Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/v8kKxU-iSsxEer4VMLErY0qEOq4.roa
File: v8kKxU-iSsxEer4VMLErY0qEOq4.roa (raw, json)
Hash identifier: O4b9BJ4thzwoMtQ25o3RInPr+uxbsEfp/dd+6598H48=
Subject key identifier: BF:C9:0A:C5:4F:A2:4A:CC:44:7A:BE:15:30:B1:2B:63:4A:84:3A:AE
Certificate issuer: /CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Certificate serial: 018570FB90A32F6188E702A8CC34EF81A87A
Authority key identifier: 70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/v8kKxU-iSsxEer4VMLErY0qEOq4.roa
Signing time: Mon 02 Jan 2023 05:36:52 +0000
ROA not before: Mon 02 Jan 2023 05:36:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202621
IP address blocks: 185.159.16.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:90:a3:2f:61:88:e7:02:a8:cc:34:ef:81:a8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Validity
Not Before: Jan 2 05:36:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfc90ac54fa24acc447abe1530b12b634a843aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:78:6b:91:3b:e8:9e:3f:c1:b2:2e:86:5d:
6e:24:a6:08:35:df:ca:f0:7a:b1:35:dc:80:77:f2:
8a:80:92:99:f0:b6:ee:3f:14:5b:63:73:01:4f:c3:
71:3d:1c:06:8d:e5:a9:41:b1:d2:0c:db:95:fe:5b:
8b:30:d1:d3:56:a5:b8:32:3b:1c:cb:b7:77:93:e0:
68:f7:44:7a:d8:0d:2a:5a:37:16:12:e7:e4:cb:5d:
30:d4:c0:a8:1d:89:26:de:76:72:25:57:c4:26:ba:
39:5d:fc:fc:a8:4c:99:85:9d:b0:0d:96:8d:f2:88:
38:74:a6:09:0a:91:62:aa:7e:d6:bd:53:82:d6:3e:
6f:b3:2a:7a:57:c9:67:7e:1e:8c:9a:ef:45:b6:61:
a4:67:d1:38:2c:f1:e1:1b:a2:63:36:70:f0:71:e6:
10:70:82:54:a2:61:a1:5d:fa:7d:31:31:3c:f3:b8:
26:2c:1c:48:96:6b:c9:c6:7e:49:8b:21:68:94:97:
6f:41:0f:72:05:e4:90:bb:ce:f0:eb:7d:d1:56:fc:
a2:87:78:be:eb:ab:20:84:d4:05:4b:1a:4b:75:89:
cc:a4:cc:52:90:f6:24:d9:29:e6:20:e8:3e:04:ec:
f8:0e:53:08:47:7a:7a:90:f3:ff:3e:06:8e:44:c1:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C9:0A:C5:4F:A2:4A:CC:44:7A:BE:15:30:B1:2B:63:4A:84:3A:AE
X509v3 Authority Key Identifier:
keyid:70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/v8kKxU-iSsxEer4VMLErY0qEOq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.16.0/23
Signature Algorithm: sha256WithRSAEncryption
09:60:e8:c9:fe:59:aa:b0:d7:39:8b:d4:a3:57:4d:5f:b7:90:
ea:02:e3:4e:b8:df:9a:c9:1d:c5:b0:45:f0:d7:0f:bb:63:26:
10:e7:b4:ef:84:f2:7a:72:af:88:20:29:0f:74:57:b8:9b:e6:
35:cc:dc:e6:79:e2:b8:51:65:1b:bd:73:50:fb:a5:24:f3:81:
66:32:c8:20:2a:43:6d:ff:7d:82:1c:a4:2d:f2:3d:8e:bb:74:
92:18:21:bd:0f:6e:3c:6d:83:e7:f5:64:c3:e4:74:e4:49:60:
18:ef:a7:88:5a:41:71:56:ae:a1:2d:96:59:34:fa:11:5b:f5:
af:24:f9:b6:4f:eb:91:fd:b7:b6:77:3f:4b:b6:7b:e0:5b:23:
e2:07:17:0c:1a:78:79:7f:66:1c:72:17:38:35:16:82:8d:92:
9b:80:f6:39:02:3f:d9:46:64:63:7f:09:24:7b:ac:18:80:06:
8a:a5:69:b6:de:d5:91:07:3f:ec:d9:50:fa:c4:51:59:ae:cd:
5c:65:ab:34:55:22:b7:7e:2c:5b:cf:cc:f0:b6:4d:93:ec:cd:
3c:50:85:2d:e6:4c:cd:59:36:15:d8:9a:e9:b8:36:d5:5f:48:
72:95:fc:23:c3:04:ae:35:23:3a:94:bc:f5:35:c6:26:26:ff:
3f:be:1e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:46 2024 by rpki-client on console-ams.rpki-client.org