Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/koehB3bB4oqtUOOlr_ghMWYIUgw.roa
File: koehB3bB4oqtUOOlr_ghMWYIUgw.roa (raw, json)
Hash identifier: oo4GiD4r1a1VYnPHpx56+ies3ajQ7Drv8UM6z/RKNmc=
Subject key identifier: 92:87:A1:07:76:C1:E2:8A:AD:50:E3:A5:AF:F8:21:31:66:08:52:0C
Certificate issuer: /CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
Certificate serial: 0185708CB816D3A41A025F7BE0030363D3CF
Authority key identifier: 7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/koehB3bB4oqtUOOlr_ghMWYIUgw.roa
Signing time: Mon 02 Jan 2023 03:35:48 +0000
ROA not before: Mon 02 Jan 2023 03:35:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201187
IP address blocks: 185.49.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:b8:16:d3:a4:1a:02:5f:7b:e0:03:03:63:d3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
Validity
Not Before: Jan 2 03:35:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9287a10776c1e28aad50e3a5aff821316608520c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:01:e9:bb:63:64:7f:93:11:6b:7c:32:b7:98:
33:53:46:15:70:d0:68:ae:e5:e0:26:4b:d6:22:ac:
3d:2e:ba:aa:25:6d:11:24:89:57:4c:b7:f9:5d:a3:
58:67:88:ef:65:a7:2f:da:93:a7:e8:a7:21:41:d2:
69:fc:f3:d9:c0:93:b3:f5:61:f1:4b:e2:e6:4a:89:
70:e2:02:44:31:d6:9f:c6:03:93:a1:90:d8:12:97:
d2:59:99:5a:f3:0b:dc:fa:bd:9e:67:4c:10:b0:68:
c9:41:f0:0c:69:3a:b4:63:33:00:a8:34:61:4c:f1:
30:49:fd:03:ef:7a:53:c5:2d:ee:26:64:43:26:fd:
ad:8a:6b:64:55:4f:ec:23:f3:87:32:01:82:de:84:
cb:8d:ca:65:a2:78:db:27:d9:52:ee:32:31:59:11:
d1:18:b5:eb:c6:92:74:65:d7:66:fa:7d:60:f1:11:
74:3c:4f:60:8b:0c:bf:64:f2:31:28:48:cb:f2:27:
61:bf:08:48:d1:7a:7d:cc:5e:84:60:81:c6:57:be:
a6:a4:b2:f3:40:0f:91:d5:60:aa:49:38:ae:d4:43:
d9:1c:c9:15:5c:cc:27:8d:43:60:9a:31:67:d9:e6:
06:1c:1d:e9:f5:ef:c4:e6:ef:89:43:da:9e:0b:0e:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:87:A1:07:76:C1:E2:8A:AD:50:E3:A5:AF:F8:21:31:66:08:52:0C
X509v3 Authority Key Identifier:
keyid:7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/koehB3bB4oqtUOOlr_ghMWYIUgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.244.0/22
Signature Algorithm: sha256WithRSAEncryption
76:42:72:5b:aa:71:a2:fa:cf:8f:5e:fc:53:eb:e1:6f:df:47:
78:09:24:c9:2d:26:1e:5a:be:df:c8:2a:a7:9f:11:e7:ba:85:
36:82:2c:45:46:43:91:1a:49:79:6a:2c:a5:a0:74:d0:31:01:
63:0e:b9:1e:fc:13:10:cc:b1:b6:90:bd:a8:94:11:9b:38:74:
03:66:c9:e4:62:e7:f3:f1:e1:12:a6:80:f5:5f:84:6c:c2:fd:
cb:81:52:5f:44:f6:59:ba:3f:53:1d:ac:f9:e8:54:c7:5f:90:
a3:54:a3:e4:b7:f7:b7:9a:7d:98:c9:39:bf:e9:8a:ab:51:8d:
0c:31:13:5e:fd:71:8b:70:1f:68:ac:04:64:92:98:d8:55:bd:
ed:03:da:5a:0a:1f:d3:9c:86:4b:6f:4e:3a:c5:d3:5f:cc:6a:
ef:a9:22:33:19:e7:a4:e4:ce:aa:eb:58:de:34:53:58:1d:0e:
7c:76:0c:0a:cb:0a:90:c3:4d:24:8d:0a:fe:5a:c9:ea:54:ee:
e0:04:11:4f:a5:c1:45:4c:9b:46:cc:46:c3:6f:9c:77:6d:91:
ca:c5:ae:05:94:9f:e2:83:cd:5d:8a:a4:97:60:14:55:ef:04:
4b:8b:be:53:8d:5b:1c:83:06:bb:0d:aa:52:07:4a:38:83:93:
db:38:44:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:48 2024 by rpki-client on console-ams.rpki-client.org