Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/f9O6YAXFPE_0h_B_k2U5-odHcH0.roa
File: f9O6YAXFPE_0h_B_k2U5-odHcH0.roa (raw, json)
Hash identifier: WALTKA9u56lNDN1RG9Ee7/rHOmsWtrOAHZLwJvNT+DI=
Subject key identifier: 7F:D3:BA:60:05:C5:3C:4F:F4:87:F0:7F:93:65:39:FA:87:47:70:7D
Certificate issuer: /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial: 018AB73596FFE6FC6EE0306473F8B8B63895
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/f9O6YAXFPE_0h_B_k2U5-odHcH0.roa
Signing time: Thu 21 Sep 2023 10:07:37 +0000
ROA not before: Thu 21 Sep 2023 10:07:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200947
IP address blocks: 185.82.44.0/23 maxlen: 23
185.82.46.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:35:96:ff:e6:fc:6e:e0:30:64:73:f8:b8:b6:38:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
Validity
Not Before: Sep 21 10:07:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fd3ba6005c53c4ff487f07f936539fa8747707d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:57:9d:c6:2b:65:0d:b0:35:f9:e7:22:cb:
70:0a:8f:2a:c9:18:3a:40:fa:57:49:d6:e1:28:ed:
29:21:1d:2f:b7:ec:2f:5c:b1:de:8d:5f:78:52:56:
f9:a9:4c:b9:3e:08:64:2a:10:8b:58:4f:4c:8d:30:
a5:d4:6d:0e:60:dd:c7:18:bb:b1:2a:4e:ae:b7:ff:
49:5f:d3:1d:1e:e3:8f:7e:9a:36:6a:57:d3:7f:43:
33:c2:b9:45:59:f7:20:3c:87:dc:42:06:cf:7d:db:
7e:fe:be:05:d0:00:83:ca:3c:87:22:27:71:b9:1e:
f1:a1:7b:49:f6:4b:02:07:93:18:61:ce:f7:7c:45:
01:bb:5a:fd:05:85:0e:25:ae:7c:33:d3:54:a9:a6:
65:9a:74:bf:79:48:5c:13:ee:5e:bb:3e:69:52:b3:
43:8b:27:e7:2a:3a:b8:b6:92:0f:5c:e3:29:b3:07:
1f:2a:52:5c:99:15:e3:34:b4:31:b5:27:e7:48:8a:
ca:68:6d:6f:24:8c:3c:ad:f2:bd:81:72:3e:fc:e0:
27:eb:a0:a1:12:b1:15:e3:f2:32:ed:bf:b2:9f:8e:
84:e5:a5:fc:b4:26:e4:e6:34:f5:69:8f:ce:3d:35:
ee:6f:13:02:8e:5c:40:5b:77:34:59:d6:bd:ac:c1:
8a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D3:BA:60:05:C5:3C:4F:F4:87:F0:7F:93:65:39:FA:87:47:70:7D
X509v3 Authority Key Identifier:
keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/f9O6YAXFPE_0h_B_k2U5-odHcH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.44.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:0c:c1:bc:95:9b:bc:4f:96:4d:85:c7:4f:45:fe:e2:7a:12:
c9:e2:ef:50:d9:38:cf:2a:17:a3:a7:d6:4e:cb:0f:29:e4:5a:
8a:8a:a9:8f:fe:1e:16:92:3f:4b:d8:b7:e8:78:b0:b5:11:83:
fe:d4:05:cc:fe:25:40:98:9c:b5:19:c8:30:b8:3b:53:be:b5:
99:c6:14:df:1b:96:ff:55:7b:ba:ec:73:1a:94:ec:12:65:2f:
c4:47:fb:28:2b:10:7c:83:0e:fb:16:52:2d:08:a9:c7:b7:21:
b0:34:55:07:2a:4b:44:e9:2e:80:4a:51:fb:2a:6e:83:13:40:
e4:14:90:4a:b1:47:c2:37:84:6c:68:b0:aa:92:ad:42:ef:4a:
d8:59:fd:0c:56:39:89:fc:8e:8e:16:9d:4e:93:f9:42:3e:ad:
65:d2:fa:ad:34:23:fb:d7:97:e7:58:eb:3d:c4:aa:87:61:90:
50:fc:82:0a:db:8b:00:f8:1c:1c:60:11:68:61:a9:08:62:12:
79:ff:b2:37:ef:b8:0c:8f:34:8d:c5:9a:bd:f5:e5:b9:7d:ed:
a7:76:29:58:20:60:ce:0b:f9:79:62:20:c2:46:3d:58:26:f7:
8f:bc:77:9f:c8:34:65:7d:62:16:5d:f8:de:00:1b:8a:90:de:
2c:10:e0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:27 2024 by rpki-client on console-ams.rpki-client.org