Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/otT4Pr_iqz3lQ0HbNzhGg2ei9KU.roa
File: otT4Pr_iqz3lQ0HbNzhGg2ei9KU.roa (raw, json)
Hash identifier: 9yyhYTWyZtTUkROwGWMHbvpyiIyT0JO++Bni1fEXzRU=
Subject key identifier: A2:D4:F8:3E:BF:E2:AB:3D:E5:43:41:DB:37:38:46:83:67:A2:F4:A5
Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial: 0185E34B92505A51D5B183A2A67885351208
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/otT4Pr_iqz3lQ0HbNzhGg2ei9KU.roa
Signing time: Tue 24 Jan 2023 10:20:58 +0000
ROA not before: Tue 24 Jan 2023 10:20:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8560
IP address blocks: 185.122.180.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:4b:92:50:5a:51:d5:b1:83:a2:a6:78:85:35:12:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Validity
Not Before: Jan 24 10:20:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2d4f83ebfe2ab3de54341db3738468367a2f4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4e:a4:c2:f9:9e:53:16:fd:a2:7f:93:bb:d6:
01:8d:69:9b:76:02:f9:82:d2:88:77:30:b6:aa:ee:
d4:fa:04:1a:31:af:cf:f9:34:36:a9:c3:32:bd:f9:
93:0c:7d:aa:34:40:7b:af:3f:7e:6e:8c:ef:4f:ef:
6e:56:92:c9:70:8c:b1:6e:6c:69:1a:b0:c3:4c:10:
6b:48:ff:de:50:cf:9a:ea:71:4a:a2:97:a0:66:df:
2b:62:f3:2d:70:d6:0c:c0:04:8f:e8:51:c0:e3:4c:
45:67:74:ab:52:6c:6f:55:0f:27:9b:2e:29:65:75:
96:22:23:a9:3f:91:dd:18:75:db:7c:f6:80:bb:45:
01:8a:a5:d0:56:17:42:67:e2:30:e0:ab:fc:d0:3b:
4b:27:f8:f6:33:25:e8:03:a5:7e:55:4c:21:0f:2b:
51:dd:48:c3:98:d9:61:60:45:a4:25:e0:b7:0f:a7:
d7:4f:f4:32:64:5a:91:4f:70:88:b8:b5:ae:ea:cd:
4e:f2:56:0d:34:76:a3:e0:51:a8:b0:48:0d:90:50:
e5:c4:b4:96:c3:a7:cd:14:c1:97:a3:c7:73:c7:95:
c1:c6:42:f9:8a:3d:5b:a3:f0:f1:17:16:dd:3c:bd:
b5:9d:ea:02:b5:6b:e6:0b:b7:02:d1:a0:c2:a9:f7:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D4:F8:3E:BF:E2:AB:3D:E5:43:41:DB:37:38:46:83:67:A2:F4:A5
X509v3 Authority Key Identifier:
keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/otT4Pr_iqz3lQ0HbNzhGg2ei9KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.180.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:ce:9d:57:41:f7:e5:82:50:b1:0d:33:a3:d0:b6:f1:38:a3:
5f:02:b8:30:9b:25:17:54:be:59:e9:71:2c:fe:99:fb:6c:9e:
fb:be:8a:43:98:a0:4e:ae:2a:22:2b:90:1d:25:e2:df:7f:39:
32:73:00:fc:d3:e3:0b:29:78:e2:70:da:0b:e9:e7:a8:53:8a:
aa:84:5c:c5:00:27:16:87:4f:c1:03:3f:bc:10:9d:5e:fd:a8:
f8:f2:ed:e8:7d:34:f9:22:60:10:19:1a:42:b8:5c:b0:89:47:
67:61:75:18:fc:71:ee:9c:2c:cf:43:ce:33:52:2e:55:30:51:
eb:64:01:29:7e:33:0f:05:80:7d:3d:cf:6e:a0:45:9f:17:aa:
ca:82:d7:fa:fe:69:5b:8d:5a:4b:fa:62:bd:6e:0c:5d:0a:7e:
fb:42:5a:a8:7d:b8:0a:70:82:5a:52:a5:87:f8:f2:f8:5f:c3:
88:9e:3f:6a:b2:b1:7c:cd:4d:dc:43:10:26:f4:14:bd:86:f8:
ab:0e:bc:0f:43:71:da:6a:99:f4:a6:59:33:3c:f5:80:f3:d2:
35:e9:61:3c:6b:57:0b:81:03:43:c5:6e:31:d7:85:d8:2e:0c:
00:b7:96:87:96:e6:50:03:2b:89:ff:93:f5:01:20:42:4c:b8:
1e:fb:3b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:21 2024 by rpki-client on console-ams.rpki-client.org