Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/4HJaFCp12N_OyUesZjun-Nj-ZgE.roa
File: 4HJaFCp12N_OyUesZjun-Nj-ZgE.roa (raw, json)
Hash identifier: zN0wtjJJwbRQtBPmuDj/eyB07SmcZzzSohWMjrn3F+s=
Subject key identifier: E0:72:5A:14:2A:75:D8:DF:CE:C9:47:AC:66:3B:A7:F8:D8:FE:66:01
Certificate issuer: /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial: 0188E82A668C0EB557FEBCF568EA3952F302
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/4HJaFCp12N_OyUesZjun-Nj-ZgE.roa
Signing time: Fri 23 Jun 2023 12:11:12 +0000
ROA not before: Fri 23 Jun 2023 12:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202867
IP address blocks: 185.152.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e8:2a:66:8c:0e:b5:57:fe:bc:f5:68:ea:39:52:f3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Validity
Not Before: Jun 23 12:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0725a142a75d8dfcec947ac663ba7f8d8fe6601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:83:36:df:0d:17:94:28:e6:d1:e6:12:86:e2:
a5:fe:57:74:61:0e:f3:c0:a9:6d:17:3c:68:9f:51:
23:a2:2b:70:04:0e:6f:00:50:b1:90:f8:7a:e7:b3:
9f:20:97:2c:c3:62:7e:df:65:45:e0:8c:49:37:38:
39:2b:36:0f:51:46:7b:8a:14:5f:c5:2e:68:0a:49:
19:6a:3d:fd:03:bf:19:75:10:47:fb:10:cb:3d:9e:
7e:bc:dd:ae:54:6a:83:9e:0c:36:66:98:44:b8:5d:
17:db:aa:c2:87:ac:bf:80:93:04:c3:c2:ce:ba:53:
45:2d:a3:81:bf:e9:16:f9:af:86:1b:4b:81:2a:6c:
01:f7:7f:8b:c7:cc:c8:cc:f5:78:5d:88:7e:d7:da:
0d:31:4b:bd:d4:74:5b:fc:58:04:23:5c:c5:3f:46:
62:b8:f2:7e:fa:55:dd:23:7a:3b:62:b7:16:26:b9:
2c:82:8e:1e:0d:71:2a:b3:41:35:98:f6:49:d0:8f:
27:13:cd:9c:cf:b0:15:b2:0d:01:98:73:a0:ae:ef:
e2:47:d9:ad:ec:6c:77:a6:dd:6f:b6:72:e0:47:3a:
77:bd:29:19:43:67:ad:53:cc:1c:36:e4:b3:36:0b:
0c:0d:37:69:a8:11:e4:0e:fe:c9:9a:23:be:a2:67:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:72:5A:14:2A:75:D8:DF:CE:C9:47:AC:66:3B:A7:F8:D8:FE:66:01
X509v3 Authority Key Identifier:
keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/4HJaFCp12N_OyUesZjun-Nj-ZgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.8.0/22
Signature Algorithm: sha256WithRSAEncryption
51:03:b1:89:2a:fc:02:d3:48:e3:9b:4c:c2:28:58:17:0c:ca:
fd:6b:22:ea:84:0c:ab:bf:76:b8:64:36:32:c0:99:ef:53:08:
e1:74:83:13:b4:be:89:f5:98:61:7b:6b:e4:b8:03:bf:a0:c1:
fd:33:49:32:9d:91:d0:53:43:f4:f1:cf:4c:b0:0f:ca:c1:e8:
36:bc:79:2b:ed:8f:b8:75:ad:cc:2a:1c:e2:db:55:81:a1:91:
75:bf:16:5a:4f:c0:b0:64:67:e7:9d:b3:32:24:f9:0b:b0:3e:
46:82:28:9d:be:0a:fe:7f:44:66:6a:68:e6:92:41:2b:e2:77:
d6:e7:87:fb:76:e5:0d:5f:61:3a:91:74:30:a6:e6:30:3d:ed:
08:19:e6:1d:b1:3a:c5:09:8e:a2:02:cb:64:dd:03:72:41:ae:
60:f0:d5:fa:ad:4e:dd:ab:19:40:b7:ea:6f:1d:50:d0:e1:88:
25:02:97:b3:41:b3:71:39:da:8f:89:df:73:50:8d:ce:41:8d:
a8:00:ac:9c:84:dc:5c:52:58:2d:eb:1e:1e:9a:7f:7b:1c:62:
7c:a5:c8:c8:cd:33:f0:6f:81:f3:3c:96:80:8e:c8:b9:8e:23:
65:b3:bb:f7:17:94:e7:c0:3b:e8:b0:e3:73:27:09:44:a4:9f:
dd:0b:7c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:18 2024 by rpki-client on console-ams.rpki-client.org