Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/Clj7D4HlteAZ9bDwiCudHk6IKjE.roa
File: Clj7D4HlteAZ9bDwiCudHk6IKjE.roa (raw, json)
Hash identifier: UEXjG0C/CGCjl7DYedUWMsQsv427qVMxSJ3W7hAhT8U=
Subject key identifier: 0A:58:FB:0F:81:E5:B5:E0:19:F5:B0:F0:88:2B:9D:1E:4E:88:2A:31
Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial: 01856E2F748B0E7BA3CD4C9C0ADEFDE2BA84
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/Clj7D4HlteAZ9bDwiCudHk6IKjE.roa
Signing time: Sun 01 Jan 2023 16:34:41 +0000
ROA not before: Sun 01 Jan 2023 16:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43065
IP address blocks: 185.140.116.0/22 maxlen: 22
2a07:1c80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:74:8b:0e:7b:a3:cd:4c:9c:0a:de:fd:e2:ba:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
Validity
Not Before: Jan 1 16:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a58fb0f81e5b5e019f5b0f0882b9d1e4e882a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:d4:2a:9c:e6:4a:19:1b:50:c4:95:f6:b9:
c7:bd:f0:72:cd:0e:9a:ab:ca:5d:e7:47:d2:76:55:
30:5c:5b:48:ad:38:5f:f3:c3:12:39:00:08:a3:96:
d8:9b:1a:21:54:1b:fd:ae:ba:53:9f:05:b8:b0:1a:
16:82:05:57:66:6a:d5:3a:c3:94:6b:af:d1:4e:ac:
10:60:7f:dc:3e:39:67:37:8d:b9:60:23:8b:1d:f1:
c5:84:27:12:e2:99:f6:20:bb:a7:65:aa:90:5e:ba:
54:ea:3e:fa:32:34:59:93:a5:2d:86:ab:63:89:2a:
7a:71:1a:3d:b3:bb:5f:32:94:f2:4f:f1:6c:73:a4:
59:c3:2c:52:65:a0:6f:fb:0e:1e:8f:3c:50:08:51:
b8:2e:ca:f9:b0:5a:a8:5e:6b:c2:a3:db:cf:60:2d:
9e:aa:9b:07:4b:60:24:9f:7b:79:61:ab:1b:c5:bb:
b7:2f:e4:8d:f7:02:67:72:93:da:56:42:c7:fa:e7:
f2:fd:46:cb:fc:a8:e7:02:99:f5:e7:0b:e0:37:58:
45:87:a6:df:34:df:2e:1d:ec:75:7a:24:a9:f7:59:
67:c9:80:97:9b:8b:af:76:29:ef:68:7a:5e:2a:7c:
a9:27:98:98:39:c7:1c:b6:19:12:01:50:27:f7:b5:
09:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:58:FB:0F:81:E5:B5:E0:19:F5:B0:F0:88:2B:9D:1E:4E:88:2A:31
X509v3 Authority Key Identifier:
keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/Clj7D4HlteAZ9bDwiCudHk6IKjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.116.0/22
IPv6:
2a07:1c80::/29
Signature Algorithm: sha256WithRSAEncryption
5d:a1:dc:c7:cc:ff:49:cc:b5:be:ce:37:01:f8:ec:b3:8a:83:
56:b6:0c:fa:6c:ca:51:7e:83:3b:19:77:20:a4:8a:00:d1:59:
a2:b0:80:6e:70:24:42:66:20:f9:df:9d:73:b5:28:b9:31:50:
2a:30:11:87:05:c9:fc:c8:24:4a:35:1f:dc:58:91:74:51:80:
85:34:f3:e0:1e:d1:f1:56:20:d3:67:11:a6:ea:d8:2d:2f:95:
35:ee:51:cc:81:57:59:08:e8:8c:bd:13:43:8e:25:53:3a:51:
6e:63:37:13:3c:42:6f:03:89:94:9a:14:f0:44:13:c9:84:22:
74:6c:f3:0f:6a:b0:79:2d:6b:7b:38:b9:5c:cc:ae:8f:ef:f8:
1b:4d:11:cd:02:f4:1d:f7:8e:85:b4:cc:d3:14:ad:c8:63:71:
69:3e:d7:c2:84:77:29:21:0f:2f:63:69:6c:67:b4:6b:7e:3c:
63:d4:29:c6:ee:e4:6c:5e:d7:f6:75:ef:22:fe:e6:ed:93:6f:
df:9a:72:13:af:eb:64:45:33:a0:23:e4:8a:7a:10:81:c8:f2:
b7:cf:d7:c1:4f:d0:b1:a6:81:4f:c1:e4:07:ec:40:be:45:35:
57:f1:99:41:65:ab:e0:ef:79:1f:70:e9:c9:f9:5d:da:0b:ea:
86:9d:15:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:05 2024 by rpki-client on console-fra.rpki-client.org