Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/j_1SdqZF-gmRtajodgiDQzcSLiE.roa
File: j_1SdqZF-gmRtajodgiDQzcSLiE.roa (raw, json)
Hash identifier: KcjPnHGdGJwCWl578taMPdHLebSwfGHi4jeJurwuWVo=
Subject key identifier: 8F:FD:52:76:A6:45:FA:09:91:B5:A8:E8:76:08:83:43:37:12:2E:21
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 0185715E88600197D9F5556B0AE3193419C7
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/j_1SdqZF-gmRtajodgiDQzcSLiE.roa
Signing time: Mon 02 Jan 2023 07:24:58 +0000
ROA not before: Mon 02 Jan 2023 07:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203402
IP address blocks: 185.134.116.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:88:60:01:97:d9:f5:55:6b:0a:e3:19:34:19:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Jan 2 07:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ffd5276a645fa0991b5a8e87608834337122e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f5:93:27:fb:0a:36:21:bc:01:c8:86:21:b0:
0e:77:86:57:7f:11:b0:a9:6d:ca:fb:fe:39:62:9d:
50:73:b7:47:fc:66:4a:2e:8f:b2:a1:0c:a6:ac:fe:
17:e4:04:f7:47:27:8d:c5:52:13:ea:00:ac:08:10:
6e:58:d0:0c:61:2d:8b:11:54:77:cc:fe:2d:6d:1d:
81:9a:30:fb:b9:73:c1:d0:29:35:47:d0:e6:49:a3:
44:4a:9f:a5:3e:c6:3c:25:c3:e5:88:97:be:fb:e7:
fb:47:d3:0f:e5:3c:46:a1:48:b9:a1:c8:be:a8:d1:
ae:f8:94:ca:24:9e:f4:75:0d:21:ee:26:a5:c8:26:
19:c8:97:a6:31:d4:9a:e1:51:a0:ff:b3:1c:37:14:
c7:75:74:a4:dc:c2:8b:7b:f6:6b:0f:22:3e:76:1a:
ff:60:47:12:8e:8c:ad:bd:36:63:f6:98:37:fa:80:
c1:9f:16:ba:fa:8e:b1:0a:30:92:69:9e:38:0e:90:
9d:dd:29:9a:71:b4:23:c9:81:42:1b:91:fe:34:0f:
61:21:d6:70:8c:2f:d9:f6:15:7b:14:70:74:3b:e7:
46:ca:05:a2:2f:61:ae:a3:a9:97:26:e2:ee:9a:d3:
b9:ce:af:8e:06:5b:aa:aa:f3:8f:db:12:90:b2:ed:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FD:52:76:A6:45:FA:09:91:B5:A8:E8:76:08:83:43:37:12:2E:21
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/j_1SdqZF-gmRtajodgiDQzcSLiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.116.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:e0:13:88:af:b2:15:8c:ac:c5:ae:6b:f2:7d:ee:c5:66:05:
59:cc:3f:30:d3:50:e1:22:bb:64:e1:5b:64:55:bf:8f:ba:80:
67:cf:60:ec:09:7b:e8:b2:bc:a6:17:97:c6:98:23:5d:3b:69:
63:15:06:b1:ff:95:75:e3:72:2c:96:88:21:34:c1:a9:6c:c3:
b9:c7:fa:08:8d:31:f8:27:32:8f:2d:2a:0d:0d:3c:87:f4:e7:
9f:3f:e0:83:44:bd:e2:f4:e2:e9:b5:d9:d7:6d:3b:60:78:16:
83:e7:65:97:50:b1:43:92:1a:b6:20:a6:44:dd:6a:b2:56:e2:
a4:1d:64:fd:79:0a:c8:7b:19:c2:1f:2d:91:75:b7:b8:80:d0:
de:40:40:de:65:89:ac:9e:0d:83:db:af:9e:f0:e4:e7:d6:dc:
72:c1:7b:de:e3:61:8b:30:0d:6e:48:5e:05:3e:14:9e:4f:4e:
b4:4b:84:e7:78:c5:13:ab:32:69:78:ea:bf:15:c6:7c:53:da:
7a:13:15:a9:36:6b:c5:20:c2:14:86:60:62:aa:8a:23:54:38:
bc:ce:e0:bb:74:67:ca:e4:2d:2b:31:b4:6c:e4:26:cb:5c:bc:
bd:97:44:3c:11:68:07:c4:80:55:08:4b:08:ff:35:71:8a:95:
d5:f9:b6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:04 2024 by rpki-client on console-ams.rpki-client.org