Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/tAMIO21t64w0VBNVRH6IQj1_Kj4.roa
File: tAMIO21t64w0VBNVRH6IQj1_Kj4.roa (raw, json)
Hash identifier: 9zUx6v5z3Hp9EaKW8M7y5cpWKg+ECZRwkk69b1zfUMw=
Subject key identifier: B4:03:08:3B:6D:6D:EB:8C:34:54:13:55:44:7E:88:42:3D:7F:2A:3E
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 018C246842042E1FF6C9582107F6BF3ACDC2
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/tAMIO21t64w0VBNVRH6IQj1_Kj4.roa
Signing time: Fri 01 Dec 2023 08:04:21 +0000
ROA not before: Fri 01 Dec 2023 08:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203847
IP address blocks: 185.206.52.0/23 maxlen: 23
185.122.44.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 03 Dec 2023 10:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:68:42:04:2e:1f:f6:c9:58:21:07:f6:bf:3a:cd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Dec 1 08:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b403083b6d6deb8c34541355447e88423d7f2a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:ab:0a:15:42:66:f4:a1:29:6d:58:3d:1f:
49:9e:26:78:5a:43:27:f5:b1:b5:ab:b8:b7:f7:a2:
9d:12:64:d3:64:1e:cb:5d:0f:aa:db:09:f6:66:53:
f1:c1:06:41:d9:14:58:e8:59:97:03:d1:ca:af:a5:
3e:f3:7f:45:5d:23:e0:4c:a2:a0:4a:0f:1c:35:15:
85:07:e9:72:ef:3d:3b:aa:5f:ed:64:b7:e2:1b:3d:
10:00:22:cf:e7:e4:61:e8:31:81:bb:66:ea:7d:95:
5d:b9:1b:3a:4d:eb:6c:6a:01:1b:47:a4:56:43:13:
54:49:47:b8:d5:7a:50:6a:5f:cd:c8:c1:2d:9f:5c:
66:ee:b1:82:83:c1:1e:1d:90:21:91:46:06:5d:91:
27:0b:16:de:e6:ab:75:d6:8a:13:b2:b7:db:30:14:
01:76:95:30:ab:34:bb:27:5a:09:45:e7:a5:ca:d0:
61:b0:52:12:93:a5:6a:4a:32:d9:46:81:9e:93:7a:
bd:85:2e:ba:b6:26:23:11:26:f6:bc:d4:e9:31:30:
73:ca:93:05:60:c5:0c:f6:c3:32:6a:8c:3d:59:75:
43:52:ac:c8:0a:b8:e7:52:11:1c:c8:b0:03:1f:12:
f1:b9:2a:7c:74:a3:c3:ca:c8:0d:78:b4:1c:c4:74:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:03:08:3B:6D:6D:EB:8C:34:54:13:55:44:7E:88:42:3D:7F:2A:3E
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/tAMIO21t64w0VBNVRH6IQj1_Kj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.44.0/22
185.206.52.0/23
Signature Algorithm: sha256WithRSAEncryption
52:88:82:f8:68:b4:8a:22:ad:be:96:3a:21:79:7d:37:81:3c:
f2:8f:62:f4:5a:9e:1c:76:94:e9:e2:fc:1e:e9:0d:dc:ac:23:
cb:cc:02:f7:0b:c7:5b:1e:6e:ca:6d:c3:a1:c5:4a:0f:3c:cd:
c1:1f:ce:2d:d3:25:79:b9:06:bf:42:6e:78:f5:28:0b:c5:32:
7d:c5:cf:1c:23:61:5d:9e:9f:3c:07:c3:4c:68:be:a8:db:0e:
f2:5b:83:68:dd:a1:ac:88:e3:b7:0d:b3:8c:e0:25:25:91:e2:
1c:4d:a5:f2:c8:e6:ba:fb:36:82:9c:6a:08:dc:52:30:41:e2:
47:35:48:45:ec:08:97:d5:ec:a9:ea:2e:bc:1a:cf:80:90:62:
cf:89:ee:04:8d:f9:22:25:ba:a2:7d:e8:b5:3e:ff:ee:b7:0b:
b4:b6:d0:5a:7f:20:21:d8:4a:42:3a:56:06:ac:d2:00:7c:6b:
82:3f:87:b6:16:d4:5c:19:46:a3:29:1e:6b:be:85:27:19:ce:
eb:74:f3:67:a4:91:b3:ab:17:bd:1b:49:2b:8c:60:d7:91:51:
95:b2:56:44:fb:1b:0c:35:bb:ca:25:15:17:28:cf:9e:e2:89:
19:d0:fe:e4:9c:65:90:b2:7e:7b:f7:13:0a:0f:d0:83:ab:16:
f0:4a:43:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:12 2024 by rpki-client on console-fra.rpki-client.org