Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/nJ_CElDXfoHCc473AoGzxG5rmFo.roa
File: nJ_CElDXfoHCc473AoGzxG5rmFo.roa (raw, json)
Hash identifier: zuo5wGTmpgvM1YM4un0306dyJp1wESfJVDL+q6rrroA=
Subject key identifier: 9C:9F:C2:12:50:D7:7E:81:C2:73:8E:F7:02:81:B3:C4:6E:6B:98:5A
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 01856BEED41509F0EAF87B969153CFE1690D
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/nJ_CElDXfoHCc473AoGzxG5rmFo.roa
Signing time: Sun 01 Jan 2023 06:04:52 +0000
ROA not before: Sun 01 Jan 2023 06:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59659
IP address blocks: 185.220.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:d4:15:09:f0:ea:f8:7b:96:91:53:cf:e1:69:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Jan 1 06:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c9fc21250d77e81c2738ef70281b3c46e6b985a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e2:07:dd:15:26:f2:61:b7:0a:7c:5d:59:d3:
c4:01:b6:d5:38:d3:af:f1:4b:7c:69:9d:98:27:11:
c4:39:d3:9a:b0:87:95:39:da:78:5e:9f:29:ea:e3:
5d:43:e9:00:42:fc:8a:54:5c:96:f0:fa:92:30:42:
36:f7:99:2c:82:75:00:32:82:3d:1a:b2:52:e4:50:
be:2a:b2:59:68:7d:09:21:28:40:08:02:7e:ee:8a:
54:52:df:32:3d:ee:66:be:52:d0:93:6b:5e:d7:ea:
d2:9b:60:96:79:e2:6a:87:cf:84:ea:80:a7:12:5d:
22:ac:4e:60:51:7f:53:48:84:a3:ce:64:55:fb:25:
2a:e8:56:c3:9e:11:bb:1b:27:49:d0:e5:6a:6b:95:
34:aa:85:f9:31:74:ee:b2:e3:16:7b:97:37:6e:d2:
fa:a8:bc:0d:b2:ab:3c:24:bd:b6:3d:d7:13:db:87:
d9:68:90:46:2e:0f:9b:4c:0c:2b:65:fa:ad:8f:e8:
d8:80:ad:a2:81:0e:40:aa:bc:af:2c:80:02:4e:a6:
d2:9d:8c:8a:b9:b4:49:04:8f:3a:44:64:25:3c:ca:
31:b1:6c:b6:ea:86:d6:e1:d9:0f:07:4b:e2:88:db:
96:7b:1a:92:5f:e8:a6:b0:d2:a3:e8:f9:ac:21:69:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9F:C2:12:50:D7:7E:81:C2:73:8E:F7:02:81:B3:C4:6E:6B:98:5A
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/nJ_CElDXfoHCc473AoGzxG5rmFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.88.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:19:7f:2e:84:89:a0:45:e6:96:6d:5e:50:ee:e2:02:8b:49:
ba:f3:58:82:47:8b:7d:3b:d0:2c:82:d3:ed:a8:76:1f:3a:ae:
20:77:82:54:78:b0:31:4a:d4:1c:4d:19:c1:cf:58:2b:e4:b9:
26:06:6c:6a:7c:bd:b8:2e:d2:ed:c2:7b:e0:a9:7f:73:ca:3d:
6d:a5:8b:af:42:ee:84:00:85:7b:df:d7:6d:e1:22:27:1f:f7:
ef:8e:fb:00:38:44:bf:79:7b:1c:71:7c:16:23:83:17:83:9e:
ea:2a:6d:17:66:6c:1d:98:0a:19:87:ab:45:35:99:bb:24:08:
60:a4:0c:f0:38:b9:91:d8:70:99:9f:05:75:00:a3:81:68:17:
0e:69:82:d6:36:e5:a3:a9:6c:7b:3e:fb:c0:8b:ba:b0:64:a2:
12:b3:03:c5:a4:a9:42:fc:b9:12:c3:3b:25:0c:78:ea:15:51:
7a:a7:b9:07:a4:ce:4a:83:7c:f7:f6:51:91:50:37:40:e9:0d:
9c:f8:9b:0c:f4:0b:eb:10:ed:7f:59:31:f0:20:08:70:1f:8a:
07:8e:fb:5d:6b:46:1c:29:56:7a:ac:b2:36:19:3f:ba:2e:47:
5c:6f:16:2d:cd:4a:ec:67:39:9d:a7:54:e3:86:30:fd:47:bf:
81:11:27:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:06 2024 by rpki-client on console-fra.rpki-client.org