee:10:b1:61:ba:2b:46:
73:17:86:ae:69:74:69:4c:6b:85:18:8d:4d:dc:b9:
3d:36:86:87:e1:40:d4:7e:d9:6e:f2:45:9f:71:d8:
da:a7:ef:bc:84:7d:77:fc:26:c0:f6:42:7a:72:c7:
67:54:7d:f7:6e:93:4d:27:d4:93:a8:dd:f2:6e:c3:
29:fa:56:75:c1:7d:3f:5d:1e:4d:f8:c5:8a:61:57:
5e:1d:e1:33:b1:46:69:54:68:d4:4c:ed:f2:7a:77:
9e:d5:83:9a:13:06:f6:fc:52:e5:79:48:b3:cd:87:
07:01:79:c2:80:88:95:c9:2a:17:f0:17:f0:00:48:
2e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7B:9A:96:7A:AB:F1:8B:EB:B5:A0:61:21:56:BF:2C:00:2F:D0:91
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/SHualnqr8YvrtaBhIVa_LAAv0JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.92.0/22
193.138.164.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:3d:c5:a5:b1:2b:a2:9e:d4:3a:df:96:15:a5:89:8a:12:0d:
42:0c:2d:93:95:1a:7e:ee:67:44:c6:dc:2c:b4:e1:80:4c:d7:
64:09:f0:34:65:65:e1:09:c4:6c:7e:99:c6:78:10:ba:e1:76:
2f:18:32:3a:a6:bf:b8:8c:b9:88:3a:ba:28:8f:ff:d2:59:67:
70:a0:38:f4:ac:95:18:96:d1:5b:20:b9:a9:9d:c3:58:51:74:
60:8b:6f:ba:ae:33:37:c3:5a:6a:85:9b:c2:ca:88:d7:d8:1e:
5a:c1:17:fc:cb:b5:48:3f:99:8a:8c:a8:ff:81:6e:80:b5:03:
07:43:0c:39:18:31:d0:69:f0:52:63:48:c6:17:d2:2e:1c:b3:
55:db:67:8c:b0:fc:b7:0b:62:4c:d5:19:b1:4b:dc:96:74:d1:
f8:8b:41:31:61:ee:e2:92:61:ea:a2:0d:71:cc:c4:2e:8b:de:
6a:b8:49:2e:c1:39:4b:48:ec:6d:ea:7b:e3:ec:5e:28:d0:bc:
95:8c:b3:87:40:94:de:8a:0d:3b:47:68:3d:72:34:5a:e1:10:
25:15:27:ce:67:79:5a:5f:1b:bf:0e:7d:d0:83:cd:71:38:3a:
0c:51:8f:c8:ab:95:6a:7c:c5:87:81:fa:b2:59:4b:83:2a:a8:
fa:ff:9c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:31 2024 by rpki-client on console-ams.rpki-client.org