Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/BAmSXC7D7RvoLo6cLC31H_LHQko.roa
File: BAmSXC7D7RvoLo6cLC31H_LHQko.roa (raw, json)
Hash identifier: Q1HoIIK00BinQWv9mSWFtxr9OAlIRvXZe1GsUqAPmjk=
Subject key identifier: 04:09:92:5C:2E:C3:ED:1B:E8:2E:8E:9C:2C:2D:F5:1F:F2:C7:42:4A
Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial: 01856C011D72CD78B4F3D4F0426D316FC631
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/BAmSXC7D7RvoLo6cLC31H_LHQko.roa
Signing time: Sun 01 Jan 2023 06:24:50 +0000
ROA not before: Sun 01 Jan 2023 06:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206376
IP address blocks: 185.188.124.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:1d:72:cd:78:b4:f3:d4:f0:42:6d:31:6f:c6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Validity
Not Before: Jan 1 06:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0409925c2ec3ed1be82e8e9c2c2df51ff2c7424a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a2:c5:f9:9d:1d:e0:a9:e2:12:4c:08:2e:3d:
95:de:05:c8:7b:08:14:2a:22:f2:e3:70:9c:ae:f7:
04:c1:56:94:0f:f8:1c:4b:10:32:fc:3b:87:53:f2:
b8:f0:7f:64:b7:d3:c4:92:c7:cf:15:ab:57:37:87:
9b:28:50:f9:25:72:91:89:23:03:1d:ca:01:ea:d8:
66:9f:93:54:4b:cc:6c:6f:d9:61:0b:2a:a8:86:8a:
a3:5f:8e:6f:f9:58:5e:41:af:69:2e:2e:71:7b:f4:
8d:1b:80:1a:25:63:d8:3b:c2:91:49:f6:7a:6e:e0:
e0:ad:af:bc:83:e8:95:9c:e4:a9:97:b1:e7:5b:8c:
32:6b:8d:9b:96:36:0f:52:06:57:fd:2f:9b:e5:d1:
be:67:84:48:9c:4c:6e:28:71:0d:2c:ac:26:a8:c4:
84:b4:91:0d:5a:8d:63:a0:74:05:26:b7:a6:97:fa:
21:9f:5f:f9:f4:3d:c8:09:4c:b8:76:74:1a:ef:0e:
14:36:fc:3a:06:ad:b2:da:2e:da:0d:1d:01:7c:4a:
7a:5b:04:82:42:e1:05:ae:26:5d:d5:b3:4c:24:b3:
0b:38:d5:65:47:35:60:89:c9:68:9d:de:4b:97:96:
9c:e9:c4:5c:a6:54:cc:86:cb:e8:86:d3:53:79:ef:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:09:92:5C:2E:C3:ED:1B:E8:2E:8E:9C:2C:2D:F5:1F:F2:C7:42:4A
X509v3 Authority Key Identifier:
keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/BAmSXC7D7RvoLo6cLC31H_LHQko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.124.0/22
Signature Algorithm: sha256WithRSAEncryption
24:01:6f:d6:eb:42:94:47:ba:bd:17:7b:31:6b:7f:9a:47:3d:
c1:7b:d7:da:ba:c9:ec:25:78:f0:0d:65:8d:26:ac:6f:3f:d3:
bf:ab:e4:58:1b:92:8d:62:37:e2:88:4e:29:e8:3e:15:30:e2:
9a:e5:e8:af:bc:fd:53:1d:b3:5a:04:d3:8b:65:2b:72:ea:19:
85:9c:e0:ae:0d:e5:71:0a:dd:8e:c2:62:7e:8e:a1:5d:87:cb:
4a:89:77:88:59:b9:52:fc:5c:3e:1e:34:b5:49:78:5f:0f:03:
81:5b:b4:67:72:a3:0f:e0:11:e4:0d:a4:2d:eb:6d:44:e6:eb:
2a:a1:85:b5:4d:b5:16:ba:35:1f:26:ff:70:7b:00:6e:8a:63:
ff:85:06:26:31:82:47:c1:4b:47:8e:3e:9c:60:b1:21:cc:14:
a1:91:b8:72:63:34:62:0f:34:27:d8:6d:85:5f:02:96:0b:6f:
89:5f:ff:73:3a:db:d2:31:fc:40:d5:70:4f:10:79:9a:8d:b5:
1a:ad:d3:6c:69:7c:ab:6d:69:43:c0:46:5f:0f:2a:55:61:f0:
fc:5e:21:e8:31:3c:73:1c:44:98:9a:07:a3:4d:d3:d0:57:e7:
c8:4d:75:69:06:ee:35:49:b0:aa:8e:3c:74:be:f5:18:05:16:
f0:2b:de:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:42 2024 by rpki-client on console-ams.rpki-client.org