Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/kHz2aRRw4aUwad0tQmq0HMwQjcw.roa
File: kHz2aRRw4aUwad0tQmq0HMwQjcw.roa (raw, json)
Hash identifier: tLzXhWHNwYT0rED/RkZ2XLM8aU49N7bYLTbbS8oKcVY=
Subject key identifier: 90:7C:F6:69:14:70:E1:A5:30:69:DD:2D:42:6A:B4:1C:CC:10:8D:CC
Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial: 018B6128F6EA7B4A1E790CF918A551F5E887
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/kHz2aRRw4aUwad0tQmq0HMwQjcw.roa
Signing time: Tue 24 Oct 2023 10:09:16 +0000
ROA not before: Tue 24 Oct 2023 10:09:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30821
IP address blocks: 185.134.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:28:f6:ea:7b:4a:1e:79:0c:f9:18:a5:51:f5:e8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Validity
Not Before: Oct 24 10:09:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=907cf6691470e1a53069dd2d426ab41ccc108dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:18:98:10:f9:f5:90:71:5d:78:45:2a:cf:fa:
c7:cf:ab:73:98:fa:4b:66:59:29:b8:1f:b6:1e:16:
c9:ec:9b:07:69:af:f0:a8:f2:79:f7:75:11:c7:14:
dd:36:2d:09:55:18:a4:2b:d4:f5:22:a9:cb:0b:06:
4f:e6:71:cb:c8:d2:c6:10:80:d7:ec:18:02:e5:04:
09:83:b0:1c:2c:30:cc:97:51:f8:01:8f:39:89:3f:
cd:6f:fa:2e:68:11:2a:bf:22:f7:6e:3b:03:22:86:
01:18:d0:46:07:be:27:7b:51:90:d3:1b:fb:07:37:
25:14:c2:93:e3:bf:99:53:28:8d:4f:e7:3c:a1:df:
f1:90:2a:44:2c:f2:e5:9e:a9:00:dc:2b:23:ef:8d:
e0:30:d0:59:b2:a5:9d:57:5d:aa:03:36:75:aa:f6:
15:52:12:a0:7f:75:73:f3:e3:63:8b:f4:7c:db:59:
60:90:45:02:70:06:8e:7d:65:70:e8:99:6f:c0:c1:
6d:5c:72:f1:18:87:28:3c:90:62:09:20:0c:af:6e:
a5:8c:76:f4:de:4e:f8:cc:61:e8:4d:61:0c:9b:d5:
be:fc:0d:d3:c5:0c:b2:d2:56:20:34:d0:fd:d0:03:
41:29:43:8c:32:b6:4e:47:01:67:18:2d:e4:01:98:
20:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7C:F6:69:14:70:E1:A5:30:69:DD:2D:42:6A:B4:1C:CC:10:8D:CC
X509v3 Authority Key Identifier:
keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/kHz2aRRw4aUwad0tQmq0HMwQjcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.16.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:78:9f:b5:ef:0b:12:43:71:b2:a2:ef:07:8b:4e:52:82:43:
05:d7:0c:cb:9a:5f:7f:83:2f:26:48:81:3b:6d:13:4a:8a:e9:
44:db:be:6c:72:53:76:0f:b8:05:7a:17:06:df:a6:dc:b6:33:
69:53:c8:cf:d1:b0:68:50:a4:09:14:54:9e:2f:4d:50:fc:4f:
2e:6f:04:94:08:ba:60:47:e3:66:f4:9c:cb:b3:c3:d0:0e:bb:
5e:f0:4c:76:51:c1:54:71:f1:a9:7d:2a:fc:d1:87:d7:29:64:
0b:3c:b9:11:ea:b0:f1:77:da:e1:21:ea:72:71:3a:bf:76:ac:
f1:ec:cd:cb:c9:03:99:8f:a8:27:a2:35:2c:83:13:10:1a:47:
4c:50:f2:f1:51:53:65:13:4c:9e:de:46:6a:78:6d:6c:52:f4:
f0:09:2d:b8:91:fb:58:af:6b:2d:7a:e8:1c:b8:af:4a:f2:bc:
d5:6a:6c:78:ba:d0:2c:a5:bf:65:f8:66:d4:50:cb:47:75:f2:
bd:0c:2e:ca:d0:00:bf:e0:2f:12:f2:bf:2e:6f:aa:9d:20:4d:
95:e8:f7:9c:64:0e:ce:a3:8a:a2:66:85:05:7a:d2:31:f3:45:
bd:d7:ef:97:86:63:9e:b8:fa:07:ac:da:64:ce:76:15:1c:5a:
a2:ed:eb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:48 2024 by rpki-client on console-ams.rpki-client.org