Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/aPAJWbWKzLGYkEuQ2XQ9VvxzWqw.roa
File: aPAJWbWKzLGYkEuQ2XQ9VvxzWqw.roa (raw, json)
Hash identifier: 9SL70kQ2nDFHjN0FxwfKXi2IAcn6150t+bcuGcq2Ft8=
Subject key identifier: 68:F0:09:59:B5:8A:CC:B1:98:90:4B:90:D9:74:3D:56:FC:73:5A:AC
Certificate issuer: /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Certificate serial: 01856CB85975890C0BEB516F6E7A997E0C2D
Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/aPAJWbWKzLGYkEuQ2XQ9VvxzWqw.roa
Signing time: Sun 01 Jan 2023 09:44:58 +0000
ROA not before: Sun 01 Jan 2023 09:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25091
IP address blocks: 185.185.200.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:59:75:89:0c:0b:eb:51:6f:6e:7a:99:7e:0c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Validity
Not Before: Jan 1 09:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68f00959b58accb198904b90d9743d56fc735aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:7f:65:15:d7:92:9b:b5:60:6a:79:27:7c:
35:4b:86:11:ba:27:9e:89:17:ef:95:53:4c:a8:3a:
03:03:52:9e:56:87:ca:6b:21:80:09:bc:39:6f:82:
16:bf:d7:60:42:88:98:45:df:86:d6:e5:ee:49:fb:
85:0d:59:7d:6b:c6:af:35:94:aa:83:5c:30:96:68:
e6:15:92:ce:41:d2:71:f6:c9:1d:c8:4a:44:4c:4e:
a3:50:18:26:d5:d5:95:b3:15:83:65:29:d4:c8:f9:
ea:77:dc:cb:fb:0c:49:c4:d3:7f:90:46:fd:ab:f6:
82:51:71:a5:ab:05:04:26:65:29:86:15:33:bb:af:
1f:5c:fe:ae:5e:f5:5a:22:51:08:b1:80:2a:cd:95:
b7:2b:42:ca:9f:3d:02:d3:e2:26:8d:fc:3c:99:59:
dc:10:7a:ec:8f:c1:fe:7d:7f:0d:69:19:08:43:b8:
d8:60:66:c3:58:66:fc:27:d6:3b:ed:7e:fb:80:02:
f9:be:bc:1f:3b:d3:7e:ea:06:40:b0:d4:91:10:47:
3e:13:0c:22:6a:5e:24:e5:10:6a:06:3b:d2:bb:68:
1f:c9:67:b4:2c:d2:54:2c:35:60:bc:9f:ec:00:48:
c0:4a:e8:c7:23:76:61:5b:66:f1:81:98:6f:e2:56:
d5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F0:09:59:B5:8A:CC:B1:98:90:4B:90:D9:74:3D:56:FC:73:5A:AC
X509v3 Authority Key Identifier:
keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/aPAJWbWKzLGYkEuQ2XQ9VvxzWqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.200.0/22
Signature Algorithm: sha256WithRSAEncryption
12:12:1f:cb:f7:31:74:41:60:4a:33:a8:59:b3:ec:8a:d9:ea:
54:51:db:38:6c:97:f4:7c:f4:35:91:8b:23:e9:49:18:f5:d2:
73:55:86:b4:df:f9:f4:d6:c3:32:03:2e:30:fb:64:9c:6b:22:
65:5e:78:b5:6d:37:8c:04:0d:9f:0b:ef:3e:b0:b8:e1:3a:fa:
11:fe:f3:fd:3f:7c:2b:0f:12:1a:18:81:b7:a3:35:f2:49:e9:
80:cb:f8:05:a6:d7:d7:3d:81:b0:79:e6:8e:5d:31:16:d3:43:
f6:03:a8:03:35:4c:5f:6e:5d:c9:97:d7:a1:05:cc:11:61:5c:
73:ad:88:fe:5f:17:d6:54:f5:f5:7b:4c:16:68:20:5a:5f:ad:
27:8b:04:e1:f8:44:22:09:63:9a:8f:ab:9c:50:6b:78:12:59:
2f:04:39:b9:68:86:c6:1b:53:db:08:8e:7f:5e:fb:6f:83:c8:
60:29:00:54:21:07:2e:51:06:ad:5d:88:c6:a4:1a:ed:15:e2:
e8:96:3e:d5:66:ec:7c:4e:b4:ce:19:d6:f8:2d:fa:1a:5f:f4:
8b:64:c1:79:1f:8b:a4:7c:07:c0:af:c6:ff:f0:24:72:36:ee:
34:9b:3f:5d:4b:f5:a1:86:c1:af:12:1f:a8:fe:4e:55:4e:3f:
19:f0:a4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:02 2024 by rpki-client on console-ams.rpki-client.org