Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/E9kAcopb15jMh5Akhl_Bx_lQHLo.roa
File: E9kAcopb15jMh5Akhl_Bx_lQHLo.roa (raw, json)
Hash identifier: jVnc6XltL9BfyInpGShb/DdTzApPgo4WbEQHePPoZaY=
Subject key identifier: 13:D9:00:72:8A:5B:D7:98:CC:87:90:24:86:5F:C1:C7:F9:50:1C:BA
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 0186E5E60F6C9C9B2F23A98C76FC938CA945
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/E9kAcopb15jMh5Akhl_Bx_lQHLo.roa
Signing time: Wed 15 Mar 2023 15:31:45 +0000
ROA not before: Wed 15 Mar 2023 15:31:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.120.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:e6:0f:6c:9c:9b:2f:23:a9:8c:76:fc:93:8c:a9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: Mar 15 15:31:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13d900728a5bd798cc879024865fc1c7f9501cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2b:62:a1:99:bb:9c:d2:1c:c3:f2:56:97:d5:
8a:6a:79:cd:32:8c:2d:bf:cc:69:a1:57:97:af:14:
ef:15:10:b6:3b:ca:7f:51:d5:54:3c:14:1e:6d:7c:
24:e7:fd:13:76:23:f0:03:8b:6d:fd:d3:82:27:42:
65:4a:e2:42:0f:eb:99:04:66:9a:6e:60:aa:cb:9b:
c8:10:b6:52:72:b6:66:db:d6:36:25:83:54:c5:d4:
77:fe:91:48:2e:39:e5:ef:4d:46:dd:64:95:8b:5a:
73:7e:e1:23:24:cf:62:55:01:21:1e:35:4f:7f:5c:
b6:fe:97:3c:7b:d0:1b:59:9b:94:d0:95:e7:4e:fc:
8c:51:23:da:49:a1:1c:ba:84:49:f3:94:e9:81:ca:
a1:01:fb:20:7d:43:6d:5a:22:e9:ef:08:f9:e9:c1:
8e:ff:0b:44:c3:cb:d9:2f:7d:46:48:9f:fd:f4:c2:
bf:04:58:51:df:2f:a2:0b:23:2a:e6:ad:25:6d:b6:
aa:48:dd:72:55:a0:8f:b7:10:e0:45:b9:d7:1a:98:
1c:ee:a9:16:c8:5d:01:6d:08:f2:7d:ea:b9:0b:5b:
96:53:4a:e3:0a:a5:6d:85:2a:c3:09:7f:6e:57:46:
a2:ec:af:8a:f4:8e:ff:7b:2e:88:20:90:db:d3:25:
a9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D9:00:72:8A:5B:D7:98:CC:87:90:24:86:5F:C1:C7:F9:50:1C:BA
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/E9kAcopb15jMh5Akhl_Bx_lQHLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.92.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:a6:79:db:e3:52:50:9b:37:7f:ba:99:34:bd:76:1a:b7:c6:
a4:40:82:a7:8a:c8:f3:32:26:31:ea:ab:37:71:62:60:3b:30:
9b:69:d8:16:65:a1:d3:5c:cf:13:b5:3e:a3:97:61:c3:8d:ff:
9e:51:c8:ff:ff:74:67:39:cf:59:5d:ea:95:6f:37:24:34:0f:
66:81:20:3d:0d:b0:fb:c9:74:7d:79:9a:a1:f6:b0:0c:6d:50:
96:38:be:b1:60:27:79:9a:0a:e1:3c:b6:73:f6:5a:4f:43:41:
30:d4:6e:52:3e:e0:bc:b2:e1:dd:1d:a2:88:41:11:0b:2c:54:
49:51:2d:f4:e6:d3:f3:41:ad:ca:1e:8d:65:91:87:40:fb:88:
a0:fa:1b:58:13:35:f9:45:40:de:5a:c3:65:90:a1:2d:66:52:
81:85:2e:87:3b:cf:36:37:1d:fe:2a:08:7d:fb:af:94:9f:2f:
3c:32:97:7a:7e:05:d5:50:63:38:92:37:c4:0e:a7:d6:27:1f:
04:49:d4:78:59:ea:b2:5c:ab:b5:b2:be:f9:7a:cb:ff:88:9e:
ee:19:ba:e9:89:24:56:e1:37:d9:92:a8:ba:b1:d9:cf:a5:88:
9c:12:ce:8b:4d:59:29:51:32:f8:17:12:01:77:02:b5:60:e4:
b4:b8:29:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:30 2024 by rpki-client on console-ams.rpki-client.org