Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/Sa6cBhe2KUEa82Q92JbBOAnYVaI.roa
File: Sa6cBhe2KUEa82Q92JbBOAnYVaI.roa (raw, json)
Hash identifier: 1g5XYpuVpPjSxaiAJnbS2cRWTdVFgb7RKMTv6ZRuz9U=
Subject key identifier: 49:AE:9C:06:17:B6:29:41:1A:F3:64:3D:D8:96:C1:38:09:D8:55:A2
Certificate issuer: /CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Certificate serial: 0185708CD013C928E3515AAA73CBFE76012C
Authority key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/Sa6cBhe2KUEa82Q92JbBOAnYVaI.roa
Signing time: Mon 02 Jan 2023 03:35:54 +0000
ROA not before: Mon 02 Jan 2023 03:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 185.33.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d0:13:c9:28:e3:51:5a:aa:73:cb:fe:76:01:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Validity
Not Before: Jan 2 03:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49ae9c0617b629411af3643dd896c13809d855a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:97:25:28:04:60:33:53:89:73:d3:dc:58:
95:fc:40:d1:83:00:e3:2a:78:77:87:9a:4f:f6:90:
c4:e7:fb:cd:2c:26:7c:bb:e4:6c:fa:57:c4:60:e6:
03:ac:15:d2:ca:32:fa:45:e1:f5:d7:15:48:e5:cb:
70:f1:2e:29:98:99:79:c4:3e:86:53:d1:63:49:61:
6d:58:4d:c9:22:5e:5a:40:11:91:85:3c:ef:87:a9:
f7:b6:21:8a:9b:5a:50:2f:91:c6:a8:67:b4:1d:aa:
c2:d3:1f:95:f8:f2:98:e3:1f:d7:7f:46:64:05:b2:
68:66:b8:99:09:85:dc:26:8e:db:14:21:f9:20:00:
e0:b1:c7:ca:44:38:17:01:96:2b:62:50:51:ce:9e:
40:2a:31:c1:22:db:41:03:1a:94:d0:91:c3:7e:7f:
8f:2c:62:de:ac:91:f8:2b:cd:5c:a8:60:62:c6:a8:
d9:f7:18:ff:5b:4c:68:30:99:9a:b1:95:b7:7a:a5:
d9:98:ad:11:e8:3d:20:29:bd:c4:a2:aa:18:dc:38:
e1:d8:85:3f:ac:55:30:20:10:46:66:fa:f9:f3:26:
9a:ae:89:54:26:5e:e0:e5:23:ab:51:65:a1:79:93:
1d:e4:db:3d:92:fd:43:85:14:2f:4b:d3:5b:6b:d0:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AE:9C:06:17:B6:29:41:1A:F3:64:3D:D8:96:C1:38:09:D8:55:A2
X509v3 Authority Key Identifier:
keyid:CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/Sa6cBhe2KUEa82Q92JbBOAnYVaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:bc:ed:30:51:db:89:9f:00:ef:c9:38:71:d6:86:09:52:1d:
e5:a4:a0:da:57:e7:fe:b9:08:ce:ea:21:35:29:47:2f:73:6c:
93:ac:41:e1:4d:ba:cc:67:08:ad:32:94:cf:4b:82:f4:e1:71:
52:13:d9:b7:cf:1d:6d:eb:e3:5f:c5:4b:13:26:1f:d5:71:aa:
ba:fb:2a:7b:42:5d:2e:46:0e:48:7b:de:e5:38:54:c4:19:02:
7f:ed:ac:52:37:08:85:d9:55:ec:20:5c:bc:e1:43:3a:83:0e:
b6:85:83:85:5d:0c:88:24:5e:83:69:52:10:05:75:40:b4:d3:
42:d4:5f:6e:de:5b:c3:a6:6b:45:39:42:1d:b5:6b:83:fa:20:
42:78:f6:9f:28:bc:9d:3f:d8:ab:7a:9d:59:5c:7b:04:bd:f4:
ff:fb:a0:b0:2e:0a:20:54:52:27:af:1f:1a:8e:09:b7:90:1b:
12:8e:89:6d:65:8c:8e:2e:7a:74:a8:48:70:92:a3:87:5c:ad:
fc:20:14:cb:89:18:f7:ab:78:3c:e4:4d:cc:68:f0:4d:dc:e3:
b6:e2:94:3b:ac:a2:7b:11:b8:a6:80:24:be:bd:4d:3d:11:6c:
97:77:6f:24:4e:59:62:8b:49:e8:45:31:11:1a:d6:ef:1c:6f:
21:0e:9b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:31 2024 by rpki-client on console-ams.rpki-client.org