Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/LK2R6QKnV1y-IUNLzf_MwolK8xs.roa
File: LK2R6QKnV1y-IUNLzf_MwolK8xs.roa (raw, json)
Hash identifier: bV8RwzYN2Yt33jYqdW/zGVf9m3bVjJMpxeA1/4/d7JI=
Subject key identifier: 2C:AD:91:E9:02:A7:57:5C:BE:21:43:4B:CD:FF:CC:C2:89:4A:F3:1B
Certificate issuer: /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial: 0188AE6111E3BFDE7079800740583087CA1E
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/LK2R6QKnV1y-IUNLzf_MwolK8xs.roa
Signing time: Mon 12 Jun 2023 06:52:57 +0000
ROA not before: Mon 12 Jun 2023 06:52:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 185.162.80.0/22 maxlen: 22
185.200.192.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ae:61:11:e3:bf:de:70:79:80:07:40:58:30:87:ca:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
Validity
Not Before: Jun 12 06:52:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cad91e902a7575cbe21434bcdffccc2894af31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:aa:4a:e9:ab:82:62:10:80:12:2f:82:1b:
6e:1d:fb:33:5f:92:b3:5d:fa:d6:27:7c:a7:85:f5:
21:d3:c1:ce:08:9d:aa:d7:4d:b8:cb:8b:64:7a:4b:
12:0f:9c:cb:30:44:e0:09:f1:f8:50:dc:d3:18:8a:
8a:95:29:ac:38:02:2a:0d:9e:68:42:5c:e8:a4:7a:
73:d5:69:da:71:e7:1a:ab:55:84:4b:e7:2d:99:0a:
36:69:16:c6:5c:53:e1:6b:37:46:ac:2c:5d:7d:ee:
de:bd:59:78:b9:2f:9e:ee:8c:a4:1b:df:34:4d:14:
aa:19:d6:48:8e:6c:af:65:47:22:72:fc:95:43:6d:
ee:c2:e1:56:2a:22:55:92:ad:1e:54:5f:5b:d9:2e:
a3:c0:8a:d9:1b:02:5c:82:dc:13:9f:e7:3b:b8:00:
0c:a7:67:f7:1d:c1:87:72:d1:87:e3:23:91:af:7e:
50:a7:5e:6a:bd:d7:df:ea:6b:70:fb:86:ac:19:c7:
1a:f8:9f:3e:ec:00:c2:18:92:e0:1f:b2:85:1d:df:
ec:59:f9:61:be:f6:81:2b:46:85:fd:1d:74:3a:54:
09:9c:33:b9:43:17:87:b8:f5:00:87:10:b5:29:b3:
ff:8d:7a:26:bd:ca:26:e6:6e:1d:1b:fe:9d:68:37:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AD:91:E9:02:A7:57:5C:BE:21:43:4B:CD:FF:CC:C2:89:4A:F3:1B
X509v3 Authority Key Identifier:
keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/LK2R6QKnV1y-IUNLzf_MwolK8xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.80.0/22
185.200.192.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:fa:61:cc:6d:72:42:bd:ee:b1:93:46:21:9b:eb:60:c0:0d:
35:2b:ab:b4:49:f3:c0:62:aa:50:14:ff:f9:ef:9f:df:ed:2b:
ab:a5:f1:18:5c:9d:5f:ce:0a:8b:d6:22:18:51:5e:20:75:01:
7e:2a:f2:60:2e:1d:86:a4:42:44:4d:bc:6c:91:f2:68:10:62:
bb:12:50:39:6c:53:b1:b5:31:e0:e5:9a:e3:44:e1:df:a6:03:
ff:28:52:90:a1:46:df:b8:1f:8f:01:64:be:bf:e6:6c:e6:93:
92:3d:57:0d:56:78:c1:5e:d9:6e:0f:6a:9f:e5:79:b7:77:90:
60:27:ba:46:4d:3e:2a:13:55:97:31:d8:3f:73:31:91:d9:a6:
5a:9c:cc:c0:7e:ab:e3:18:82:7d:31:a4:10:c3:5e:e0:96:b9:
80:a1:c5:a8:98:70:56:8c:1a:9c:c0:e1:47:14:0a:0d:46:16:
2f:e4:fd:b7:82:81:3e:cb:67:4e:1c:13:f7:0b:63:bd:a1:9a:
1e:95:7b:38:3c:cc:da:21:df:39:8b:f9:1e:66:7e:d3:7e:bf:
35:42:35:13:91:32:dd:16:a9:e5:fa:51:4e:f0:9d:f9:32:c8:
36:bd:e7:f5:26:92:59:a6:4f:bc:fc:f9:da:36:ba:1f:ac:1f:
7d:8f:74:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:23 2024 by rpki-client on console-ams.rpki-client.org