Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/nREjdUwXfe0Ou-V8FlShW9ueRlE.roa
File: nREjdUwXfe0Ou-V8FlShW9ueRlE.roa (raw, json)
Hash identifier: mmyDFfRWeS3Qz7aM6XUbbSw2wN42mKC2c61RXo2T2io=
Subject key identifier: 9D:11:23:75:4C:17:7D:ED:0E:BB:E5:7C:16:54:A1:5B:DB:9E:46:51
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 01856F3920B1B1F9BC998CA87C9DBE986105
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/nREjdUwXfe0Ou-V8FlShW9ueRlE.roa
Signing time: Sun 01 Jan 2023 21:24:52 +0000
ROA not before: Sun 01 Jan 2023 21:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199290
IP address blocks: 185.79.4.0/22 maxlen: 24
185.241.28.0/22 maxlen: 24
185.196.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:20:b1:b1:f9:bc:99:8c:a8:7c:9d:be:98:61:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: Jan 1 21:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d1123754c177ded0ebbe57c1654a15bdb9e4651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:f9:67:55:96:d1:79:c7:96:3b:0f:58:3a:
f3:39:68:e7:4b:4d:ae:2f:1a:24:cb:9b:9c:31:5a:
d1:bf:18:6e:fd:34:ff:be:cd:fd:08:bc:2f:9b:cf:
b8:cf:0f:e7:31:be:ab:09:93:cf:1c:e9:10:bb:1d:
e7:6c:93:d0:cd:be:1a:e8:e4:60:64:72:95:8e:4d:
ba:d0:95:43:8f:c1:89:16:cd:8f:fd:cf:71:c3:87:
7a:81:45:de:d4:d2:ba:5b:96:fb:97:14:7e:1d:ef:
e3:8b:92:59:00:b1:36:23:77:02:fd:24:40:72:f8:
6b:c3:13:89:cc:ec:08:4b:f0:65:e0:40:4b:a3:49:
ac:db:27:0a:c5:db:83:bd:84:8e:97:49:1b:4e:27:
b5:1d:b5:b6:fd:5e:95:42:a7:50:25:a0:5f:9c:4a:
5f:86:1e:22:45:82:5e:7f:5f:8c:0a:55:19:86:06:
0d:e1:23:ec:b3:35:ab:6f:c7:fd:81:6e:ed:8d:dd:
6d:04:51:e7:d1:39:9d:09:fa:ce:f9:8b:5a:b7:75:
56:cb:66:06:73:5a:5b:1a:f3:25:06:77:88:56:0c:
d1:c4:0a:40:4d:58:a0:ab:0f:20:57:02:96:d8:dd:
32:dd:d3:c6:48:d9:ff:72:93:46:a7:42:a5:5e:fc:
91:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:11:23:75:4C:17:7D:ED:0E:BB:E5:7C:16:54:A1:5B:DB:9E:46:51
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/nREjdUwXfe0Ou-V8FlShW9ueRlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.4.0/22
185.196.16.0/22
185.241.28.0/22
Signature Algorithm: sha256WithRSAEncryption
03:e3:63:37:f9:67:27:46:46:1e:22:01:d2:8a:c5:3d:44:c6:
3a:50:28:0b:9d:6b:82:b1:a4:f6:5c:f4:17:73:12:1c:69:90:
f7:9c:cd:b4:bb:80:88:4b:e4:41:f8:e6:05:ff:58:1b:2f:48:
61:e8:72:58:3c:c4:be:20:01:c3:9d:e2:21:36:55:6e:f7:c0:
92:7a:38:38:f5:c0:32:1d:9e:cb:b0:4c:a1:1d:db:38:27:8e:
74:fd:b3:d1:8f:52:ae:1a:f2:4e:3a:d7:3f:d3:95:77:58:b4:
72:70:4f:23:dc:7c:90:6f:79:31:2d:d4:7a:aa:95:06:51:2a:
3f:18:6b:24:27:90:c7:a8:c4:dc:dc:ef:3b:e2:0f:56:b3:81:
3d:dd:15:f0:6f:4c:e3:93:e3:af:af:f6:74:80:17:99:83:4d:
ff:ae:c6:e5:a5:98:8b:e8:88:c3:62:9d:71:89:4e:4f:a7:11:
f0:ff:4d:c5:d6:d2:74:1d:e7:6c:e4:36:66:66:83:d4:c1:fa:
57:c4:9c:d5:57:19:ea:5b:28:58:a7:92:82:33:83:ae:9a:2a:
5d:39:08:e9:fb:77:dc:1f:5f:9a:e6:27:b6:50:a2:34:3a:ad:
40:d7:2a:11:82:34:80:36:09:9c:ae:d9:fe:62:34:63:61:21:
36:55:ce:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:12 2024 by rpki-client on console-ams.rpki-client.org