Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/wq9Q50KoZZV3tpZD_IGm-zRnwhY.roa
File: wq9Q50KoZZV3tpZD_IGm-zRnwhY.roa (raw, json)
Hash identifier: HZN4a94RekIW0I5uUsMne4iuL/f3OuRNrsrSBTYEKIk=
Subject key identifier: C2:AF:50:E7:42:A8:65:95:77:B6:96:43:FC:81:A6:FB:34:67:C2:16
Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial: 01856DCACB0BF3BA48C29D0F3EA08F174026
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/wq9Q50KoZZV3tpZD_IGm-zRnwhY.roa
Signing time: Sun 01 Jan 2023 14:44:44 +0000
ROA not before: Sun 01 Jan 2023 14:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205766
IP address blocks: 185.139.156.0/22 maxlen: 24
2a0b:20c0::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:cb:0b:f3:ba:48:c2:9d:0f:3e:a0:8f:17:40:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Validity
Not Before: Jan 1 14:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2af50e742a8659577b69643fc81a6fb3467c216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:72:cf:61:c0:ee:bd:e8:16:54:63:c2:94:62:
db:28:7e:8a:e0:f2:75:7e:6c:2d:ef:35:76:09:f7:
82:50:a4:c6:47:bf:42:58:ec:b9:72:2a:5c:63:90:
9d:8f:d0:ad:6a:fb:f2:ab:f1:6b:5e:38:66:d3:d3:
6e:9e:a3:38:ae:93:8c:19:e2:36:5a:39:05:fe:ae:
46:19:ac:04:69:93:da:f5:e4:03:e3:b8:4e:43:3e:
59:05:a5:75:0d:d6:dc:bc:57:20:e6:8f:78:6c:1b:
15:c8:9a:a1:52:c3:94:12:d7:d1:c4:79:05:3b:a2:
dc:f5:20:25:fc:61:e5:1c:ec:61:6d:c2:c9:80:31:
9a:3a:53:02:eb:5f:66:70:a1:69:e5:db:13:13:c1:
3d:04:be:fe:9a:d9:4d:24:0a:3d:bc:4f:8e:8e:55:
c1:c0:66:9e:e4:20:e7:fe:02:97:67:a8:aa:47:fb:
ec:5b:d6:d4:b5:eb:fc:da:27:c7:69:d6:b1:13:93:
a7:19:54:e5:62:3a:fa:44:b5:3d:96:2a:dd:6d:a1:
3e:d6:95:49:a9:1c:d6:46:09:35:80:c3:2f:bf:7d:
1a:fe:94:53:66:58:f2:eb:c7:f4:3a:a6:07:6b:38:
b2:3e:35:06:29:ba:cd:4c:87:6d:4d:d4:2f:13:fa:
31:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AF:50:E7:42:A8:65:95:77:B6:96:43:FC:81:A6:FB:34:67:C2:16
X509v3 Authority Key Identifier:
keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/wq9Q50KoZZV3tpZD_IGm-zRnwhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.156.0/22
IPv6:
2a0b:20c0::/32
Signature Algorithm: sha256WithRSAEncryption
a8:3b:e6:b8:c5:85:ee:94:44:11:23:e9:5b:6c:88:47:83:4d:
e4:ee:ae:1a:aa:7b:97:10:e6:bb:df:78:e6:c4:7a:2f:d3:17:
56:07:41:1d:6b:4a:19:8f:e3:62:06:c2:72:12:24:9c:78:23:
39:b6:fd:31:81:03:a9:9a:6c:c7:a8:af:13:5f:90:f9:b8:1d:
6c:b2:8f:ad:91:84:be:95:6b:2e:f9:5f:3b:27:04:c9:a2:7a:
ba:5d:10:2f:b6:ea:8a:41:35:e7:1d:b7:53:6c:c5:4a:07:d6:
92:0b:61:7b:55:04:cc:0c:c2:b2:d6:30:5b:e3:d3:5d:20:39:
6d:ad:18:ab:10:db:56:7a:a1:31:9a:7e:8f:39:04:d4:c6:47:
28:44:4e:fc:36:58:95:e0:00:a8:2a:bd:d8:46:0e:67:46:8d:
77:dd:19:57:be:51:06:f9:4b:53:84:46:17:45:7f:8f:b4:8e:
55:3d:0d:a2:c3:34:f1:29:e4:e2:e3:5a:dc:a4:37:fa:d4:60:
55:79:f9:72:65:d5:90:f8:df:95:28:a8:d1:c7:07:ec:ec:f1:
0a:2c:30:e9:29:02:5e:56:37:05:34:eb:30:ee:a2:db:6e:d6:
69:ee:98:21:20:d4:1b:8b:89:db:59:0e:d7:d4:48:30:e5:0c:
c4:4e:db:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:13 2024 by rpki-client on console-ams.rpki-client.org