Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/2dKHycNecXlOq-7MNVgBibiavtM.roa
File: 2dKHycNecXlOq-7MNVgBibiavtM.roa (raw, json)
Hash identifier: RMkMfklBThbPbkRgpNhjP+BiknhPSOTcT3Fzii3yUw8=
Subject key identifier: D9:D2:87:C9:C3:5E:71:79:4E:AB:EE:CC:35:58:01:89:B8:9A:BE:D3
Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial: 018570CBF903D6034CCB52B3577FB80B39D1
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/2dKHycNecXlOq-7MNVgBibiavtM.roa
Signing time: Mon 02 Jan 2023 04:44:53 +0000
ROA not before: Mon 02 Jan 2023 04:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9063
IP address blocks: 185.13.28.0/22 maxlen: 22
2a03:9b40::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:f9:03:d6:03:4c:cb:52:b3:57:7f:b8:0b:39:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
Validity
Not Before: Jan 2 04:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9d287c9c35e71794eabeecc35580189b89abed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:bf:78:30:3c:9a:db:e2:54:bf:f3:d9:a8:
3e:86:48:55:b2:3f:95:2e:56:62:d0:7a:69:e0:95:
25:3a:99:ac:f9:0a:d7:a7:6b:d0:0d:05:2d:3c:f2:
0c:77:a2:7a:44:41:f3:54:0b:92:ad:c4:af:aa:99:
85:f9:ee:d8:4c:00:44:0c:8c:5e:03:e8:4a:0e:d2:
d9:3e:09:5e:12:c8:21:e4:7f:29:da:b6:4c:93:41:
20:0e:7b:16:6d:d7:66:36:ac:fe:00:5a:15:9a:ad:
f3:91:b3:bc:a9:36:61:0a:1e:8f:d9:ff:8a:1e:69:
0b:75:6e:41:af:1d:1a:5f:9e:1a:6e:81:c7:e8:4d:
a6:3a:a6:bc:74:0d:b1:08:5e:f3:9b:5d:38:c8:29:
d6:de:d5:fe:34:68:9c:7c:3e:4a:88:23:65:24:8d:
12:22:7f:ca:ae:ce:bb:56:8c:6f:57:42:9b:19:02:
97:3e:91:3f:60:07:79:a0:82:2c:5b:4e:fa:0e:2d:
93:87:0e:ad:25:d2:9f:30:e7:f2:3e:a5:9e:9f:fd:
0b:26:ad:81:af:f8:1d:d9:5f:16:e0:52:4d:09:dd:
25:d9:93:b1:98:fd:ed:b6:87:50:87:20:92:94:bc:
4b:e3:07:ef:a6:f5:90:50:97:e6:85:74:a4:3e:f3:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D2:87:C9:C3:5E:71:79:4E:AB:EE:CC:35:58:01:89:B8:9A:BE:D3
X509v3 Authority Key Identifier:
keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/2dKHycNecXlOq-7MNVgBibiavtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.28.0/22
IPv6:
2a03:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
54:9b:ed:4f:c4:58:e0:0f:e6:5d:24:1b:7b:c3:7c:13:49:18:
f1:e2:bc:53:2d:27:70:5a:8f:77:30:da:a6:93:b6:91:63:e4:
e2:4f:48:bf:6d:f8:c0:31:fb:46:c3:65:08:ea:ac:c0:f3:f0:
e9:50:3b:36:47:a7:1a:9e:7c:6c:27:31:cd:d4:74:98:b1:74:
37:6b:3a:be:8f:e3:74:6c:26:31:8d:4f:33:49:4e:f8:76:b9:
27:10:7c:e0:eb:0b:d5:53:e8:26:64:68:c7:ba:cd:d9:bc:d1:
a6:06:85:fc:55:9f:75:ae:30:ee:9c:e1:df:b4:60:31:cd:0c:
76:bf:ee:7c:7a:87:b3:a4:47:22:40:eb:12:ef:ba:11:39:42:
29:2b:4c:6b:92:e6:de:c6:7c:de:d5:50:13:94:be:38:60:19:
f2:14:9d:d4:c9:08:58:6d:23:5f:61:df:12:4f:a5:d8:1c:6a:
62:a4:d5:d5:b8:fa:fd:c3:a9:41:2d:96:6b:5f:de:e8:a8:d0:
3d:79:60:62:8f:f3:94:42:73:e9:0f:02:67:8c:06:2e:32:a8:
ce:42:6d:d9:62:18:6a:0f:38:64:d7:ff:ac:0b:fd:ea:4e:66:
b0:ca:7e:20:7b:9e:f2:28:d2:43:20:33:30:51:57:b0:48:fe:
2f:2d:c4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:52 2024 by rpki-client on console-ams.rpki-client.org