Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/B9vksLqCSYxuirTLe72PSCcvJgQ.roa
File: B9vksLqCSYxuirTLe72PSCcvJgQ.roa (raw, json)
Hash identifier: 0ACYFn/f6qqjpcwggwcVcUw+TNvWd1fwz9qA5TqKGEc=
Subject key identifier: 07:DB:E4:B0:BA:82:49:8C:6E:8A:B4:CB:7B:BD:8F:48:27:2F:26:04
Certificate issuer: /CN=a15a105f5ba627e5be6f1ff91f2597278209931f
Certificate serial: 0185730CBD72D179DCEA2219138187B51DE2
Authority key identifier: A1:5A:10:5F:5B:A6:27:E5:BE:6F:1F:F9:1F:25:97:27:82:09:93:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/B9vksLqCSYxuirTLe72PSCcvJgQ.roa
Signing time: Mon 02 Jan 2023 15:14:52 +0000
ROA not before: Mon 02 Jan 2023 15:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201738
IP address blocks: 185.65.116.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:bd:72:d1:79:dc:ea:22:19:13:81:87:b5:1d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15a105f5ba627e5be6f1ff91f2597278209931f
Validity
Not Before: Jan 2 15:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07dbe4b0ba82498c6e8ab4cb7bbd8f48272f2604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7b:86:9b:92:6c:1a:60:b8:43:e1:76:17:4b:
f9:8d:65:70:bf:7c:eb:89:11:45:b8:b3:8c:26:4f:
23:fa:67:5d:43:ce:b2:ec:80:db:30:cc:cb:0e:77:
f2:e6:fc:b7:6b:f6:db:d1:78:96:12:db:12:9d:a7:
2a:3c:d9:3c:a9:06:00:21:d0:85:90:1a:26:d8:4f:
4f:6f:c9:66:ab:b2:22:9a:ae:67:5a:9e:d3:6f:59:
b6:0e:4a:35:9e:d8:6f:71:88:e7:66:b4:b4:ed:b9:
02:f8:87:f3:70:97:64:f3:6b:00:48:da:81:39:4d:
67:39:6e:c1:16:ff:f2:22:75:7f:65:d7:9e:b1:ca:
21:6b:52:6c:53:fe:67:98:69:e5:74:5d:48:5f:6c:
ec:d3:9d:74:2b:63:76:67:8b:a2:4a:d8:e8:d8:7b:
9a:99:0e:10:24:f0:70:18:8c:84:0f:c5:2e:1a:00:
62:d3:93:13:39:f1:d6:c1:b7:2c:0c:be:8f:e6:44:
04:b7:eb:09:6a:ec:c5:24:52:35:23:a9:5a:e5:0c:
32:21:b2:b6:6c:8d:83:bb:6e:ac:80:d4:88:4e:78:
72:df:a6:53:1b:f2:a9:f9:53:8b:7b:47:fd:c3:03:
c5:93:2a:20:02:75:98:c3:2b:3d:7b:2a:bf:81:c1:
09:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DB:E4:B0:BA:82:49:8C:6E:8A:B4:CB:7B:BD:8F:48:27:2F:26:04
X509v3 Authority Key Identifier:
keyid:A1:5A:10:5F:5B:A6:27:E5:BE:6F:1F:F9:1F:25:97:27:82:09:93:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/B9vksLqCSYxuirTLe72PSCcvJgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.116.0/22
Signature Algorithm: sha256WithRSAEncryption
75:66:70:ba:cc:00:19:ae:05:46:1f:16:7c:92:47:ce:68:ff:
99:54:79:0a:97:74:cb:13:b0:e2:6b:7a:07:8a:6f:f2:a3:cd:
6a:6f:c8:61:28:f4:8e:ec:43:03:36:30:73:c9:40:de:f2:ed:
1b:c4:5f:14:e3:91:f7:6a:7e:b5:c3:7c:e3:3c:a3:03:28:3a:
0c:35:7d:a3:86:98:41:ec:c7:99:15:cf:8b:a2:92:58:77:73:
c0:23:cb:2b:71:bb:58:64:9e:ac:be:f7:53:f3:c1:03:fc:55:
fc:26:00:38:b3:24:d2:fc:aa:38:72:bd:5d:e4:57:70:2d:69:
91:23:c1:e3:74:a0:00:f3:e9:22:cf:96:52:53:4e:af:cb:dc:
df:b5:7d:55:de:5f:b8:6e:b4:93:5f:0e:00:27:5a:b2:33:9b:
d2:8c:48:b7:2d:50:be:c3:0c:58:8f:9d:1f:f5:cd:f5:bf:86:
b4:45:92:72:42:38:74:e7:29:48:56:ab:7c:a6:5b:bf:c4:d3:
9c:1f:51:4c:33:82:cb:77:6d:61:c6:9d:92:14:5f:39:fa:0a:
23:f8:dd:d1:5a:26:6f:f4:6b:93:70:08:11:d9:99:ef:4d:14:
b9:ba:78:7a:77:38:e0:0b:b0:87:46:53:e0:d8:90:f9:41:1a:
3a:9d:f0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org