Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/L8RtpkS2duASQNWZz_meNQMtyH0.roa
File: L8RtpkS2duASQNWZz_meNQMtyH0.roa (raw, json)
Hash identifier: r45o8k4icFUnCfg6zhDUTglG/wNOmIEn8bnALABm9A4=
Subject key identifier: 2F:C4:6D:A6:44:B6:76:E0:12:40:D5:99:CF:F9:9E:35:03:2D:C8:7D
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 0185704BE3E0A11D166554F3FD4BF6D7FA6D
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/L8RtpkS2duASQNWZz_meNQMtyH0.roa
Signing time: Mon 02 Jan 2023 02:24:59 +0000
ROA not before: Mon 02 Jan 2023 02:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8769
IP address blocks: 185.121.28.0/22 maxlen: 22
185.40.184.0/22 maxlen: 22
185.254.132.0/22 maxlen: 22
2a06:9c40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:e3:e0:a1:1d:16:65:54:f3:fd:4b:f6:d7:fa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: Jan 2 02:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fc46da644b676e01240d599cff99e35032dc87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:70:12:0e:a0:1c:d9:4f:af:97:7d:24:50:
58:ea:99:42:74:a2:7f:9c:6e:ec:2b:ec:f3:8b:d1:
f4:1d:9b:65:b8:0e:ab:61:0c:7d:38:80:a0:96:7c:
9f:4d:b3:b2:a9:ee:21:4a:bf:71:da:06:d9:ae:59:
6f:27:20:88:cc:a9:99:04:05:62:1e:cd:dd:3b:f1:
6e:67:a1:12:b8:65:17:a0:f2:3c:f6:71:46:c8:ee:
ff:a0:c6:50:7a:b0:69:9f:6f:0f:84:95:6f:32:71:
71:af:65:65:5d:9b:c7:c3:d9:67:ad:ff:ef:1b:39:
8c:cc:ed:e0:08:02:35:fe:9b:82:23:dd:27:c8:12:
4c:4e:59:46:ae:cb:e4:e0:38:78:69:20:0a:7e:d9:
94:16:fd:23:ed:cf:52:83:02:7f:cf:e9:84:c2:d4:
ae:72:b5:bc:71:5b:39:28:3a:15:b2:e7:e8:31:d8:
49:1b:d4:22:7e:fc:6e:ba:ae:c9:7b:ba:bc:1b:c1:
a8:b6:e7:f0:f2:c9:67:38:8c:ac:8a:4a:62:7b:c3:
2d:a4:53:49:fa:6e:74:d3:d8:1c:fa:0c:74:a8:1b:
ce:da:14:f4:03:bc:98:d8:d0:7b:c7:b3:7d:4b:08:
b3:90:f2:2c:43:09:25:6b:1d:9c:e0:a7:91:f1:01:
72:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C4:6D:A6:44:B6:76:E0:12:40:D5:99:CF:F9:9E:35:03:2D:C8:7D
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/L8RtpkS2duASQNWZz_meNQMtyH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.184.0/22
185.121.28.0/22
185.254.132.0/22
IPv6:
2a06:9c40::/29
Signature Algorithm: sha256WithRSAEncryption
62:6f:ff:c2:ed:43:26:63:8c:7d:f3:21:e0:51:4e:2b:10:75:
5c:26:86:c8:3f:be:27:19:48:ea:f2:15:c6:72:42:92:40:61:
40:36:82:bc:cf:93:a8:c9:0f:fd:59:e1:08:36:df:49:bd:72:
2f:2c:9a:41:43:7d:cd:8e:01:75:dd:33:1e:5d:f2:8c:41:74:
5c:a3:93:e3:58:36:0d:5d:b9:8d:8c:11:d7:6c:93:a3:24:6c:
27:bb:b6:c2:15:8e:0e:30:1c:19:10:d1:bf:99:04:65:88:21:
e6:fd:5f:51:2f:58:fa:ee:56:9d:f2:12:ad:9d:71:8e:4a:f1:
5e:20:3e:7c:55:c5:ec:0b:a8:f3:14:6f:13:76:25:d6:bf:5c:
d6:30:33:71:6a:9e:d5:df:8e:79:0b:0f:a3:12:cb:b6:71:c5:
c6:d9:11:5c:95:9d:c6:ec:f0:d0:a7:d3:eb:9e:59:d1:2d:19:
03:32:98:47:2b:f1:51:e3:92:4d:49:17:4f:11:80:05:69:c3:
ff:32:d7:1c:ad:70:01:e5:ad:37:b8:89:a3:d2:0a:b6:53:5f:
f6:d7:ef:47:c7:7a:23:45:c1:40:10:69:fa:7d:91:9e:cb:d0:
f7:c0:c1:d1:56:be:91:f7:87:38:a2:b2:70:7b:76:28:5d:f8:
ac:ab:19:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:02 2024 by rpki-client on console-ams.rpki-client.org