Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/Z8xaYqENRPgaMjl1SM-5u7eJW4U.roa
File: Z8xaYqENRPgaMjl1SM-5u7eJW4U.roa (raw, json)
Hash identifier: pQ+ICBiys2jeRz8FwRV4sJn3ong3TvnpoqjK9nROBaw=
Subject key identifier: 67:CC:5A:62:A1:0D:44:F8:1A:32:39:75:48:CF:B9:BB:B7:89:5B:85
Certificate issuer: /CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Certificate serial: 01857102C074938141D7E72CB00688E2CF68
Authority key identifier: AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/Z8xaYqENRPgaMjl1SM-5u7eJW4U.roa
Signing time: Mon 02 Jan 2023 05:44:43 +0000
ROA not before: Mon 02 Jan 2023 05:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203244
IP address blocks: 185.140.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:c0:74:93:81:41:d7:e7:2c:b0:06:88:e2:cf:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Validity
Not Before: Jan 2 05:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67cc5a62a10d44f81a32397548cfb9bbb7895b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:96:2b:4b:bf:31:af:c2:e6:ec:da:cd:56:
e2:5e:26:7b:a3:14:1b:d6:f2:f3:97:78:fc:f1:26:
0d:df:81:7f:cb:43:19:7b:bb:83:69:90:6b:24:c3:
f2:ee:97:64:d1:07:66:59:c0:62:0c:6f:53:b6:5b:
db:81:12:50:72:e3:7c:d0:3c:99:d7:38:8f:72:f3:
bc:c8:d5:2c:00:6b:3c:ac:d2:ed:51:cc:62:d9:a9:
3a:41:e9:bc:2f:17:2b:e5:2b:cc:c8:a3:e2:8f:c2:
5d:84:1e:75:b2:dd:27:ef:fe:6b:5a:ba:40:52:7a:
ce:39:4f:91:05:bd:40:9f:e5:31:01:23:61:41:de:
58:50:ba:5b:94:de:25:66:c6:4f:80:92:17:d2:27:
3b:6e:d5:af:a1:d0:ad:c6:16:6f:d7:e1:aa:60:38:
45:c7:95:7d:20:5e:25:f9:b2:23:c4:42:82:24:78:
4e:da:a1:41:b5:35:c8:1e:74:b5:ef:6a:c4:8a:9c:
82:b2:c3:d4:72:24:9e:d8:26:89:d6:27:b4:eb:80:
1d:f2:23:03:9a:7b:75:4f:79:02:8c:23:2e:14:5d:
18:91:d6:b3:d1:8e:62:4d:9c:05:9c:29:04:75:e0:
28:d7:6c:80:ce:dc:da:b6:cd:5b:da:5c:ff:c2:97:
e9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CC:5A:62:A1:0D:44:F8:1A:32:39:75:48:CF:B9:BB:B7:89:5B:85
X509v3 Authority Key Identifier:
keyid:AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/Z8xaYqENRPgaMjl1SM-5u7eJW4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.216.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:95:27:fd:29:59:41:bb:2e:ad:15:03:fb:d4:b9:85:cc:c7:
b0:7c:0d:eb:b5:98:ca:c4:47:6d:d8:e1:28:af:e3:90:1d:2e:
de:fa:7d:c6:64:9d:e7:c0:a1:44:4e:08:d6:28:b7:05:cd:ba:
da:88:e2:da:e2:f4:fd:28:43:b7:15:25:a6:cc:20:22:ec:eb:
71:46:e5:3b:f9:38:b9:8d:04:3f:48:bf:b8:b6:a9:1e:ca:10:
38:40:ce:2a:78:d1:e5:38:51:c1:28:66:5b:d0:a6:bf:e5:fe:
a5:d9:3b:83:4f:3a:66:89:14:56:5f:f8:43:3e:14:f0:18:ea:
a7:b3:91:00:ba:d9:2b:6c:c9:68:f8:ed:07:ab:85:24:d1:f6:
d5:4d:5c:28:52:f2:72:f2:e5:3b:01:5a:74:44:9f:a4:c0:22:
31:7a:63:16:be:89:0e:3c:6c:e3:26:df:15:22:9a:bb:8c:42:
54:68:f3:a1:6a:08:30:57:0e:ae:50:52:a9:3e:f8:94:bc:e2:
4c:ca:8a:f5:99:c7:55:fd:4c:dc:09:33:11:02:ca:96:30:47:
d6:ed:9d:04:01:fb:ff:51:28:37:3e:8e:7b:06:26:c1:0c:7b:
74:8a:8f:af:87:2e:83:84:c0:c0:5d:1d:c0:d6:35:34:c5:b1:
16:48:8d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:57 2024 by rpki-client on console-ams.rpki-client.org