Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/XnjfaAaKJM80mp4-QgKmpNz1Qp4.roa
File: XnjfaAaKJM80mp4-QgKmpNz1Qp4.roa (raw, json)
Hash identifier: NmqwEnUImremBdyZ+mGjtJZD6XaYSyiax7Mj5qfcWmg=
Subject key identifier: 5E:78:DF:68:06:8A:24:CF:34:9A:9E:3E:42:02:A6:A4:DC:F5:42:9E
Certificate issuer: /CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Certificate serial: 018CC72733D14EF86AC53F478B4AADFABD74
Authority key identifier: 7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/XnjfaAaKJM80mp4-QgKmpNz1Qp4.roa
Signing time: Mon 01 Jan 2024 22:31:24 +0000
ROA not before: Mon 01 Jan 2024 22:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203825
IP address blocks: 185.122.188.0/23 maxlen: 23
185.122.190.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 01 Mar 2024 07:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:33:d1:4e:f8:6a:c5:3f:47:8b:4a:ad:fa:bd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Validity
Not Before: Jan 1 22:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e78df68068a24cf349a9e3e4202a6a4dcf5429e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:d9:ba:93:bc:ce:04:75:e7:60:0e:37:0b:
1c:9f:d4:57:47:11:2d:c0:e2:e1:55:0c:ed:18:0d:
96:1c:48:98:2d:f3:ef:fa:71:79:9d:bc:34:e6:3e:
d5:46:9c:5f:65:a5:b6:d2:45:e1:1b:17:e4:4f:7c:
07:1c:bd:a6:84:39:04:fb:de:bd:59:c1:e7:b2:ef:
b5:8f:3a:ad:3b:0e:e5:78:f6:f7:7f:0b:ca:5b:6a:
e6:e1:d1:08:98:93:d4:80:e2:a6:3b:90:15:70:09:
c2:30:8f:2e:8f:ab:35:7e:c2:3e:da:6c:e9:ce:6d:
4a:01:b5:64:b7:c8:84:d4:7e:ab:44:ee:9c:c4:b6:
40:d9:19:e4:76:f0:3f:2f:0c:32:00:39:a8:0e:b1:
27:51:79:f4:20:14:97:7d:24:54:35:27:95:83:88:
51:eb:8e:72:eb:f4:03:97:e9:6e:00:ab:f7:5e:7a:
a6:4a:07:07:13:68:e3:4a:15:fc:83:08:cd:9e:82:
81:d4:fb:ff:65:bf:89:26:ea:44:a2:39:ae:f8:46:
bb:8e:5f:56:14:95:ab:97:1b:11:67:15:c9:d8:82:
5f:92:e6:2a:1d:3f:11:32:f4:86:ea:0a:ce:c3:44:
e1:1d:47:f8:f8:e8:6a:5b:1d:5d:a6:55:19:ba:0e:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:78:DF:68:06:8A:24:CF:34:9A:9E:3E:42:02:A6:A4:DC:F5:42:9E
X509v3 Authority Key Identifier:
keyid:7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/XnjfaAaKJM80mp4-QgKmpNz1Qp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.188.0/22
Signature Algorithm: sha256WithRSAEncryption
33:6c:cd:24:88:f4:b8:dc:c8:52:85:29:10:d0:63:06:b2:22:
08:1c:4b:78:67:e2:16:00:0c:51:f8:82:ce:f6:5d:12:af:86:
db:a3:62:7b:d5:7a:0f:ed:c0:d9:91:99:32:0d:4b:14:e6:77:
72:a1:46:ba:8e:db:b5:53:b6:02:c5:33:a7:e3:b1:66:10:77:
ac:c0:8f:af:fe:c5:bd:6d:25:2c:88:f4:db:ea:8d:24:83:0d:
46:85:b5:9a:0a:cc:b4:18:a1:54:5a:1b:06:6c:6a:4e:0e:9f:
a9:02:54:15:11:51:23:1f:70:59:7e:6a:5e:f0:12:43:f2:a1:
cb:df:34:de:72:1f:7d:02:1e:79:69:b8:d8:35:7f:dd:5e:9b:
23:31:5a:96:cd:06:6c:ce:dc:35:95:96:2a:54:33:36:7f:77:
b8:45:d4:59:49:92:12:3e:13:95:3e:65:7b:ca:cd:d7:44:2e:
1b:5c:e1:44:38:dc:53:72:e5:ba:e5:52:34:87:b6:e1:c4:b7:
7b:de:92:61:1b:b9:90:51:19:fb:9d:6b:d4:96:10:7b:2b:ca:
76:e2:0e:e1:38:1e:ea:0b:ba:a7:1f:c4:59:6a:2b:70:91:4f:
21:20:08:de:aa:04:ac:9b:3e:e4:51:51:8d:97:b9:e2:12:17:
ce:a2:bc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:03 2024 by rpki-client on console-fra.rpki-client.org