Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/IpEaDWqTv1o2fLMQiBGke3oayZc.roa
File: IpEaDWqTv1o2fLMQiBGke3oayZc.roa (raw, json)
Hash identifier: 4AkbZRau6yhDHtNa5seAJYfeJWD4jdc/wiYU61AyQf4=
Subject key identifier: 22:91:1A:0D:6A:93:BF:5A:36:7C:B3:10:88:11:A4:7B:7A:1A:C9:97
Certificate issuer: /CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Certificate serial: 018571DE840CFB0171153144B19AEF87D87D
Authority key identifier: 54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/IpEaDWqTv1o2fLMQiBGke3oayZc.roa
Signing time: Mon 02 Jan 2023 09:44:46 +0000
ROA not before: Mon 02 Jan 2023 09:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201193
IP address blocks: 185.231.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 08 Jun 2023 11:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:84:0c:fb:01:71:15:31:44:b1:9a:ef:87:d8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Validity
Not Before: Jan 2 09:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22911a0d6a93bf5a367cb3108811a47b7a1ac997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:82:82:81:a7:0b:95:c8:88:5d:4b:9a:5e:
51:8f:8d:cc:c1:93:26:12:9d:4d:0a:51:43:68:60:
24:b5:c6:11:26:15:e0:c3:c5:2f:98:49:e3:c3:86:
13:ce:38:16:da:a7:1d:95:61:82:96:a2:51:98:6a:
4f:95:c1:71:2e:98:bd:d5:a0:67:de:3c:d8:32:62:
1d:72:e3:dd:7b:78:56:d7:d2:05:db:45:76:14:9a:
24:e0:3d:28:50:78:3e:92:65:b9:db:3b:cc:0e:c0:
7c:dc:0c:8b:55:04:1d:b8:6e:95:84:53:8c:60:b2:
96:6f:e1:4c:4b:b1:1e:86:18:ac:c5:32:10:ae:f4:
a6:25:72:2c:49:03:87:fc:52:f5:23:cd:3e:76:04:
d4:b1:67:fe:a2:54:31:90:52:54:44:27:58:3a:fa:
a8:c4:32:83:f6:64:f8:de:32:ab:c7:7a:fc:99:be:
a0:ed:d2:83:dc:b5:c4:2e:44:54:c9:1a:a5:bd:cc:
e2:21:c5:ce:48:dc:91:cb:e6:87:c3:3d:86:1d:66:
6a:0b:01:8b:2a:c6:09:7c:f0:9e:87:f4:d1:99:00:
bb:6c:76:8a:a6:bd:23:98:d5:0f:ad:fc:b3:40:d9:
bc:ed:e8:4b:5e:4f:7b:fe:87:49:91:42:6f:43:b0:
71:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:91:1A:0D:6A:93:BF:5A:36:7C:B3:10:88:11:A4:7B:7A:1A:C9:97
X509v3 Authority Key Identifier:
keyid:54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/IpEaDWqTv1o2fLMQiBGke3oayZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.48.0/22
Signature Algorithm: sha256WithRSAEncryption
40:3a:8c:f6:8a:e9:d4:59:94:c0:7f:02:2b:2c:d4:bf:7c:35:
99:7e:3f:a0:f4:bf:fc:27:c3:e0:28:56:db:fb:e7:18:8a:f7:
03:84:b0:d7:4c:e8:0a:4f:91:f5:7d:6d:00:fc:4f:68:57:fc:
76:e7:9f:73:29:59:ac:4c:f2:31:4e:a4:f2:12:f6:b7:93:e2:
a6:df:e9:35:82:d2:d0:41:23:a6:6a:03:be:88:50:9a:41:de:
59:a6:9d:44:c9:a6:76:fa:f0:73:fa:fa:cd:d7:97:b8:2d:b9:
ab:c8:8d:79:f9:e6:92:bf:31:b5:16:9d:80:7f:4e:a7:6e:d7:
0f:21:8d:ae:79:4f:d4:8d:53:d0:d1:87:cf:6e:47:b6:2e:16:
6f:eb:93:08:e2:dc:f7:9c:f5:9d:ac:d8:44:fb:ea:b2:6d:fb:
62:cd:1c:0b:c5:13:53:e2:76:0f:59:0c:fc:d2:df:85:3f:2d:
8a:3a:e4:a5:26:3b:a8:f5:93:d2:df:f3:17:f3:f1:ad:f4:75:
ee:19:a9:d8:50:b6:eb:5a:e2:1b:b2:7b:fe:2c:22:0b:fa:20:
e1:61:f4:00:ce:cc:5d:a2:9d:13:cd:b1:58:46:5b:9d:69:05:
a5:81:be:d8:26:d1:7d:f9:37:cf:19:e3:99:36:a8:3e:d2:38:
6c:40:35:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:51 2024 by rpki-client on console-fra.rpki-client.org