Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/dAan_sULfd-Citw7VklxmufKZX0.roa
File: dAan_sULfd-Citw7VklxmufKZX0.roa (raw, json)
Hash identifier: z3XWgsbtoNifQVP/pG2NQdmxMPP6ja6DLVK2/ZtQOrI=
Subject key identifier: 74:06:A7:FE:C5:0B:7D:DF:82:8A:DC:3B:56:49:71:9A:E7:CA:65:7D
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01856F1DD3D1356D2049CAE9048586218006
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/dAan_sULfd-Citw7VklxmufKZX0.roa
Signing time: Sun 01 Jan 2023 20:55:03 +0000
ROA not before: Sun 01 Jan 2023 20:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50629
IP address blocks: 185.222.217.0/24 maxlen: 24
2a09:0:14::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:d3:d1:35:6d:20:49:ca:e9:04:85:86:21:80:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 20:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7406a7fec50b7ddf828adc3b5649719ae7ca657d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:b9:a9:b9:2e:da:ce:48:b9:3e:f1:e3:f0:
99:06:30:65:dc:54:96:84:dd:74:90:c6:8b:dc:fc:
8d:2b:ba:32:26:e3:4e:b7:4e:45:5d:8e:45:06:f1:
ba:52:e4:09:88:e5:de:68:51:ba:27:3b:94:57:7c:
58:f3:60:a6:45:d0:76:0a:c2:cf:5c:ab:c2:b6:11:
d0:db:0d:6a:f7:79:6f:17:2f:05:92:54:f1:e1:15:
9b:ad:c6:7f:33:76:8e:7c:5a:04:72:7c:3e:b4:00:
cf:50:2d:5f:71:85:c6:44:4b:94:a1:5c:e8:80:89:
88:6d:93:73:01:cf:44:c0:3e:9f:d4:bd:44:13:6a:
b0:6b:82:8e:e0:c9:16:85:0e:88:58:4e:72:2b:17:
5c:dc:6b:8f:f5:46:16:7f:de:e6:b1:c1:09:32:6d:
4d:1a:02:f4:f1:96:5f:49:cc:b8:2c:34:f9:2f:26:
f0:00:88:09:4f:a5:b5:16:61:a7:dd:81:95:0d:61:
1e:61:cd:ea:09:a1:68:6d:82:07:db:ac:f5:57:b8:
4e:cd:91:a8:11:56:42:75:72:a4:ff:c2:0f:8b:aa:
a8:ed:79:d4:a0:70:94:a0:76:b4:95:12:7a:b9:44:
94:78:29:6b:36:aa:15:ec:f9:5b:ef:d5:49:bc:3e:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:06:A7:FE:C5:0B:7D:DF:82:8A:DC:3B:56:49:71:9A:E7:CA:65:7D
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/dAan_sULfd-Citw7VklxmufKZX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.217.0/24
IPv6:
2a09:0:14::/48
Signature Algorithm: sha256WithRSAEncryption
5f:2b:94:18:89:9a:e6:8e:5b:66:b3:39:21:09:5e:83:e4:0f:
e7:01:69:6c:87:7a:3d:b3:14:cb:5e:f3:f0:14:a4:ec:36:f7:
c3:87:cb:34:9b:e2:eb:d2:2d:37:ec:d0:bc:d7:ee:10:7c:ae:
37:48:30:b9:1e:b5:a6:ca:9c:f5:44:b9:94:09:84:85:81:a0:
52:87:01:b5:c7:13:63:aa:4b:09:03:22:f3:c4:08:0d:20:b0:
d4:73:ef:ea:bc:b9:cb:49:f4:c0:0c:88:8b:26:fa:42:fd:a4:
66:a4:cd:9b:27:bf:a5:07:44:e1:2d:2f:a9:f4:d6:ec:73:1c:
b0:20:c8:73:e8:8c:9e:20:50:e8:f2:c1:5c:db:5c:d9:6c:0a:
45:c4:72:83:05:42:4f:57:ce:c6:de:7a:e7:0b:d6:f7:87:6f:
ec:c9:75:e0:5a:22:ea:01:97:43:f0:c1:17:fe:62:59:99:18:
1c:5c:27:12:55:6a:52:10:ba:cd:c3:92:9f:a1:15:2a:e9:6d:
51:e3:53:40:6b:84:ab:ec:ce:98:dd:83:30:c5:11:c4:20:49:
7f:d3:e6:f4:c5:bf:59:e5:3a:79:b8:4b:1d:ed:a4:81:b5:2d:
f9:3c:5d:39:a7:b8:07:92:b7:dd:58:7f:83:ad:61:89:4f:f5:
e2:89:c6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org