Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/SWlPGeDvk-1O4bBb8XSFFg9ic-w.roa
File: SWlPGeDvk-1O4bBb8XSFFg9ic-w.roa (raw, json)
Hash identifier: Jup51usS4c6VVOwncRTYSqS6Ln8T8IFNay+8Y5H6g/o=
Subject key identifier: 49:69:4F:19:E0:EF:93:ED:4E:E1:B0:5B:F1:74:85:16:0F:62:73:EC
Certificate issuer: /CN=86842274b3788b80b2fed916db3880fe08c37528
Certificate serial: 0185720C5DFCB2776475E02C5A7E1B864B77
Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/SWlPGeDvk-1O4bBb8XSFFg9ic-w.roa
Signing time: Mon 02 Jan 2023 10:34:51 +0000
ROA not before: Mon 02 Jan 2023 10:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58088
IP address blocks: 85.116.140.0/22 maxlen: 22
185.184.136.0/22 maxlen: 22
2a0b:3580::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:5d:fc:b2:77:64:75:e0:2c:5a:7e:1b:86:4b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528
Validity
Not Before: Jan 2 10:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49694f19e0ef93ed4ee1b05bf17485160f6273ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a8:e2:31:c5:5f:3f:66:3c:37:35:dc:ea:ec:
4d:d2:3a:07:bb:57:8b:9f:d5:16:ce:18:4d:55:7d:
5b:4b:13:fb:0e:f7:19:c6:00:0a:3b:96:ce:ea:85:
08:88:b6:78:2b:20:ed:53:c1:e2:88:bf:31:07:61:
7c:27:78:25:22:8e:8d:1e:b9:b3:a0:f0:8e:5b:21:
41:1a:95:e6:a5:84:4f:49:7f:bd:17:6a:7c:57:90:
3f:cf:58:e7:41:ad:2f:18:ad:eb:ca:3f:e4:67:a5:
dc:de:8e:f6:3f:e8:e1:95:f4:9b:92:58:33:8f:74:
a1:6e:e4:b7:ea:ef:bd:39:ec:88:0d:39:89:66:55:
52:f0:e0:87:5a:6d:93:dd:95:b2:e0:31:41:69:ea:
bf:10:6d:70:40:1d:bc:4e:79:0c:34:bb:65:de:59:
3f:09:29:09:92:5f:f8:16:2d:58:99:ae:67:a5:ba:
80:16:99:1e:de:6d:4c:1a:cb:b4:15:a4:c4:42:85:
69:67:22:88:4d:e5:e9:f7:3f:3c:65:01:39:6c:13:
f7:52:4a:e6:ba:9f:a7:14:19:f8:ff:2c:20:bc:b4:
2a:34:5b:4e:10:72:b1:6e:f3:76:72:e7:7c:48:c7:
70:a3:2d:1b:09:8f:4a:a2:ac:cc:fa:a8:75:15:65:
d2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:69:4F:19:E0:EF:93:ED:4E:E1:B0:5B:F1:74:85:16:0F:62:73:EC
X509v3 Authority Key Identifier:
keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/SWlPGeDvk-1O4bBb8XSFFg9ic-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.116.140.0/22
185.184.136.0/22
IPv6:
2a0b:3580::/29
Signature Algorithm: sha256WithRSAEncryption
9d:da:a1:25:18:70:5a:4f:9e:2c:cf:02:90:34:b4:67:cd:64:
c5:82:28:91:69:81:c4:90:27:ee:60:fb:b4:f0:98:d3:01:6c:
21:e0:41:7c:76:87:eb:f7:97:f7:cc:e4:cf:26:7a:eb:44:05:
f2:84:ef:d2:9d:5b:07:91:ff:ca:63:91:40:46:74:7e:54:b8:
42:0e:6a:0d:79:2a:53:35:0c:9a:0c:32:c1:b6:80:a7:8a:58:
f6:2f:e0:cd:18:09:75:b0:84:03:7a:e2:19:42:ae:9a:ca:e5:
67:2e:83:00:28:8d:ed:00:99:ed:36:06:6f:31:3b:13:21:96:
86:31:5a:ad:ab:42:ec:2c:8e:6c:95:d6:ba:ec:1a:e9:3f:d5:
5f:a2:b1:eb:92:1b:b6:de:0b:75:43:08:42:34:eb:9b:d4:a6:
fb:86:fc:11:a8:83:03:c8:16:f3:1d:64:8e:5b:e0:18:23:1e:
bb:ca:2b:f7:57:2f:66:21:cf:89:96:0c:92:86:d0:b2:43:ad:
8b:c3:c9:bc:f2:92:b1:b1:67:a1:dc:e1:f8:dc:85:e1:93:37:
3c:9b:b6:80:04:dd:ce:a4:16:26:c7:72:f9:b4:07:a3:46:c5:
ff:af:f4:53:0d:e2:87:f0:a4:ac:8c:40:40:4d:d9:ce:7f:60:
78:3f:2c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:38 2024 by rpki-client on console-ams.rpki-client.org