Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/R6g4I5E4KdXbfJdsJlU62NG6iUE.roa
File: R6g4I5E4KdXbfJdsJlU62NG6iUE.roa (raw, json)
Hash identifier: RCFrqsGuQEwcfGC5s7KLjj6EfPKloE1ADQrUKHqR2F0=
Subject key identifier: 47:A8:38:23:91:38:29:D5:DB:7C:97:6C:26:55:3A:D8:D1:BA:89:41
Certificate issuer: /CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Certificate serial: 018CC94E34A75ACC7675F8AE1E138BA6ADCA
Authority key identifier: 85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/R6g4I5E4KdXbfJdsJlU62NG6iUE.roa
Signing time: Tue 02 Jan 2024 08:33:14 +0000
ROA not before: Tue 02 Jan 2024 08:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 185.51.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 08:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:34:a7:5a:cc:76:75:f8:ae:1e:13:8b:a6:ad:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Validity
Not Before: Jan 2 08:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47a83823913829d5db7c976c26553ad8d1ba8941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:08:8b:54:3a:a6:66:2e:5c:91:eb:67:d4:eb:
b6:1c:bf:ae:40:95:a2:f7:a5:ec:b9:b5:5d:18:7d:
31:6d:98:00:72:24:e3:b6:63:ee:51:53:a8:c5:a0:
a0:dd:7a:aa:83:87:b7:42:bd:41:98:f4:58:13:fd:
4e:c7:ac:8f:88:4d:e3:b3:43:36:96:7b:46:e2:fb:
33:b3:26:dd:f6:eb:fb:ca:e8:8d:61:f1:8f:8c:66:
0e:31:13:90:52:fb:f0:fe:e6:4c:30:e9:61:65:aa:
eb:9d:51:be:77:b9:c8:fa:4c:a3:d1:72:8f:26:7a:
da:2d:8b:58:39:6d:c4:2f:69:f4:c8:7e:c9:bb:d0:
6a:2a:23:39:09:27:a3:70:7d:5b:53:1b:4a:d4:73:
71:ff:73:b1:a8:4a:d1:d4:86:21:08:57:ec:a2:65:
41:54:a8:a7:75:15:d8:92:54:38:8c:27:31:b0:0a:
a2:3c:e8:3e:b9:53:64:d4:8a:03:0d:60:50:78:b9:
04:c1:38:e3:e3:38:8c:1e:13:54:1c:41:cd:f8:12:
d6:9c:a7:85:64:18:db:a7:c3:f6:fd:46:a5:c6:b5:
f6:94:15:f9:44:aa:00:dd:22:69:cd:2a:79:96:d8:
56:a6:96:65:20:c2:ed:0e:fc:82:3e:83:93:a5:50:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A8:38:23:91:38:29:D5:DB:7C:97:6C:26:55:3A:D8:D1:BA:89:41
X509v3 Authority Key Identifier:
keyid:85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/R6g4I5E4KdXbfJdsJlU62NG6iUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.44.0/22
Signature Algorithm: sha256WithRSAEncryption
64:ca:d4:f8:0e:e5:71:19:ca:89:02:04:62:8a:fc:f4:11:15:
f4:8d:b6:ca:26:c4:06:e3:ef:d8:5a:8a:3e:bb:99:1e:4b:d0:
a1:49:bf:16:7a:52:d4:63:a6:1a:44:86:e3:2b:d7:c7:0b:f9:
60:b9:fb:8e:1b:a1:d3:68:a2:80:68:d9:d9:11:c7:fb:25:d8:
7d:17:2f:a4:92:d6:1d:42:26:d3:53:92:a4:bb:4a:cb:b4:20:
02:72:4e:b1:2f:f0:4a:d2:86:54:aa:8e:1f:db:3a:94:db:af:
5a:7f:ad:ae:88:05:e9:8e:cf:35:85:82:83:81:fb:9c:a4:21:
95:8f:b6:f9:8a:a9:6f:19:be:50:48:df:8b:02:be:eb:cc:4b:
0b:a8:3e:03:3f:52:f9:65:04:08:85:a6:a1:a8:ef:39:14:38:
76:2a:07:56:9a:d8:b9:bd:a5:4b:02:12:84:30:29:a0:ae:a5:
8c:77:76:ef:08:80:f3:b3:1d:7b:02:8d:99:da:e0:9c:bc:0b:
eb:0d:2c:b2:4d:27:83:60:39:78:c0:ee:a6:ea:42:9f:36:f5:
c5:db:fa:64:b9:97:8a:ea:56:df:1e:70:ac:56:22:b8:75:7a:
d3:c1:01:fe:eb:b9:40:af:5d:74:b1:b0:34:ad:db:9b:51:eb:
bc:66:3d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 10:34:12 2024 by rpki-client on console-ams.rpki-client.org