Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/jqOxsrrz2t4szv6_rD-RITwb0cc.roa
File: jqOxsrrz2t4szv6_rD-RITwb0cc.roa (raw, json)
Hash identifier: ysSOhCsKBmgdWqlIYSWBk1gFerq4jGaKH8gLeTDgzDY=
Subject key identifier: 8E:A3:B1:B2:BA:F3:DA:DE:2C:CE:FE:BF:AC:3F:91:21:3C:1B:D1:C7
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01856ED4C9E3BD1CC0950280412387B75E28
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/jqOxsrrz2t4szv6_rD-RITwb0cc.roa
Signing time: Sun 01 Jan 2023 19:35:17 +0000
ROA not before: Sun 01 Jan 2023 19:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3365
IP address blocks: 185.226.204.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Sep 2023 17:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c9:e3:bd:1c:c0:95:02:80:41:23:87:b7:5e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 19:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ea3b1b2baf3dade2ccefebfac3f91213c1bd1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:e7:17:c9:c6:19:9e:cf:2e:6d:ab:23:24:
f5:e1:c6:25:91:fc:f8:eb:64:98:21:f9:2a:b4:3f:
26:f1:be:18:45:0f:16:9a:27:94:7d:5f:8e:0d:12:
7a:97:e2:0f:c5:2f:bd:5f:ef:b1:48:5c:71:27:08:
d5:6a:f7:3f:5b:fd:8e:de:2d:ce:ec:10:24:7f:31:
8a:29:44:66:a0:66:0b:fa:a1:c1:55:36:3e:b6:4a:
47:25:fa:24:21:15:62:b4:6a:74:b9:13:14:1c:0a:
a4:6a:d2:00:2c:69:83:3f:7b:26:00:a7:db:62:7e:
5f:77:8f:57:32:d4:62:1b:e7:52:c4:d8:f2:ba:a6:
52:23:fa:df:c1:ab:52:1c:7d:3b:4a:6b:63:af:31:
7a:75:a9:3d:0e:15:b9:de:56:86:d5:13:0c:07:27:
45:7c:de:ac:f5:87:8c:38:91:58:0b:31:89:16:37:
66:b9:f0:ff:7d:69:8a:e0:c2:b1:dd:fc:50:cd:aa:
f9:55:e8:ee:35:70:96:a7:78:de:b5:60:df:71:94:
32:00:7a:13:f5:67:96:a0:ef:cb:ab:91:75:6d:34:
36:11:3e:bd:9f:f3:fd:f9:d1:ad:62:63:0a:6a:3c:
a7:0e:5b:a2:9f:02:b7:b6:6d:f7:8c:0a:56:43:fd:
72:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A3:B1:B2:BA:F3:DA:DE:2C:CE:FE:BF:AC:3F:91:21:3C:1B:D1:C7
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/jqOxsrrz2t4szv6_rD-RITwb0cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.204.0/22
Signature Algorithm: sha256WithRSAEncryption
28:3b:46:5c:2b:97:f6:c7:e1:01:ca:40:c2:92:e8:b6:a7:23:
8a:22:f2:e8:fe:26:11:6d:47:62:10:fa:3b:e3:40:0d:5d:cd:
40:a9:d9:4b:18:42:41:f3:49:47:c7:95:a9:d3:9b:06:72:dd:
63:cf:02:a6:71:89:b1:1d:da:66:58:48:39:58:8a:0e:af:90:
c6:e9:7b:82:02:31:87:7f:c6:61:be:ed:d9:6e:82:32:3b:a0:
b0:6b:3e:05:47:22:da:ee:69:18:e7:f0:76:b4:20:b3:6b:9e:
b4:f4:70:fc:d7:54:ac:d7:c7:0c:62:1b:5c:e1:20:92:6d:34:
b7:02:b6:0c:c0:39:c7:dd:c6:1c:3c:69:0b:3b:c3:41:14:9d:
79:4e:1b:6d:a1:53:aa:96:83:af:b1:64:06:87:f1:71:06:42:
d4:34:e7:e5:dd:78:ab:a0:17:fe:fd:32:d8:32:38:25:65:e3:
a3:88:e1:56:72:5c:a8:cb:dd:50:a9:0a:07:e0:7d:cd:36:ce:
d2:01:23:07:20:48:fe:2a:cb:5a:cc:50:f0:57:1b:fe:37:bb:
e7:ca:2c:1e:9b:37:c7:fd:f8:13:8d:57:5b:ef:36:71:24:ff:
39:12:32:e7:2d:6b:56:26:44:5e:c8:78:67:3c:63:86:7c:1d:
b5:80:5f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:50 2024 by rpki-client on console-fra.rpki-client.org