Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/opD6w36d4KdpjhWJiMo2WqRzI5Y.roa
File: opD6w36d4KdpjhWJiMo2WqRzI5Y.roa (raw, json)
Hash identifier: TUlzuj5YbL7YEBEjQjDpgp/7YXKA2cRWW+DnK3f1wbw=
Subject key identifier: A2:90:FA:C3:7E:9D:E0:A7:69:8E:15:89:88:CA:36:5A:A4:73:23:96
Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial: 01856F26B59F47B0F91A1B3BC004E971AE40
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/opD6w36d4KdpjhWJiMo2WqRzI5Y.roa
Signing time: Sun 01 Jan 2023 21:04:45 +0000
ROA not before: Sun 01 Jan 2023 21:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204383
IP address blocks: 185.250.172.0/22 maxlen: 22
2a0c:fc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:b5:9f:47:b0:f9:1a:1b:3b:c0:04:e9:71:ae:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Validity
Not Before: Jan 1 21:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a290fac37e9de0a7698e158988ca365aa4732396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fb:9d:b0:e1:0e:d9:83:64:23:eb:71:15:04:
80:9e:f6:3b:78:6c:99:3a:8a:75:a5:62:1c:75:84:
52:ca:f2:ba:84:79:6c:fe:1b:56:4c:29:f9:4d:21:
fd:12:61:03:96:49:9b:13:1e:44:be:be:67:d8:61:
6b:92:d5:7c:ac:76:ab:a7:86:59:e0:14:ea:20:34:
51:8d:a9:d5:8f:88:b7:30:46:06:de:2b:88:91:48:
8e:b8:e0:9d:d6:a2:96:08:e6:fb:04:1f:1a:7b:79:
dd:73:c8:3d:26:99:02:c8:2b:10:b0:81:d1:19:75:
ea:dd:09:9e:48:9d:23:62:27:eb:3f:96:de:74:08:
5d:a6:93:e8:17:48:bc:a2:4c:21:d5:10:83:f2:ff:
19:81:ac:48:dd:97:46:77:af:b4:80:2a:4d:d3:2f:
9e:06:a0:93:14:65:ed:c4:f1:85:c5:86:fc:fb:85:
0b:88:55:a6:43:f1:38:90:27:e2:31:6b:c1:28:b8:
76:9a:c9:96:97:df:e5:59:8a:78:d4:4a:c4:70:a2:
81:96:67:fe:b0:1b:a8:32:6f:4b:b1:5c:9e:02:98:
94:9b:97:12:13:44:80:67:0b:fe:a1:41:86:f9:b3:
14:6f:94:a4:77:21:d3:cd:af:9c:d2:f0:b3:63:28:
4b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:90:FA:C3:7E:9D:E0:A7:69:8E:15:89:88:CA:36:5A:A4:73:23:96
X509v3 Authority Key Identifier:
keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/opD6w36d4KdpjhWJiMo2WqRzI5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.172.0/22
IPv6:
2a0c:fc0::/29
Signature Algorithm: sha256WithRSAEncryption
1f:b9:d4:f0:dd:cb:29:cb:d7:e4:17:1c:b2:bb:69:6c:f6:b5:
ad:ce:26:c8:12:0e:a3:ee:7c:75:72:42:2c:c7:4c:b0:c7:4c:
33:22:ec:42:42:5d:81:fa:4c:fa:6b:0c:79:dd:75:12:22:cb:
e9:99:07:4a:6a:ba:78:ab:76:8a:fc:b8:5e:c2:72:d0:0a:de:
b7:6e:a3:2b:6a:b3:f6:f3:85:51:ae:e3:5c:e7:39:2f:49:a8:
c5:bb:34:d3:7c:e0:07:a2:c0:16:ff:74:b7:79:ef:16:f9:98:
90:d1:a3:be:e6:86:a4:5a:85:7a:65:aa:af:5c:8f:df:f0:0d:
6e:81:3b:7b:ea:e8:25:85:a0:2a:27:88:91:80:b3:d0:1d:5d:
12:97:40:27:5d:b2:79:a0:d0:72:5c:3e:9a:63:4f:dc:92:3f:
05:76:41:ab:e8:e9:f2:93:64:c2:dc:bc:c7:d7:fd:da:25:f9:
d3:b9:f7:da:8a:3e:01:af:36:03:61:0c:7a:5b:fe:d1:0f:f5:
9f:9b:cd:da:de:2f:d2:89:4a:f8:f0:74:3f:6e:1f:b0:c5:fc:
23:4d:c6:22:46:38:40:d6:5a:ab:97:3d:64:4a:4e:91:be:a5:
fc:cf:90:eb:53:db:82:ea:da:64:f9:2e:2e:1d:16:4d:a0:59:
42:e5:73:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:57 2024 by rpki-client on console-fra.rpki-client.org