Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OgERpa8Jc7IPvX2OLe8-jBs1_is.roa
File: OgERpa8Jc7IPvX2OLe8-jBs1_is.roa (raw, json)
Hash identifier: aoX4JpnpmQQGhWE7Yw967mNtCuY76zn6uP4WQNNWC5M=
Subject key identifier: 3A:01:11:A5:AF:09:73:B2:0F:BD:7D:8E:2D:EF:3E:8C:1B:35:FE:2B
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 01856C4A4DDEC1FAE06F6DE6EBD8DB2C5085
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OgERpa8Jc7IPvX2OLe8-jBs1_is.roa
Signing time: Sun 01 Jan 2023 07:44:47 +0000
ROA not before: Sun 01 Jan 2023 07:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203993
IP address blocks: 185.54.92.0/22 maxlen: 24
2a00:8640::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:4d:de:c1:fa:e0:6f:6d:e6:eb:d8:db:2c:50:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Jan 1 07:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a0111a5af0973b20fbd7d8e2def3e8c1b35fe2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:39:8a:8f:c8:b6:e5:7e:36:55:4a:50:60:45:
bb:be:29:57:4c:e9:52:ad:43:bc:1a:07:0e:00:42:
45:64:eb:ed:69:b0:3c:56:68:d3:b6:9d:91:fe:7b:
4e:8c:00:27:64:f9:46:05:02:a2:f9:18:67:47:de:
27:e9:75:7a:db:32:80:5b:2a:9c:db:bf:f5:24:0e:
ff:15:a2:18:61:9f:d3:09:8a:68:25:c3:01:fb:7a:
0d:d4:3d:78:c6:ce:6f:8f:6e:a7:1e:09:8f:b4:43:
0a:29:2f:5f:35:47:04:ef:c9:84:4a:02:99:cc:52:
a6:c1:03:16:3a:06:6b:32:ec:5b:e2:ad:d3:c8:12:
ae:31:9d:50:8d:dc:fa:c7:1a:06:ad:5d:85:0d:63:
9b:75:6b:cd:4e:b0:2b:88:f3:7b:ff:10:af:e2:fe:
31:69:9b:88:6f:5d:a5:56:01:0c:9f:34:19:7f:26:
a9:f8:01:6c:67:76:ce:c8:e6:6c:3e:99:98:fa:d9:
4f:82:94:2e:1e:cd:82:bc:97:7b:61:3a:ad:55:7d:
83:f6:d4:fe:e7:c5:06:50:12:da:dd:b9:6f:c4:b8:
ff:c8:66:0f:1b:25:3a:3c:41:b7:2c:e3:7c:cc:fe:
07:0d:99:e6:00:c8:cb:93:18:a9:4d:5a:f1:f8:5e:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:01:11:A5:AF:09:73:B2:0F:BD:7D:8E:2D:EF:3E:8C:1B:35:FE:2B
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OgERpa8Jc7IPvX2OLe8-jBs1_is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.92.0/22
IPv6:
2a00:8640::/29
Signature Algorithm: sha256WithRSAEncryption
1b:36:18:73:e3:bf:44:05:7c:cc:0d:9d:34:33:b9:b2:93:c3:
a0:98:61:4c:12:2d:ef:6a:6a:01:8e:ab:7a:e4:de:0b:e3:24:
0d:f4:34:2f:17:a6:4c:c3:e3:70:c3:ce:0a:98:64:a4:d8:d5:
f8:11:de:cb:bd:41:79:00:25:7b:0f:cf:62:6e:30:65:8b:f5:
33:2a:8a:f2:d0:e6:eb:2d:eb:5d:c7:bb:97:4b:1b:15:5f:1a:
b0:80:ba:26:ad:5a:d8:23:28:bb:b9:b0:40:04:d9:54:46:17:
f2:ac:7a:95:d3:92:31:a6:ae:06:1d:63:08:79:73:03:61:fe:
96:5f:c0:62:42:37:43:51:d6:ae:ca:1f:8b:f2:0c:16:e2:89:
0c:13:0c:8e:e4:b7:dd:8c:22:53:70:47:d1:19:65:22:99:43:
f8:1a:a1:25:21:22:07:31:a3:00:06:6b:23:9a:60:de:a8:13:
53:34:72:5c:f8:06:3a:6a:11:c5:79:f0:5d:72:ad:b4:ee:ee:
0d:9d:f3:8a:e3:e2:f0:ef:35:3c:71:a5:f7:ac:ff:2d:66:44:
8c:3e:49:20:b7:bd:31:b7:9a:60:12:d7:73:ab:5c:11:d2:3b:
7d:29:67:71:05:1f:af:7f:f1:a9:13:9c:70:a9:ee:41:af:ab:
ae:a3:3d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:24 2024 by rpki-client on console-ams.rpki-client.org