Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/2tDDWxzHY7PXhySJVEh_NX_Mp-E.roa
File: 2tDDWxzHY7PXhySJVEh_NX_Mp-E.roa (raw, json)
Hash identifier: AMTrmyAEAN4eq3HS4ofWnW3XqvdNd2ucGsvfNi3QzsU=
Subject key identifier: DA:D0:C3:5B:1C:C7:63:B3:D7:87:24:89:54:48:7F:35:7F:CC:A7:E1
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 01857115225E9C5A7280297012737D8C81D4
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/2tDDWxzHY7PXhySJVEh_NX_Mp-E.roa
Signing time: Mon 02 Jan 2023 06:04:48 +0000
ROA not before: Mon 02 Jan 2023 06:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61437
IP address blocks: 185.200.156.0/22 maxlen: 22
2a09:a940::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:22:5e:9c:5a:72:80:29:70:12:73:7d:8c:81:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: Jan 2 06:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dad0c35b1cc763b3d787248954487f357fcca7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ea:4f:ce:b1:96:93:16:16:b6:0c:9c:12:39:
ed:9b:ee:58:11:48:c8:62:b5:8b:16:e6:5a:44:9b:
45:85:77:70:3e:c5:25:2b:6e:0c:e2:ea:d1:53:03:
6d:28:0b:44:be:9e:61:04:39:b4:d2:72:cf:62:4b:
74:71:8a:8b:b4:85:56:9a:ca:54:1d:bf:ea:9a:0c:
cf:7d:34:8b:f7:7e:51:4d:8a:86:5b:7e:ff:c9:cf:
ee:28:52:2b:ac:25:49:87:eb:33:1e:3a:f9:5c:7c:
2d:4d:af:26:a6:9c:a4:9a:6b:6e:26:b9:99:44:0b:
cd:18:52:47:44:fc:3e:db:81:ac:0a:56:a3:e9:65:
05:2c:dc:39:fe:fb:62:9d:78:c4:cd:55:8c:b7:b1:
64:59:6e:6f:cd:e2:01:f8:1c:c4:3a:70:7c:82:8c:
84:16:55:1a:95:cd:6f:a9:ca:2b:1a:a7:e5:d9:f2:
26:e7:ab:f5:4f:d6:63:2b:97:bb:95:58:6d:45:d5:
5d:1e:1e:64:0e:b0:62:6b:82:3b:bb:5b:12:f9:c0:
a7:45:21:ff:da:59:df:81:d7:66:84:15:02:08:4f:
e2:e4:a4:09:40:da:90:a1:cf:84:2d:83:52:8a:11:
95:08:ee:54:2d:ad:96:56:54:22:5d:b9:34:74:dc:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D0:C3:5B:1C:C7:63:B3:D7:87:24:89:54:48:7F:35:7F:CC:A7:E1
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/2tDDWxzHY7PXhySJVEh_NX_Mp-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.156.0/22
IPv6:
2a09:a940::/29
Signature Algorithm: sha256WithRSAEncryption
79:be:a3:bc:ac:b8:31:8d:d7:62:0a:0a:07:5f:d4:5e:55:6d:
53:36:7b:d6:e5:c8:8c:60:12:bc:d5:04:61:bb:cd:f5:16:c2:
0e:3a:37:81:b6:0b:e9:95:42:07:39:c0:93:02:d7:2e:2f:da:
0c:03:9c:10:d0:70:94:c7:78:c3:0d:f2:be:5f:67:d0:40:c8:
85:e9:44:85:c7:4a:d1:1b:a0:3c:ec:db:9e:0c:d1:71:a9:92:
2a:b5:ef:80:5b:22:12:38:85:b0:6f:2a:5b:cd:8e:a2:62:d7:
74:23:93:0c:8c:ca:d5:ef:56:15:3d:5e:9b:09:84:8b:ad:a2:
79:23:1d:7d:a9:e9:f1:8c:f6:30:76:6b:4e:cb:17:bb:87:88:
d5:5e:00:7c:77:e6:c6:90:38:fb:1f:48:55:5b:b6:8f:79:82:
13:5a:60:dd:28:c2:2d:6e:6c:aa:0e:4e:a1:f6:82:5f:62:e0:
a4:83:2f:af:4d:c6:e2:6e:36:1a:53:3c:02:ac:14:81:1b:34:
56:43:d4:28:b4:5d:fb:2b:db:3e:63:9c:80:e7:62:83:81:6c:
bb:ff:56:5c:04:cc:3e:d0:60:50:e6:cc:7c:84:38:e0:a3:77:
66:cb:70:8a:66:14:f7:e8:3f:5e:74:1d:83:43:2c:81:df:06:
25:52:a9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:07 2024 by rpki-client on console-ams.rpki-client.org