Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/kqHr9O5OD4ckZjNk4rx9rF30EOo.roa
File: kqHr9O5OD4ckZjNk4rx9rF30EOo.roa (raw, json)
Hash identifier: p/cdkdmBDB29tQlyEV+ORuvCOXoqSH3aRTvQeEaMyW8=
Subject key identifier: 92:A1:EB:F4:EE:4E:0F:87:24:66:33:64:E2:BC:7D:AC:5D:F4:10:EA
Certificate issuer: /CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Certificate serial: 01856DDD52777CC7C0B3957AB683F04648F1
Authority key identifier: CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/kqHr9O5OD4ckZjNk4rx9rF30EOo.roa
Signing time: Sun 01 Jan 2023 15:04:59 +0000
ROA not before: Sun 01 Jan 2023 15:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198288
IP address blocks: 185.208.120.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:52:77:7c:c7:c0:b3:95:7a:b6:83:f0:46:48:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Validity
Not Before: Jan 1 15:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92a1ebf4ee4e0f8724663364e2bc7dac5df410ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:60:6d:b2:79:f0:73:51:d7:16:96:f7:50:fd:
7f:93:d4:78:88:8d:1d:b2:ab:66:27:80:05:dd:70:
54:e0:a5:a9:a0:49:89:12:e5:e1:2c:08:2c:10:69:
89:2b:93:1e:e6:f1:94:08:60:cd:d2:be:10:5b:58:
55:cb:6f:b4:40:8a:99:2a:5e:3d:39:41:32:f8:cf:
bc:ff:69:d8:a3:8d:54:54:d2:c4:17:9a:78:a4:da:
f5:f0:64:12:67:77:1f:87:92:e5:73:bb:f0:c6:4a:
6b:8a:67:bf:2c:20:53:33:e9:c6:dc:8f:7e:d2:bf:
dc:00:1d:e9:49:8d:a6:83:dd:d3:4f:89:e1:bf:fe:
b0:8e:94:94:c7:7e:5f:b0:8f:b3:9d:3d:a3:8a:74:
97:ac:da:c7:fd:f3:6d:03:bd:f1:e3:9c:e4:1a:ea:
53:32:db:ed:db:70:71:43:86:ec:0d:4b:29:dc:b5:
4e:53:65:5a:c6:bc:45:16:7f:94:fb:b5:e0:7b:2f:
10:f3:52:a6:74:c5:59:7d:df:9f:67:a2:74:31:92:
67:53:4a:4a:fb:ce:6f:d8:be:81:03:1a:86:09:65:
6d:d4:ce:2b:ac:03:71:93:8f:06:45:47:e1:ee:9c:
4e:a0:da:7e:68:48:05:7d:81:17:b4:34:46:42:16:
b8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A1:EB:F4:EE:4E:0F:87:24:66:33:64:E2:BC:7D:AC:5D:F4:10:EA
X509v3 Authority Key Identifier:
keyid:CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/kqHr9O5OD4ckZjNk4rx9rF30EOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.120.0/22
Signature Algorithm: sha256WithRSAEncryption
16:67:78:46:2a:62:95:62:ed:60:2e:41:f3:7e:6b:0f:87:d8:
40:d9:1b:aa:71:a0:fc:f0:a3:28:3c:61:a8:aa:6e:47:22:cc:
ba:01:61:1e:d6:0e:65:ba:14:24:83:57:6f:64:56:34:07:45:
6e:1f:d9:c9:ed:79:df:19:3f:87:4e:32:b8:90:0d:b0:68:ae:
84:39:de:4e:c0:b6:1b:b1:12:ee:3c:48:61:e9:ce:30:32:6c:
cb:40:1f:b3:1f:ea:a4:98:9e:03:46:1e:25:bc:6e:83:53:f5:
5f:a0:9b:39:a1:50:23:85:3b:5d:5b:57:5e:dc:1a:08:bc:85:
b4:14:f7:84:a6:5e:5c:94:6b:cf:ec:ce:51:f0:78:55:d7:7f:
a4:8a:22:15:b5:cf:86:b2:39:73:7b:2c:59:83:e9:f3:40:b1:
b0:f3:37:7d:2b:4f:3a:31:74:cc:07:e2:46:79:f5:ea:3d:d0:
59:44:ca:57:0f:3d:69:bb:8c:09:d0:62:2c:73:7a:0f:9f:02:
1e:10:21:2a:fa:f3:b1:1b:c4:a4:e0:c9:27:28:ab:7d:ce:1b:
b6:12:29:27:00:bc:2c:b8:ad:df:58:1a:7a:9a:bb:19:2f:9a:
20:03:cc:b7:44:30:cd:37:64:69:f7:12:04:96:55:e1:2a:5a:
ac:d3:11:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:11 2024 by rpki-client on console-ams.rpki-client.org