Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/osQTP9JUXKqSe7QXLEko-oXMr5Y.roa
File: osQTP9JUXKqSe7QXLEko-oXMr5Y.roa (raw, json)
Hash identifier: jDQo4k2S68Eg0R4Y2ngDAZMEbr0c24lvnpgpw8QuoUU=
Subject key identifier: A2:C4:13:3F:D2:54:5C:AA:92:7B:B4:17:2C:49:28:FA:85:CC:AF:96
Certificate issuer: /CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Certificate serial: 01856E0202EB7E31655815869033247D611E
Authority key identifier: CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/osQTP9JUXKqSe7QXLEko-oXMr5Y.roa
Signing time: Sun 01 Jan 2023 15:45:03 +0000
ROA not before: Sun 01 Jan 2023 15:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8646
IP address blocks: 185.120.68.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:02:02:eb:7e:31:65:58:15:86:90:33:24:7d:61:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Validity
Not Before: Jan 1 15:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2c4133fd2545caa927bb4172c4928fa85ccaf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:88:ac:58:68:85:61:80:77:ef:ed:92:cd:29:
ef:19:b5:0e:d7:6f:29:4b:d8:23:00:1b:0a:52:fd:
52:7f:01:a4:9d:62:29:8e:ba:77:98:2b:32:4d:63:
b3:5b:9a:59:61:34:07:51:87:fe:bf:8e:39:ad:e4:
b8:f6:99:58:f2:56:88:e4:b4:66:82:83:37:c9:88:
c5:56:57:4d:ac:e4:c5:09:78:25:12:6c:f4:04:d5:
6b:a5:4d:9f:88:ec:a7:70:b5:c5:7e:a7:20:f9:b3:
80:83:34:1e:ef:7a:12:7f:dd:7a:3b:f3:56:30:5b:
9e:50:43:02:3b:fa:89:0d:3f:87:e2:5f:7d:cd:cd:
1c:4c:ad:d9:91:45:1f:ce:b7:7d:79:da:7c:b3:9a:
f8:99:5e:b2:a4:c1:60:e1:56:9a:76:cc:7d:02:fb:
84:5b:e9:79:4a:2c:3a:c4:f5:b5:6c:e5:c9:9c:d9:
20:1a:62:f9:39:46:58:56:c9:4c:35:e4:39:16:16:
b7:6a:3d:3a:b1:91:b6:8d:8b:fc:0a:f2:3d:47:51:
8b:46:13:da:1d:b6:0d:b5:92:da:9a:0d:56:b1:97:
89:2d:c8:6d:f7:5d:40:d1:0a:de:ff:21:10:e1:71:
96:58:17:c1:3b:c4:1e:ea:29:6b:9c:0a:48:32:d1:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C4:13:3F:D2:54:5C:AA:92:7B:B4:17:2C:49:28:FA:85:CC:AF:96
X509v3 Authority Key Identifier:
keyid:CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/osQTP9JUXKqSe7QXLEko-oXMr5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.68.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:b9:1a:9b:f8:86:66:d0:f3:70:01:8e:fa:43:97:33:e1:44:
bb:50:5d:31:f5:f2:33:a1:6e:cc:f4:c3:97:b2:d2:25:a7:ae:
8c:02:fd:55:3c:15:9a:cc:df:20:9a:f8:e5:dd:aa:85:a8:a0:
36:65:b8:56:23:db:ab:3f:4b:81:f8:40:80:f5:8b:d0:8f:ca:
d2:77:a8:f4:c6:5a:ff:97:d3:4d:5b:b3:eb:45:c9:cc:e9:0c:
ac:b3:67:eb:3a:fc:cb:44:1b:b0:3a:3c:e2:7a:79:b9:fd:b6:
3e:73:bf:f7:af:64:24:28:61:d2:5d:8a:8c:27:44:04:41:c7:
f8:fb:5b:30:02:ed:f9:00:97:9e:cd:46:cb:84:c0:78:77:10:
de:a8:68:18:5b:09:f5:af:b0:12:5c:2d:a7:82:c3:55:7f:1d:
df:2a:d2:3e:40:d8:6e:92:6c:12:70:34:97:23:0f:90:e2:c7:
47:ec:cb:1c:3e:6a:63:e0:f1:18:2e:7d:b4:ce:fa:93:45:89:
bc:8d:6e:eb:72:82:6a:d9:01:41:27:f8:51:b9:a8:1d:6e:7f:
61:d5:fa:84:5a:a7:04:fa:dd:2e:c8:c7:26:b5:24:d2:57:41:
d1:10:7a:aa:9f:41:69:69:c3:0d:b0:14:b8:3c:1f:9b:46:f7:
26:02:c4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:17 2024 by rpki-client on console-fra.rpki-client.org