Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/RZ--x1LSNjJb3y3vZZBy9NC9yl8.roa
File: RZ--x1LSNjJb3y3vZZBy9NC9yl8.roa (raw, json)
Hash identifier: VtoOJTe8rVNVlQ0Oa4m4HfgEa4r/osSbnrqBj3yo1SE=
Subject key identifier: 45:9F:BE:C7:52:D2:36:32:5B:DF:2D:EF:65:90:72:F4:D0:BD:CA:5F
Certificate issuer: /CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Certificate serial: 018571B0F103B214DAC3E07D163291C7CE17
Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/RZ--x1LSNjJb3y3vZZBy9NC9yl8.roa
Signing time: Mon 02 Jan 2023 08:54:59 +0000
ROA not before: Mon 02 Jan 2023 08:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206420
IP address blocks: 185.212.12.0/22 maxlen: 22
185.186.248.0/22 maxlen: 22
2a0b:70c0::/32 maxlen: 32
2a0b:8c80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:f1:03:b2:14:da:c3:e0:7d:16:32:91:c7:ce:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Validity
Not Before: Jan 2 08:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=459fbec752d236325bdf2def659072f4d0bdca5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:fe:3a:5a:df:a5:aa:e4:f9:6a:22:d2:78:
46:4b:a5:1f:25:38:99:3e:ff:62:50:d5:46:b7:74:
d4:86:68:8c:c8:62:16:05:f0:bf:4c:27:83:a1:e9:
24:42:18:96:5a:f1:9e:20:08:d5:25:53:e4:77:d6:
d8:4f:96:71:4c:9d:5d:cd:15:58:71:90:76:53:ee:
e4:4c:60:89:63:81:71:2a:a4:8b:b4:9c:9b:74:5e:
8f:c5:9a:ab:7d:9a:25:f1:b2:fd:05:a8:1b:89:01:
a2:c1:e7:57:1c:ba:77:0a:51:c6:40:7e:26:a4:e1:
23:87:b3:16:14:58:37:13:3d:db:d1:f1:e3:e1:9b:
bb:50:31:35:05:e5:e6:d5:24:82:2c:cb:72:84:23:
c8:a9:cb:05:4b:00:4b:7c:b4:de:69:ac:f5:64:46:
8e:16:df:0a:81:a2:76:95:40:18:86:6b:c7:81:93:
fd:e9:18:a2:62:9d:f5:5a:62:f8:06:67:74:a2:48:
18:f3:a4:6e:6b:40:f1:95:0f:6d:6d:b6:d4:ca:d3:
4b:b1:5e:b8:fd:10:e5:ae:0c:36:62:2d:40:87:2f:
f3:66:b1:83:c9:f3:e1:e6:17:2f:2a:1a:15:09:82:
52:fb:9d:5e:52:2e:9c:c5:a3:17:c8:59:ab:36:7e:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9F:BE:C7:52:D2:36:32:5B:DF:2D:EF:65:90:72:F4:D0:BD:CA:5F
X509v3 Authority Key Identifier:
keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/RZ--x1LSNjJb3y3vZZBy9NC9yl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.248.0/22
185.212.12.0/22
IPv6:
2a0b:70c0::/32
2a0b:8c80::/29
Signature Algorithm: sha256WithRSAEncryption
8e:07:ef:71:f1:3b:fc:39:1c:59:1e:d4:7b:36:16:c2:40:57:
14:04:42:d7:0b:be:91:94:a9:78:eb:ba:af:7f:b1:54:4e:c3:
8b:c2:83:56:a8:a6:ec:34:f8:33:a3:2b:b5:86:fc:91:b4:2e:
0f:43:e9:4b:b0:2f:bb:9e:f0:32:a6:42:ff:ef:b3:70:59:44:
73:94:c2:76:fc:30:e8:e6:5f:0e:bf:25:94:50:84:9e:57:91:
9c:5e:e1:a1:1a:1b:70:5d:86:2d:e7:a4:32:b1:6f:98:54:ac:
13:ca:45:91:eb:aa:9d:ff:51:1a:f3:81:f7:ea:68:64:61:e2:
79:4c:ac:b6:94:2c:ac:a2:0a:64:49:6f:49:cd:76:cc:ab:d9:
bc:a3:77:41:b5:08:99:be:5f:80:8c:ee:e7:e4:9a:fb:09:a4:
ba:f9:22:93:68:86:ae:72:b1:e4:c6:f7:99:9f:75:b8:c7:74:
57:74:c9:b6:d6:04:ac:33:48:42:01:8d:e1:3d:5e:dc:4d:6f:
71:4a:f7:04:da:f1:7d:a1:29:1d:c9:21:ce:38:fc:ba:7c:71:
c0:bd:c7:34:a7:ce:4d:b7:2a:77:0c:1b:e5:20:cf:f6:5a:3b:
66:eb:30:a4:91:e1:44:24:6c:85:63:72:09:28:2f:c7:28:d9:
96:4c:6d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:46 2024 by rpki-client on console-ams.rpki-client.org