Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/kJ0dLoVaKgOLaaMyfCMHZJeRkVc.roa
File: kJ0dLoVaKgOLaaMyfCMHZJeRkVc.roa (raw, json)
Hash identifier: Ym7Q4TtXSmhWwl3I9tNuD5Uu0iRe+yGJIferUfPlH0g=
Subject key identifier: 90:9D:1D:2E:85:5A:2A:03:8B:69:A3:32:7C:23:07:64:97:91:91:57
Certificate issuer: /CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Certificate serial: 0189F42A8FDFA11C6D79E8D382B329487F5C
Authority key identifier: 7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/kJ0dLoVaKgOLaaMyfCMHZJeRkVc.roa
Signing time: Mon 14 Aug 2023 13:09:37 +0000
ROA not before: Mon 14 Aug 2023 13:09:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12703
IP address blocks: 185.71.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:2a:8f:df:a1:1c:6d:79:e8:d3:82:b3:29:48:7f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Validity
Not Before: Aug 14 13:09:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=909d1d2e855a2a038b69a3327c23076497919157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:68:46:ec:90:2c:ef:9a:66:1e:e3:cd:b0:68:
28:d3:70:b4:3a:41:f6:b4:da:41:6f:91:4a:92:56:
f9:dd:ff:92:82:d0:8d:c4:1b:67:92:b9:07:60:49:
71:14:85:e1:9f:b7:fc:05:51:21:2b:63:80:c4:8a:
db:ba:f0:4b:65:5e:23:46:30:6e:99:13:34:57:94:
d9:a2:15:86:6c:ca:74:c2:e1:76:5a:a1:09:8c:12:
5a:05:c8:95:b5:c5:0a:a0:a5:2e:cf:58:a2:0b:08:
72:66:71:dc:9a:3b:e9:a3:05:a5:4c:46:a8:9c:98:
e4:ce:eb:39:38:6f:8b:30:21:7c:6e:52:13:bf:91:
39:a9:e6:03:8c:f5:33:14:c3:54:ff:53:70:b8:e9:
6c:7f:64:80:d9:80:74:a9:67:a8:d0:eb:79:66:aa:
9e:2e:a7:71:3c:25:8c:e6:01:08:e6:2a:60:d3:1b:
3d:70:06:3b:34:f0:63:b5:2e:2b:86:5c:19:a5:e1:
07:99:ae:e0:19:f9:ce:2d:29:2b:1f:3e:7c:a2:ae:
16:89:53:ee:b1:f7:a0:4f:07:53:5a:48:5f:07:2b:
01:bb:9d:c0:53:56:13:02:5d:4e:78:22:33:c2:37:
15:56:ba:ab:25:ff:98:e3:68:65:8e:f7:fc:54:c1:
b8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9D:1D:2E:85:5A:2A:03:8B:69:A3:32:7C:23:07:64:97:91:91:57
X509v3 Authority Key Identifier:
keyid:7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/kJ0dLoVaKgOLaaMyfCMHZJeRkVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.184.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:5e:98:19:27:61:b6:83:4c:22:9e:87:06:15:d7:30:10:7f:
95:47:36:35:10:c6:8a:5b:09:ba:d3:1f:1e:d5:e3:f1:1d:3d:
4f:fb:81:59:ef:aa:c7:49:33:dd:af:04:7f:09:96:d6:78:44:
10:0c:ae:e1:d4:d9:57:95:07:ae:cc:79:e6:c0:a6:e9:58:ab:
72:8b:bf:c7:fd:56:fd:92:10:aa:8f:52:be:86:a6:2f:77:18:
da:95:40:7f:4a:52:4c:c8:c7:7b:42:9b:24:e2:84:2d:84:3f:
d0:c3:fd:7e:1b:44:1c:81:71:1b:ac:44:08:de:af:40:a7:61:
0f:e6:67:0a:3d:cc:62:86:b7:f4:0c:0d:92:06:3c:d3:7a:00:
55:b0:cc:6b:fc:97:1d:97:ba:37:54:7d:f2:62:69:e2:df:0d:
8d:6d:c5:73:19:35:99:55:e1:68:35:4f:96:3a:48:34:ad:2c:
5b:63:d5:ab:89:d0:ad:06:b7:72:53:d2:a5:55:e9:e0:fb:e8:
e5:74:1e:55:56:24:23:b6:f2:40:2e:05:64:b3:6c:e8:9a:9d:
78:0c:b7:57:bd:00:70:2c:98:28:79:c7:e7:37:7b:35:a4:98:
bd:4b:f9:93:f6:59:be:0d:8b:31:b6:23:a0:32:0e:37:60:ea:
6e:e7:41:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:21 2024 by rpki-client on console-ams.rpki-client.org