Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/S_gkwyPTwb7PwcAbelM6siwPLX4.roa
File: S_gkwyPTwb7PwcAbelM6siwPLX4.roa (raw, json)
Hash identifier: HXrImulBXJIPIOTPNy1LX5KyxCwSLq4+s6Gj8svCzsU=
Subject key identifier: 4B:F8:24:C3:23:D3:C1:BE:CF:C1:C0:1B:7A:53:3A:B2:2C:0F:2D:7E
Certificate issuer: /CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Certificate serial: 018C33EBD1391927FF7884874F2C18398B27
Authority key identifier: AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/S_gkwyPTwb7PwcAbelM6siwPLX4.roa
Signing time: Mon 04 Dec 2023 08:22:21 +0000
ROA not before: Mon 04 Dec 2023 08:22:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47895
IP address blocks: 185.59.244.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:eb:d1:39:19:27:ff:78:84:87:4f:2c:18:39:8b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Validity
Not Before: Dec 4 08:22:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bf824c323d3c1becfc1c01b7a533ab22c0f2d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:18:1d:6a:0d:b6:8f:19:c1:d9:ca:f8:bd:59:
52:0b:38:df:c4:c9:03:50:d1:21:d1:24:7d:5a:2c:
df:ee:56:42:eb:67:6f:0e:83:28:a9:68:85:a3:01:
94:d3:f9:6c:0c:c6:76:da:ed:c0:7f:84:ef:13:88:
c1:95:ea:a4:f2:55:af:f7:da:f8:29:7b:17:b0:5e:
a2:e1:56:ee:58:2c:7b:65:b9:ed:b5:6b:39:db:37:
20:8f:67:98:b7:53:f3:c1:c3:ca:2a:1e:36:59:19:
93:eb:41:87:52:3a:9f:a1:4e:fd:56:30:1b:f7:6f:
5b:3d:30:85:f7:e7:48:bd:77:88:67:49:2e:35:f3:
df:ae:5c:68:17:60:04:91:b4:a7:54:97:60:af:82:
38:eb:19:a4:3a:d2:75:a6:c1:a0:57:04:97:a4:f2:
ac:9d:cc:25:38:65:b2:d9:a0:f7:b9:27:d5:1a:80:
9e:47:c0:5e:28:fe:2b:e7:69:76:73:10:d4:e0:9e:
fd:d5:f2:1b:a2:d8:93:61:76:3e:bc:10:33:b6:4d:
e3:93:4b:f5:e8:4f:e0:74:41:2b:67:1a:26:b9:50:
d6:5b:65:9b:e1:28:34:f7:8d:a2:2b:59:f1:f8:0b:
c1:d9:07:73:b8:0e:a6:f8:77:fa:93:ac:e8:c4:25:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F8:24:C3:23:D3:C1:BE:CF:C1:C0:1B:7A:53:3A:B2:2C:0F:2D:7E
X509v3 Authority Key Identifier:
keyid:AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/S_gkwyPTwb7PwcAbelM6siwPLX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.244.0/22
Signature Algorithm: sha256WithRSAEncryption
15:7c:6c:a6:73:40:f1:f6:18:45:8a:a2:05:e5:82:fe:b5:8f:
c2:55:92:cd:f9:31:25:86:f1:0e:86:f5:de:8c:9b:fb:bc:4d:
ef:e9:a0:7b:92:18:1c:42:90:53:64:6b:2c:13:28:64:b6:31:
7b:a6:b5:d0:ae:12:e0:e0:f5:0a:de:5b:ca:61:e1:ce:6c:ee:
0c:d9:ff:c6:18:69:ec:b2:fb:93:59:d6:63:df:23:fc:72:d3:
9b:55:42:62:82:15:29:f9:7a:9e:51:40:99:8d:25:4e:64:ce:
18:7c:15:82:72:fc:ac:32:bf:08:08:e8:8b:2e:09:70:3f:06:
a1:c8:39:16:46:c9:8a:65:78:a0:59:48:0e:aa:83:d7:d2:12:
fd:bd:4a:37:b9:7d:54:11:00:f4:8a:8d:a0:8c:05:7f:d1:2d:
bf:18:bf:ad:04:c9:1d:d6:8f:ae:b7:71:d1:2c:d2:db:5a:b3:
29:a4:c2:33:4a:96:0d:eb:90:7b:88:4b:be:35:33:62:0f:74:
89:d5:30:f0:8a:ea:6c:e9:6f:45:53:61:fe:7e:f9:95:76:75:
b5:d3:8e:92:81:7d:9a:18:2a:55:c2:45:c0:6f:f3:2e:4a:57:
96:54:73:af:40:8f:8a:fb:9a:62:20:26:cb:7c:fb:dd:f0:d2:
25:6c:50:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:25 2024 by rpki-client on console-fra.rpki-client.org