Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/T0Lb6f-oqI1sUVDmEla0UCunZ0k.roa
File: T0Lb6f-oqI1sUVDmEla0UCunZ0k.roa (raw, json)
Hash identifier: QDZunXyqABoGTtvcLiQkWCrAzmfU7azEKnScYoADyUw=
Subject key identifier: 4F:42:DB:E9:FF:A8:A8:8D:6C:51:50:E6:12:56:B4:50:2B:A7:67:49
Certificate issuer: /CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
Certificate serial: 01856D4A9C41D3B55661C13F32EA6C84C09A
Authority key identifier: BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/T0Lb6f-oqI1sUVDmEla0UCunZ0k.roa
Signing time: Sun 01 Jan 2023 12:24:44 +0000
ROA not before: Sun 01 Jan 2023 12:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211068
IP address blocks: 185.183.140.0/22 maxlen: 22
185.183.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:9c:41:d3:b5:56:61:c1:3f:32:ea:6c:84:c0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
Validity
Not Before: Jan 1 12:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f42dbe9ffa8a88d6c5150e61256b4502ba76749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:f9:22:12:a1:cc:56:85:65:62:99:0e:f4:
d3:9b:29:e3:0c:db:bd:73:d9:4a:37:56:a7:0f:24:
dc:fa:31:4e:4c:eb:5e:52:f9:fc:a4:ef:9f:10:c7:
67:f5:ba:2a:99:b0:4c:be:7a:bd:9c:ab:a1:cc:82:
e8:4d:f7:7e:b8:9e:01:07:04:83:f8:8d:6a:73:c2:
0b:0d:91:44:ea:0e:ef:08:e4:ea:d5:43:71:4b:e8:
9a:57:5f:cd:47:47:ad:6c:97:6f:c8:35:0c:1a:28:
73:89:d9:7f:57:1e:a1:89:72:b6:ca:b0:29:56:2f:
bf:23:fe:c0:64:60:b0:72:6f:5e:8f:8b:7f:0e:b0:
48:04:a3:81:51:ae:69:0e:ef:36:c3:ae:9b:82:3c:
65:7c:40:d4:f6:96:75:4c:e1:48:f8:3a:da:61:99:
87:54:1b:30:2b:1f:27:8b:b4:ef:a0:5b:91:6e:6c:
b6:96:ea:61:65:16:73:77:cc:91:9a:69:db:85:67:
90:31:5b:c9:8c:a1:d8:c4:0c:c5:05:e7:aa:70:86:
93:6e:c7:ce:55:96:bb:b5:35:60:b8:f1:35:97:32:
67:62:26:24:6b:8b:30:c4:ba:af:8f:2a:e6:6c:bc:
f5:75:8c:aa:be:bc:35:7f:1d:15:02:07:00:4b:1b:
f2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:42:DB:E9:FF:A8:A8:8D:6C:51:50:E6:12:56:B4:50:2B:A7:67:49
X509v3 Authority Key Identifier:
keyid:BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/T0Lb6f-oqI1sUVDmEla0UCunZ0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.140.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:f5:17:22:b4:c8:96:1b:be:0b:05:9b:55:72:73:b8:3d:50:
79:b3:4f:5f:cc:5f:cf:28:f9:01:f1:be:a6:11:37:2d:e4:fa:
30:72:51:98:ac:b1:8e:54:b8:a9:f6:f4:9f:4a:33:8f:8a:4d:
cb:14:33:51:4d:5f:c0:47:c2:2d:c6:76:70:c8:3a:38:86:9a:
f4:6c:6a:cf:aa:b7:fd:9b:a6:c3:3a:ea:ad:26:78:d9:6f:49:
d4:e0:51:0c:43:85:c0:ed:1c:ed:57:41:2f:04:da:07:7a:1a:
c0:19:6e:18:39:3f:d6:4b:fe:43:c0:5e:6d:4d:b5:56:dd:36:
52:d5:97:f3:f7:fe:c8:af:09:4c:b0:94:8a:d4:b8:a9:25:5d:
d3:0e:2d:02:0c:29:ca:72:cc:36:a0:43:59:3e:ca:a8:e8:7c:
c6:05:1c:10:a5:b7:44:ee:97:b5:cf:12:c1:a9:07:33:f1:e1:
34:38:08:57:53:a6:86:84:e4:e6:13:1b:34:29:d7:38:48:10:
d8:04:dc:4f:41:fb:fd:c9:e8:6b:44:30:c6:df:61:93:fa:14:
28:cb:21:64:21:b4:49:40:08:bb:09:70:7a:cf:07:8b:47:a0:
d7:a4:c6:12:20:14:9e:bc:61:81:8b:36:8b:f7:b6:f9:86:7e:
22:fc:e7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:54 2024 by rpki-client on console-ams.rpki-client.org