Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/Od7eHkvwg6D0JQwNdOkKZjKEQuI.roa
File: Od7eHkvwg6D0JQwNdOkKZjKEQuI.roa (raw, json)
Hash identifier: 9Fu1DKdik3+xxYg/Ge4/S+S24qdKI7N9wrauayJ6NIY=
Subject key identifier: 39:DE:DE:1E:4B:F0:83:A0:F4:25:0C:0D:74:E9:0A:66:32:84:42:E2
Certificate issuer: /CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Certificate serial: 0185704BC919BD4D0C285006EB62B6E24C63
Authority key identifier: AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/Od7eHkvwg6D0JQwNdOkKZjKEQuI.roa
Signing time: Mon 02 Jan 2023 02:24:52 +0000
ROA not before: Mon 02 Jan 2023 02:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208887
IP address blocks: 185.242.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 28 Mar 2023 07:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:c9:19:bd:4d:0c:28:50:06:eb:62:b6:e2:4c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Validity
Not Before: Jan 2 02:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39dede1e4bf083a0f4250c0d74e90a66328442e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:88:1c:48:e9:d6:dc:db:39:8c:7a:2c:c0:ac:
fb:0b:5f:70:d1:b1:35:50:d1:bd:ce:db:c2:01:04:
e8:48:80:2e:91:d6:5c:8d:bb:5e:2c:7b:c1:dc:9f:
5b:1f:9e:cf:86:87:c3:cb:aa:6f:89:f2:16:3a:8b:
0a:43:41:d1:ed:f5:f8:0e:f1:1b:99:49:76:28:d8:
f3:5f:8f:3b:83:69:62:df:6f:76:6b:a3:a7:71:bf:
59:2c:a1:f7:66:7e:f2:1b:85:f5:61:85:7b:c6:23:
ff:95:0e:ce:33:9d:89:aa:b8:1d:9c:4e:2a:6a:d7:
8c:5e:c7:65:f2:27:f3:87:f7:8c:8a:d6:0e:7a:fe:
1e:19:c8:03:e7:a9:e1:b1:31:53:cc:9f:c6:0f:43:
6b:57:9d:12:56:c2:85:26:de:ec:d7:29:db:ab:32:
fe:46:83:98:66:c7:87:67:af:7d:36:2b:77:70:15:
1a:59:8c:50:23:f9:0b:da:e6:4e:f6:b4:02:aa:6f:
03:09:ce:fb:fd:39:fe:e8:3f:76:10:d2:dd:f9:0e:
cc:c9:64:aa:fd:94:cf:07:35:0c:39:72:3f:dc:00:
20:39:e8:95:ce:cd:d1:ed:4b:9c:1b:65:4a:0e:cf:
1d:83:e3:bc:bd:4a:58:72:99:75:a4:64:2b:5e:0b:
0b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DE:DE:1E:4B:F0:83:A0:F4:25:0C:0D:74:E9:0A:66:32:84:42:E2
X509v3 Authority Key Identifier:
keyid:AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/Od7eHkvwg6D0JQwNdOkKZjKEQuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.192.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:b7:e4:cd:6e:7c:e3:f0:69:38:cd:5d:33:b9:1a:93:73:0f:
3a:cb:61:c2:f7:de:d3:03:8a:67:5e:08:53:69:1b:32:d9:7d:
30:40:b2:0f:f5:a2:29:4e:39:73:53:c2:c2:07:2d:76:d3:23:
f5:ce:3e:fb:73:9f:11:55:f7:7a:c4:5b:be:08:f7:6c:c0:26:
c8:89:1a:c1:25:02:60:05:bb:c1:52:37:db:8e:6f:dc:f8:cf:
11:ef:24:82:87:de:29:54:91:0a:46:be:5f:e6:7d:e4:ea:a3:
ce:66:5e:98:24:2b:6c:50:4b:5a:e8:08:fd:c3:6c:ee:bd:04:
79:93:d4:3e:bd:93:f1:bd:c5:58:f5:7e:29:49:85:4b:17:cc:
23:e4:48:17:7a:57:03:85:80:f1:46:7f:28:68:14:5f:bd:f3:
96:d4:da:10:1a:a8:9c:42:60:c9:e1:80:b6:7a:7e:62:5e:21:
3f:8c:75:73:54:6f:e0:39:68:ad:d0:3f:67:87:c2:78:29:68:
66:08:55:ab:eb:85:b2:5e:ab:0c:84:1d:af:bc:89:1c:a0:31:
ac:28:bc:19:3c:bf:db:75:93:83:7b:1d:c0:d7:e1:07:d9:fd:
78:04:92:7d:79:76:a5:ad:df:87:d1:a3:41:e8:14:69:d1:8b:
c1:28:c5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:33 2024 by rpki-client on console-ams.rpki-client.org