Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/KoSEz-gUU8ZZ-SPOmd9W9XnX_mY.roa
File: KoSEz-gUU8ZZ-SPOmd9W9XnX_mY.roa (raw, json)
Hash identifier: pp2Ik4Xkx1hCNzRctcQWZPA6+qWtSW2FPQBVcm/VPo4=
Subject key identifier: 2A:84:84:CF:E8:14:53:C6:59:F9:23:CE:99:DF:56:F5:79:D7:FE:66
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 01856D6F8E8AD21315E4D1522EFECD6B0163
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/KoSEz-gUU8ZZ-SPOmd9W9XnX_mY.roa
Signing time: Sun 01 Jan 2023 13:05:05 +0000
ROA not before: Sun 01 Jan 2023 13:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8757
IP address blocks: 185.146.124.0/22 maxlen: 24
212.58.128.0/19 maxlen: 24
2a07:7b80::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:8e:8a:d2:13:15:e4:d1:52:2e:fe:cd:6b:01:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: Jan 1 13:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a8484cfe81453c659f923ce99df56f579d7fe66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:cd:0c:a7:3b:27:b4:e4:15:1c:0d:39:5c:
ea:f7:be:51:70:47:cb:86:1c:a3:3b:63:2b:89:0d:
f9:f7:5c:0c:3e:68:e6:8a:26:cb:e1:72:3a:65:0f:
66:02:39:d2:70:57:8a:e4:bd:8f:91:9b:9f:db:ea:
84:72:17:68:fd:b6:8a:90:b7:0d:4c:e4:55:22:ba:
4d:76:da:75:8a:03:a6:83:a8:98:a0:ea:80:0f:8f:
26:1b:7d:46:62:83:8e:48:3d:6f:3d:38:c2:8e:dc:
8e:cd:51:7e:b6:71:b8:59:02:50:a3:ea:3b:ed:78:
20:74:dd:a6:7e:d7:bb:b0:a0:d1:8f:f9:3c:7d:db:
1f:75:b8:81:a2:af:54:91:e4:c3:fd:23:9a:ca:f6:
d9:cc:a3:47:9f:97:c5:fd:90:14:fe:70:0f:67:ad:
95:61:53:bf:a7:3b:03:ff:b4:9f:75:d5:d7:12:d3:
d2:01:6c:40:7b:58:5a:c0:95:e4:ff:2a:00:9b:7c:
4e:ad:cd:1e:49:5a:48:c5:99:8a:10:08:4a:52:a7:
dc:c9:13:f7:1a:3f:7d:68:a0:de:04:dc:ca:f3:74:
e2:bb:f5:7d:f0:c1:b4:a5:1a:66:81:22:e2:d4:43:
c8:ae:02:c0:be:5a:5c:d9:ae:04:41:1e:2f:7f:45:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:84:84:CF:E8:14:53:C6:59:F9:23:CE:99:DF:56:F5:79:D7:FE:66
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/KoSEz-gUU8ZZ-SPOmd9W9XnX_mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.124.0/22
212.58.128.0/19
IPv6:
2a07:7b80::/29
Signature Algorithm: sha256WithRSAEncryption
18:87:36:43:7e:7b:c8:7b:b7:21:56:bb:12:88:11:d0:f7:7a:
62:a3:47:cf:a3:b1:00:56:d1:cb:8a:24:00:fd:85:ff:85:5a:
d3:0a:dd:04:1e:f9:c7:b1:a0:4c:d5:23:47:6c:72:b3:af:2e:
c2:07:3c:29:b9:a1:39:64:b3:7f:81:76:84:4f:b5:73:87:9c:
c8:03:78:4d:4c:cf:c8:a9:5f:89:00:3c:68:7a:cd:50:ec:cc:
ac:85:db:ea:d8:4a:33:bb:8e:81:7e:cc:de:38:52:42:8d:3a:
66:d6:27:5b:a6:cf:05:8e:a0:be:30:39:e1:80:92:f4:51:73:
c1:c5:7b:b6:6f:15:e0:01:6a:0c:90:18:47:76:b4:a8:d2:66:
e4:b2:f2:06:b5:80:13:da:45:63:b7:62:4b:4d:2d:5b:ad:57:
b4:c9:6d:fd:87:be:46:56:30:8a:a8:53:e4:33:65:65:f6:cf:
bb:e7:20:2c:a2:bf:4f:50:d3:cf:cb:71:23:41:a9:2a:05:c6:
7f:d5:3c:8e:3d:db:3b:a6:fa:40:57:aa:81:61:e6:3e:30:70:
84:c5:ae:02:e7:73:95:59:f8:3c:01:7e:79:45:32:70:fa:b4:
2f:50:fd:c1:6e:14:47:24:4a:b3:e2:21:6d:4e:11:9f:03:cf:
77:c4:56:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:42 2024 by rpki-client on console-fra.rpki-client.org