Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/AsKAMnc7E8FL2AAkyUgFwWImb4M.roa
File: AsKAMnc7E8FL2AAkyUgFwWImb4M.roa (raw, json)
Hash identifier: 7UmWGqZz9S8hyrg9QvAJ08JYi2kFOBDnyx0jFzwBymM=
Subject key identifier: 02:C2:80:32:77:3B:13:C1:4B:D8:00:24:C9:48:05:C1:62:26:6F:83
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 01856EC21D55C1871FF4FE62E506D3AAEDCC
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/AsKAMnc7E8FL2AAkyUgFwWImb4M.roa
Signing time: Sun 01 Jan 2023 19:14:53 +0000
ROA not before: Sun 01 Jan 2023 19:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15576
IP address blocks: 188.92.224.0/21 maxlen: 21
185.254.76.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:1d:55:c1:87:1f:f4:fe:62:e5:06:d3:aa:ed:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Jan 1 19:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02c28032773b13c14bd80024c94805c162266f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:4e:ff:68:47:56:5e:e3:8d:16:5e:e6:f0:
16:8e:4b:15:65:99:eb:ed:a4:f8:cd:45:1c:e3:d2:
dd:a8:ad:08:8c:97:f0:26:cc:09:34:e6:84:90:87:
fb:ba:5e:e1:d3:8d:a0:fd:0e:23:66:66:aa:82:43:
8b:23:f9:8e:dd:31:85:00:56:bd:74:15:cc:64:6a:
46:5e:6d:10:83:15:f9:50:2f:4f:74:31:87:90:27:
d3:5c:c7:86:35:a1:b1:3e:4e:ed:3d:73:06:46:b9:
16:2b:04:26:8c:76:63:78:1f:6b:bb:81:93:ed:17:
66:ed:ff:69:94:b5:8b:e2:e1:af:c9:16:b6:53:16:
db:37:46:4a:d2:94:99:53:41:1b:cb:9c:0b:62:85:
19:a0:e6:d4:00:c3:e9:77:98:01:7f:f3:d9:1e:e9:
b9:18:ed:b6:a2:da:b7:aa:da:00:27:07:e3:6c:6c:
43:90:9a:65:a9:2d:65:36:7f:d3:22:21:73:45:03:
c5:ec:d7:82:18:16:f7:76:0b:00:78:b6:4b:cb:36:
18:28:b0:30:8b:95:b5:21:e6:d0:0b:24:10:5e:c1:
04:cd:57:52:59:77:f7:ec:46:2c:78:e9:fd:fb:71:
3b:a3:34:6e:14:70:36:f6:45:f7:79:22:6a:34:48:
84:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C2:80:32:77:3B:13:C1:4B:D8:00:24:C9:48:05:C1:62:26:6F:83
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/AsKAMnc7E8FL2AAkyUgFwWImb4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.76.0/22
188.92.224.0/21
Signature Algorithm: sha256WithRSAEncryption
26:6c:f7:36:29:29:16:48:1e:a3:86:c4:d8:94:85:5a:d7:b6:
45:da:8f:82:07:56:16:b2:a8:9f:77:4b:b2:91:1d:a9:b6:d8:
9e:18:f7:8d:4e:c3:f9:81:68:e2:bc:b2:31:12:80:13:13:e3:
fd:68:18:65:67:14:85:d9:e2:69:58:13:31:1b:41:55:9e:c3:
e4:ee:06:6d:bb:5d:70:7d:e5:fe:6f:d9:82:03:e9:08:05:65:
82:f1:84:51:30:2b:11:0f:de:b5:f0:5f:e6:1d:5d:44:4f:d9:
b8:27:f2:6f:2a:3e:fd:d2:a8:a3:ba:f1:4b:0e:92:0c:dc:37:
fb:80:48:53:4b:5d:77:3f:93:40:ff:56:8e:32:bd:94:ec:f5:
30:1f:4f:5c:b8:4e:32:72:e3:ab:37:ca:7f:33:c6:9d:83:e8:
8a:14:98:64:0f:57:2d:51:d0:ae:b4:23:53:26:6f:0d:4a:ee:
e0:18:8c:92:07:75:07:10:5b:37:fc:90:97:ca:b4:ae:2a:dd:
cc:c5:c7:41:42:57:28:ef:d1:01:4a:65:ac:ad:f8:10:ed:33:
92:01:d3:85:93:c4:98:f7:88:e5:58:4c:22:70:b7:e7:6b:97:
47:e9:7b:34:87:cd:33:3c:a9:54:3c:6f:3e:3c:23:b3:fa:c8:
d2:99:17:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:51 2024 by rpki-client on console-fra.rpki-client.org