Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/fc8955-a4ac-4c9e-a68b-0070b1e92991/1/aTvaVWWLsuqqCHzjSr2RRNrOx5w.roa
File: aTvaVWWLsuqqCHzjSr2RRNrOx5w.roa (raw, json)
Hash identifier: eh73JJfE6eAR1mpBMKI5EbaFI7L/hIUwMV+CWHG7Ths=
Subject key identifier: 69:3B:DA:55:65:8B:B2:EA:AA:08:7C:E3:4A:BD:91:44:DA:CE:C7:9C
Certificate issuer: /CN=c2d4b1f3e5a875ed79cdbe724047b0f3ec8911c6
Certificate serial: 01934037C8D1E6D8CC3C768D5FBB44AD8F9D
Authority key identifier: C2:D4:B1:F3:E5:A8:75:ED:79:CD:BE:72:40:47:B0:F3:EC:89:11:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtSx8-Wode15zb5yQEew8-yJEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/fc8955-a4ac-4c9e-a68b-0070b1e92991/1/aTvaVWWLsuqqCHzjSr2RRNrOx5w.roa
Signing time: Mon 18 Nov 2024 17:00:17 +0000
ROA not before: Mon 18 Nov 2024 17:00:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34380
IP address blocks: 185.162.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Nov 2024 11:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:40:37:c8:d1:e6:d8:cc:3c:76:8d:5f:bb:44:ad:8f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d4b1f3e5a875ed79cdbe724047b0f3ec8911c6
Validity
Not Before: Nov 18 17:00:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=693bda55658bb2eaaa087ce34abd9144dacec79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:ea:19:b3:65:a2:d5:ad:3a:aa:84:ae:9f:
5b:d3:5f:23:d9:ea:31:fc:9e:0d:7e:3f:95:32:b1:
18:83:2a:5f:7f:b9:7e:ee:be:9d:80:36:86:81:98:
44:91:94:cd:1a:a2:c4:04:06:04:f8:ee:de:07:f2:
46:52:e5:81:95:96:03:23:09:11:9c:05:d0:1b:4d:
14:6e:41:31:e4:2a:6f:54:4c:ce:7f:19:2a:3f:16:
98:17:c1:13:48:2c:d2:35:77:85:4b:b1:b9:63:7f:
01:79:65:75:5b:56:29:b0:2a:4a:3b:1a:0b:42:46:
60:3f:ae:95:70:58:d3:00:4f:80:8b:dc:a2:01:ae:
fd:ba:bf:83:1b:ad:2d:d2:93:26:d5:50:ec:e8:9d:
7d:52:d5:1c:91:05:97:b0:e2:81:97:69:61:b2:27:
4b:9c:b5:d7:d7:7d:c0:b5:58:fd:1c:3b:75:18:5a:
50:da:51:cd:8d:65:65:79:fc:69:fe:54:8f:b4:22:
c0:9e:d3:43:13:55:28:75:e3:08:cf:ee:18:7b:ba:
64:95:a2:c6:30:c1:d9:33:d9:d9:06:c2:6d:e9:85:
50:71:52:01:9d:cd:80:7d:ee:94:7e:5a:d4:c9:dc:
7b:47:9a:30:79:e7:f1:bc:f6:0d:81:3a:ed:4b:a7:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3B:DA:55:65:8B:B2:EA:AA:08:7C:E3:4A:BD:91:44:DA:CE:C7:9C
X509v3 Authority Key Identifier:
keyid:C2:D4:B1:F3:E5:A8:75:ED:79:CD:BE:72:40:47:B0:F3:EC:89:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtSx8-Wode15zb5yQEew8-yJEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fc8955-a4ac-4c9e-a68b-0070b1e92991/1/aTvaVWWLsuqqCHzjSr2RRNrOx5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fc8955-a4ac-4c9e-a68b-0070b1e92991/1/wtSx8-Wode15zb5yQEew8-yJEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.148.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:e7:5e:61:61:74:f5:26:20:cd:1c:f4:ae:75:fa:56:48:41:
9a:43:01:59:16:c7:ff:9d:09:f0:d7:ee:a2:4e:eb:6f:2a:d0:
0d:10:fa:c9:25:0e:ba:34:2c:42:47:07:a7:55:5f:00:55:cc:
2e:7c:42:cc:76:f5:c9:23:b2:96:e1:52:6c:b6:69:75:45:b1:
19:85:ce:79:e3:e6:9b:72:ae:f0:a0:b6:43:8c:7d:fb:82:e3:
11:92:13:d3:f7:b9:0d:94:06:41:2f:cc:63:10:cb:a0:26:94:
e9:45:06:dc:22:78:6b:11:68:5f:1f:7c:6b:a9:70:8a:91:33:
dd:d1:0f:29:cc:b1:7a:d3:c1:61:42:c2:d2:25:9b:6e:e0:56:
c9:ae:6b:e0:d5:29:e1:2a:4d:52:86:ca:1c:ad:b4:38:a6:b9:
8b:7e:6e:92:e6:01:30:25:29:dc:cc:6a:ea:3d:10:26:58:3a:
36:71:95:15:cb:82:2b:16:a3:30:29:c8:9b:ee:dd:2b:b8:ed:
6b:ef:52:c3:2e:32:d5:7d:3b:e7:8f:af:62:04:24:78:b4:7b:
40:88:c7:2f:4c:f2:6e:d4:2d:e8:41:38:10:54:f9:46:80:61:
98:22:bb:48:e7:87:f6:5b:04:87:d1:ca:38:ec:38:60:cc:c0:
09:6f:47:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 14:31:17 2024 by rpki-client on console-ams.rpki-client.org