Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/a9yvWm_Ka_3hgPN4G2P2wTh6OFk.roa
File: a9yvWm_Ka_3hgPN4G2P2wTh6OFk.roa (raw, json)
Hash identifier: R60vYLXZ8diVD1jcDssf2rD4wC/ov0AmVsuF7aMI7V0=
Subject key identifier: 6B:DC:AF:5A:6F:CA:6B:FD:E1:80:F3:78:1B:63:F6:C1:38:7A:38:59
Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial: 01857139F0FBF757C227BDE058358547C569
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/a9yvWm_Ka_3hgPN4G2P2wTh6OFk.roa
Signing time: Mon 02 Jan 2023 06:45:00 +0000
ROA not before: Mon 02 Jan 2023 06:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51862
IP address blocks: 185.122.180.0/24 maxlen: 24
185.122.180.0/22 maxlen: 22
185.122.182.0/24 maxlen: 24
185.122.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:f0:fb:f7:57:c2:27:bd:e0:58:35:85:47:c5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Validity
Not Before: Jan 2 06:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bdcaf5a6fca6bfde180f3781b63f6c1387a3859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:af:35:cd:0b:56:6d:9d:9a:2e:bc:97:fd:36:
c6:96:19:38:a0:24:5b:20:ad:e6:a7:fd:49:76:06:
8d:cc:1c:a5:0f:3c:35:99:6e:e6:61:50:6b:e3:76:
c4:ce:38:cd:80:6b:14:83:3c:58:2e:cf:6f:26:2e:
c6:77:1d:5b:70:8f:3b:ef:0d:40:5e:5a:1d:da:61:
f7:91:47:17:4a:b1:59:14:fb:5e:19:09:5b:92:16:
8b:9d:b8:20:37:24:bb:b0:c0:ff:d2:64:55:72:53:
a0:62:b3:87:91:b2:7c:b3:32:8b:88:c4:bf:ce:bf:
00:22:ce:c4:d8:41:36:76:b0:89:07:e9:d9:e1:57:
93:68:10:09:e9:f3:06:d6:e4:bf:19:e7:65:67:66:
21:30:de:da:c7:25:95:8c:fb:7c:28:cc:32:02:7f:
87:2e:d8:f1:75:20:ce:05:71:1a:de:6d:e7:be:38:
8e:97:fd:ee:54:d6:c9:21:8a:83:5c:00:4a:a6:d1:
fc:e7:a5:58:76:f7:ae:3a:e6:ef:c4:a0:12:aa:01:
5c:6e:e3:1f:8c:3c:a3:05:58:bf:f2:7a:1a:95:fe:
86:6d:ee:e9:df:ae:88:e8:a2:60:2a:57:f0:11:68:
8f:89:4c:19:36:7b:44:18:68:46:a7:64:ec:d4:02:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DC:AF:5A:6F:CA:6B:FD:E1:80:F3:78:1B:63:F6:C1:38:7A:38:59
X509v3 Authority Key Identifier:
keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/a9yvWm_Ka_3hgPN4G2P2wTh6OFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.180.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:ca:61:fb:f6:e5:6d:7c:fc:15:2f:df:1f:ae:63:93:b8:1f:
52:63:b8:ef:c5:eb:5b:a4:d0:40:48:9d:dd:c2:54:26:61:15:
fb:25:d5:3b:e5:ed:7a:a2:33:d2:57:16:6f:d1:bc:40:d0:4c:
1b:0b:96:49:59:70:19:5a:3e:4c:b2:89:3e:82:a4:7a:bb:91:
13:3e:24:a2:0e:d8:fa:e8:d6:0f:7d:bf:ff:ec:35:b5:3a:06:
e8:6a:56:36:51:8b:0a:70:53:6a:04:c2:30:af:ba:c9:c0:ef:
32:cb:a2:b5:92:43:a7:29:95:77:6c:43:83:f3:66:d1:22:f7:
68:c1:a7:2d:fa:df:77:e8:e8:70:ad:38:b4:91:85:7b:bd:ba:
c3:63:71:0a:1d:bd:45:e6:59:9f:e6:b3:db:9e:48:3f:58:fc:
50:57:80:c0:b9:48:56:6b:e5:d3:2e:23:1d:86:56:69:de:e0:
25:48:cf:bb:15:82:55:ef:fa:c0:8a:fd:19:b0:4c:76:8a:1a:
9b:54:1c:28:8f:4f:be:e4:35:87:e8:6d:fd:7a:af:13:53:47:
48:c0:15:ed:ce:5f:b8:b5:60:34:54:7d:70:c9:73:22:ed:55:
d4:fe:13:82:be:cc:12:21:08:39:89:6e:a1:12:33:e7:ef:b6:
37:ac:4a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:28 2024 by rpki-client on console-fra.rpki-client.org