Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/r6t6vVyaOQp_7jUIanAEwwexnck.roa
File: r6t6vVyaOQp_7jUIanAEwwexnck.roa (raw, json)
Hash identifier: RKoJ8ttEa55QCdT+6o9onsftJe2J0PZyqbU2Ty/MsLc=
Subject key identifier: AF:AB:7A:BD:5C:9A:39:0A:7F:EE:35:08:6A:70:04:C3:07:B1:9D:C9
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 01857127834088D8DA752B169DB35880BF52
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/r6t6vVyaOQp_7jUIanAEwwexnck.roa
Signing time: Mon 02 Jan 2023 06:24:52 +0000
ROA not before: Mon 02 Jan 2023 06:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 185.180.82.0/24 maxlen: 24
185.180.83.0/24 maxlen: 24
185.180.80.0/24 maxlen: 24
185.180.80.0/22 maxlen: 22
185.180.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:83:40:88:d8:da:75:2b:16:9d:b3:58:80:bf:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: Jan 2 06:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afab7abd5c9a390a7fee35086a7004c307b19dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d3:7c:c6:2b:c9:b6:a4:5a:49:9b:35:2a:3d:
9f:7b:9e:d1:52:96:d7:e6:b0:5b:58:bf:a8:b5:f9:
a4:69:0d:ac:67:1e:dd:53:66:de:b2:c5:59:e8:fd:
1f:05:4f:07:be:a0:17:d4:a4:77:d2:1c:82:c7:c0:
13:db:20:ec:ad:74:5c:e3:ec:3b:4d:ab:64:a6:85:
b9:a7:b6:e2:0b:e0:e4:28:2c:93:5a:c0:0c:a1:3b:
1f:ea:a1:10:e7:8d:ca:b3:bb:ea:74:47:02:61:d9:
81:4b:b4:99:98:51:a2:7f:a7:d7:f3:7d:25:91:31:
ee:7d:24:c7:d5:f6:f6:95:82:f9:4d:ab:c8:5d:d1:
d2:0f:3c:c4:a0:4f:0a:a2:c6:e1:72:c6:87:e0:44:
d8:09:20:ef:5e:35:3d:f3:1e:ee:a9:e7:7c:af:fc:
de:a1:9a:c0:e9:f9:44:5a:1d:1d:a1:7f:50:e2:de:
e7:0b:ce:39:f4:e6:d5:cd:2f:6a:7b:a7:10:4b:4d:
cb:7f:9d:d5:ce:c8:6b:87:ca:96:78:7b:61:5c:ac:
76:43:eb:af:27:14:78:3f:41:78:96:27:24:78:78:
e4:81:ea:8f:5c:3c:ca:dd:dd:e7:37:49:e4:37:f9:
d4:e2:3d:48:04:d6:e6:77:62:6b:97:39:8d:2b:f7:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AB:7A:BD:5C:9A:39:0A:7F:EE:35:08:6A:70:04:C3:07:B1:9D:C9
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/r6t6vVyaOQp_7jUIanAEwwexnck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.80.0/22
Signature Algorithm: sha256WithRSAEncryption
83:56:d3:b6:d4:57:c0:c7:cc:d6:d5:a8:18:25:f6:97:3d:a3:
0c:08:9b:10:78:8b:66:38:16:fd:2a:d4:14:03:39:3d:2e:46:
e0:5d:f5:ae:7b:ca:e5:be:e7:b6:87:a2:ef:f2:e5:c6:2d:d0:
2b:74:e9:ef:9d:64:6e:69:12:10:bf:7b:a7:fb:85:e8:68:fb:
8d:bd:b8:84:d6:9e:b2:4a:5c:50:3b:c2:f7:1f:11:69:18:b7:
66:2f:80:4b:2b:6d:d9:01:c1:d4:5f:35:e6:55:ef:37:23:0e:
9b:27:8b:9f:ab:d8:fb:0b:58:11:bc:43:63:e0:ab:05:17:c9:
0a:85:26:55:e6:3f:3d:7d:f3:52:da:b5:d7:e2:b1:33:b6:a1:
e4:20:79:46:d9:05:65:e6:04:9f:5a:b8:eb:91:b5:eb:c8:bd:
64:d3:80:57:8f:1d:c1:dc:bc:2b:fe:46:db:57:a2:e2:af:e8:
cf:c0:39:9a:62:a0:07:4c:aa:18:7a:b6:25:b3:9b:bd:30:29:
cf:c3:56:f2:0c:ee:01:d0:c9:85:7b:fe:a3:f6:82:f1:78:f4:
31:3f:d2:d9:7f:61:c0:6c:60:5e:e1:1b:96:81:2f:c8:36:0b:
52:fd:52:b2:90:83:2e:eb:1c:f2:51:c2:f4:b3:35:24:b6:35:
d2:5a:39:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:42 2024 by rpki-client on console-ams.rpki-client.org