Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/k_lSrTI70-8DOqD9zJ4EsIoVVR0.roa
File: k_lSrTI70-8DOqD9zJ4EsIoVVR0.roa (raw, json)
Hash identifier: Z9LshgMlVXPDXAmgA0quANRCai9NIzOctGuA7QenAT8=
Subject key identifier: 93:F9:52:AD:32:3B:D3:EF:03:3A:A0:FD:CC:9E:04:B0:8A:15:55:1D
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 018703DED6059C8E2B797CB08558C3774354
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/k_lSrTI70-8DOqD9zJ4EsIoVVR0.roa
Signing time: Tue 21 Mar 2023 11:12:28 +0000
ROA not before: Tue 21 Mar 2023 11:12:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.161.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:de:d6:05:9c:8e:2b:79:7c:b0:85:58:c3:77:43:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Mar 21 11:12:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93f952ad323bd3ef033aa0fdcc9e04b08a15551d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:16:9f:f0:e6:8e:6d:02:0d:4b:3e:c3:cb:6a:
ac:5a:87:78:7b:ec:7c:09:d8:5c:7e:24:8a:b4:18:
54:d5:98:93:8d:b1:fc:6b:e0:5e:3f:b3:1c:ef:68:
57:7e:96:05:33:69:59:12:15:65:c6:6c:65:c6:18:
b8:39:af:b7:1b:15:7a:62:3c:48:4a:4a:f7:6d:53:
18:a4:0e:25:da:1c:e3:a5:25:d8:a6:1b:37:1f:7d:
12:5a:81:e2:ad:52:52:ee:a6:53:45:8f:9f:dc:6a:
07:65:f1:0f:a3:22:ca:12:e8:ad:a8:28:d6:9d:76:
f7:fb:2c:e7:a3:39:ad:73:70:ee:2a:34:bc:f7:1b:
1b:b6:e3:bb:21:33:68:8e:a9:1f:31:48:3b:34:3a:
5b:a0:de:19:3e:20:99:1c:53:54:0f:71:17:0d:fc:
02:70:b5:f4:87:81:62:c3:83:93:64:3b:bc:6c:2d:
8f:9b:5d:e2:0f:20:4b:46:23:51:19:63:af:ce:4f:
4c:38:2b:6c:14:b9:68:f2:95:ff:ab:cc:56:20:51:
cf:b7:2e:b3:b4:a4:8f:88:e1:4f:9e:21:5f:fc:8a:
be:6e:fc:3c:dc:28:78:3e:f1:d1:eb:b6:0f:4a:af:
4b:bc:d2:62:64:33:87:89:cc:09:ec:3e:d4:e9:6a:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F9:52:AD:32:3B:D3:EF:03:3A:A0:FD:CC:9E:04:B0:8A:15:55:1D
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/k_lSrTI70-8DOqD9zJ4EsIoVVR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.252.0/22
Signature Algorithm: sha256WithRSAEncryption
32:d8:1e:9a:23:23:85:c9:23:0b:f6:79:4b:ef:1c:a8:8f:98:
e1:3c:a7:f7:0d:92:7a:f3:66:d0:d8:06:f2:bd:93:fb:0a:5b:
82:ce:2a:25:3c:a1:d7:d3:b6:91:3a:c5:24:ef:ff:1b:c6:6f:
4c:11:e3:55:4e:79:e0:fd:51:dc:06:63:88:3c:56:5f:b0:c9:
38:08:67:c5:7b:58:07:c8:0a:5e:51:70:f0:0a:f7:1f:8a:57:
91:a2:cc:55:f2:2b:30:08:ee:05:a7:c8:04:f7:65:f0:66:05:
1d:59:2a:8b:1d:c6:12:0e:bf:b3:75:d8:a0:e6:98:5f:91:2f:
2e:c4:bd:cd:42:47:33:a0:35:f8:35:8b:49:20:db:83:bd:8a:
ba:2b:fc:ce:f1:df:a6:68:27:8a:7b:5f:3f:cf:a2:3a:85:94:
1b:d4:3a:58:af:9e:fa:45:ba:e6:a2:a8:ea:47:e7:34:55:15:
f2:65:f2:94:c1:29:55:2c:86:99:b3:78:c2:9b:0e:bc:c7:8b:
2d:89:18:7e:d7:9c:72:16:9e:e6:3b:48:58:62:f9:28:b0:7d:
10:6d:b1:e3:1f:de:e8:02:b4:f3:60:dd:4d:ef:43:fd:0d:d2:
67:b8:4c:14:59:81:9c:b9:76:fa:a4:ef:6f:a5:81:9d:4e:8c:
21:73:30:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:10 2023 by rpki-client on console-ams.rpki-client.org