Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/4ltStLqFpaZ5WW2EYXOi0Yna9DY.roa
File: 4ltStLqFpaZ5WW2EYXOi0Yna9DY.roa (raw, json)
Hash identifier: LFArK+BBsNFMMb5JSfh8sm3Pf5vq8rQg2QyExvhRUXI=
Subject key identifier: E2:5B:52:B4:BA:85:A5:A6:79:59:6D:84:61:73:A2:D1:89:DA:F4:36
Certificate issuer: /CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
Certificate serial: 0185720C42E59F79EFA31D4E1C9A58FB5AEF
Authority key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/4ltStLqFpaZ5WW2EYXOi0Yna9DY.roa
Signing time: Mon 02 Jan 2023 10:34:44 +0000
ROA not before: Mon 02 Jan 2023 10:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200539
IP address blocks: 185.239.12.0/22 maxlen: 22
185.103.152.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:42:e5:9f:79:ef:a3:1d:4e:1c:9a:58:fb:5a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
Validity
Not Before: Jan 2 10:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e25b52b4ba85a5a679596d846173a2d189daf436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:cd:c5:1b:15:35:85:73:82:69:12:3c:b5:
c7:be:96:74:4e:75:9a:7a:12:1f:52:36:ee:e3:3f:
b0:63:6d:0b:a8:42:79:92:12:44:dc:66:9e:a2:7a:
88:74:00:aa:e0:d1:ee:34:5e:cc:b0:cb:60:00:c4:
64:43:cb:73:ee:ab:ac:be:d5:a6:52:ea:d6:7f:98:
5a:d0:b9:ce:a6:28:6b:42:a5:a1:53:cc:50:3d:b1:
29:00:04:80:c3:c5:85:ec:81:5d:93:27:1d:e7:a6:
3e:10:9a:83:18:72:77:6c:95:d3:d3:cf:da:9f:cf:
bd:3a:72:e5:ff:d4:5c:e4:67:b5:70:8b:f0:86:cb:
46:4b:5f:8d:c6:14:f9:fc:4e:86:8a:82:ab:02:ab:
94:29:48:b1:0f:c2:5e:b6:88:aa:f2:48:9e:cd:60:
62:86:bd:30:ca:5c:c2:3b:3d:16:45:23:4c:d4:4a:
c9:e0:04:9c:93:5e:86:b1:d6:88:b8:8f:15:1b:da:
24:4a:22:85:dc:13:5b:d5:2f:78:d2:94:df:dc:ea:
aa:72:21:fc:93:07:b0:55:64:53:a5:88:47:48:ad:
4d:b0:f2:fd:83:9c:d4:7d:c5:b1:61:9d:1c:38:56:
12:04:f2:e4:cc:67:23:e3:1f:62:51:94:d7:37:77:
04:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5B:52:B4:BA:85:A5:A6:79:59:6D:84:61:73:A2:D1:89:DA:F4:36
X509v3 Authority Key Identifier:
keyid:4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/4ltStLqFpaZ5WW2EYXOi0Yna9DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.152.0/22
185.239.12.0/22
Signature Algorithm: sha256WithRSAEncryption
53:ec:ee:50:e3:c9:1e:6a:3a:f9:b7:80:ad:2b:2f:90:28:86:
8a:fd:99:62:a0:a0:bd:ce:c9:60:f6:18:96:55:9b:d1:ec:39:
94:4a:b4:80:3b:32:bb:c8:ad:0f:71:d0:bf:6b:25:5f:ae:d4:
a8:34:03:6f:55:7a:64:b5:c8:8d:7f:6b:88:ca:e8:19:19:7c:
84:bb:b2:9f:01:20:4d:0f:7c:fc:97:15:a3:61:f2:f5:0e:71:
a3:b1:5f:5c:91:e8:86:cd:24:88:60:a2:39:54:98:59:4c:f4:
3d:23:37:4a:60:bb:39:44:f6:51:a3:bc:89:c7:20:18:4c:1f:
a5:67:48:ba:51:ae:0c:5a:c0:04:fa:72:88:9d:d4:28:35:93:
20:54:7c:77:10:2a:6d:81:78:be:74:60:1e:0f:0c:0b:7d:a7:
53:d2:5e:74:89:fa:91:3f:12:ac:5a:41:e5:82:7e:fd:0d:3e:
82:03:9f:f5:4e:92:ff:44:c6:0c:f8:d9:b8:89:e0:ad:68:26:
64:2c:7a:fc:17:54:4b:9e:55:46:67:87:27:f4:1a:93:46:34:
47:51:ab:4e:ec:fc:ad:91:bd:e0:9b:e8:2d:ba:f3:0f:80:6d:
34:aa:72:73:45:1d:ca:18:90:12:2f:1a:6c:d2:62:60:f2:1d:
36:0d:31:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:53 2024 by rpki-client on console-ams.rpki-client.org