Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/pu3iumaHEnpLHmDjS-43tylmrKI.roa
File: pu3iumaHEnpLHmDjS-43tylmrKI.roa (raw, json)
Hash identifier: pDxT49ruLXr0ZTljmsvadYYGrY0Dgc6Fa0yFvAr+nfs=
Subject key identifier: A6:ED:E2:BA:66:87:12:7A:4B:1E:60:E3:4B:EE:37:B7:29:66:AC:A2
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 01856F0B617B8A007C8395435AD7E8DE274D
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/pu3iumaHEnpLHmDjS-43tylmrKI.roa
Signing time: Sun 01 Jan 2023 20:34:54 +0000
ROA not before: Sun 01 Jan 2023 20:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39430
IP address blocks: 185.236.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:61:7b:8a:00:7c:83:95:43:5a:d7:e8:de:27:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Jan 1 20:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6ede2ba6687127a4b1e60e34bee37b72966aca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:84:f4:87:09:2d:b0:00:ae:09:c9:ff:59:27:
f1:f5:27:5a:5b:71:c6:f7:57:d0:d9:94:30:73:7f:
1b:e0:ad:55:98:49:a6:ee:35:e4:ee:94:2d:21:4b:
48:39:55:97:8f:37:ef:d6:dd:e5:15:a0:0e:6a:10:
9c:20:3e:63:4c:9d:c2:5b:bb:ab:1c:e0:ed:f6:ab:
cc:e4:9d:f3:6d:64:27:6e:a4:20:4e:d0:eb:f8:89:
1f:bf:91:92:ed:a4:0c:2a:37:36:ef:f4:a9:bc:c2:
3c:4b:df:90:20:bd:88:4f:73:31:c7:fe:13:07:fe:
e8:9a:40:1a:93:c4:b2:88:d4:cb:7c:4f:f9:a8:10:
57:26:bf:a1:ec:1f:1f:86:1f:f1:fd:51:90:af:db:
26:e9:3b:4e:6d:c9:ea:15:28:a5:9e:83:2f:ed:24:
5c:8c:dd:8f:4d:36:52:18:f2:18:1f:23:39:b3:df:
d9:7e:58:93:a3:90:e4:e2:70:56:84:03:26:3a:3a:
72:ec:b5:64:cf:04:41:4c:31:60:e6:32:cd:2c:75:
7b:51:2e:3a:8a:9b:a3:7a:99:4d:b9:88:f3:7d:76:
18:87:d4:09:57:65:99:bc:e6:cd:6a:b1:27:0f:77:
46:5e:d7:c4:b0:cf:a9:ad:1c:4c:e8:cb:cc:94:f1:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:ED:E2:BA:66:87:12:7A:4B:1E:60:E3:4B:EE:37:B7:29:66:AC:A2
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/pu3iumaHEnpLHmDjS-43tylmrKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.220.0/22
Signature Algorithm: sha256WithRSAEncryption
79:79:b1:10:36:6e:95:d8:97:7f:19:e6:06:99:4b:b3:0b:87:
be:18:f6:b9:a5:a0:4d:fc:36:2d:dd:28:e6:fb:a5:6b:6b:57:
f2:48:79:05:30:89:92:ce:83:c6:0c:48:62:d1:61:33:e9:2f:
52:3c:d0:7b:aa:4a:5d:73:97:16:75:84:f4:48:12:55:e4:7c:
a0:54:5a:6d:54:a3:6a:1f:43:d3:e3:b0:fb:2d:34:c7:54:12:
38:4b:d1:9a:d6:f1:4e:b5:a1:52:fa:6e:98:51:81:b5:cb:dc:
88:14:4b:8c:26:14:94:5b:41:42:6b:1b:1d:95:04:f1:cd:d3:
53:8f:91:2a:04:e8:e9:69:4c:7d:88:37:f0:c4:97:4e:69:3e:
09:27:0b:51:af:a9:a2:c8:df:28:50:ac:85:db:e8:39:dd:3e:
20:ec:ad:1d:bb:3d:ca:7a:d2:d1:16:c7:94:cc:6a:f2:6f:ea:
81:63:9a:ae:5d:dd:2d:5f:27:7c:e3:02:ba:4d:4c:5c:0f:81:
33:98:e3:f0:67:4b:f7:23:90:73:9c:e4:28:d4:01:68:77:f0:
61:f3:93:b2:0e:ee:d6:13:81:64:03:c6:de:7d:25:15:f0:37:
11:45:b7:d9:b7:77:bc:a8:10:7e:8a:0d:ff:df:93:88:a6:a1:
e6:6d:a9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:27 2024 by rpki-client on console-ams.rpki-client.org