Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/KVUydxgWKyjzU-M5hEiTwVcVEtg.roa
File: KVUydxgWKyjzU-M5hEiTwVcVEtg.roa (raw, json)
Hash identifier: PtxI43cDYr0tPrCSK4hYLEHgMbtjHmT+i0c4bdou3dU=
Subject key identifier: 29:55:32:77:18:16:2B:28:F3:53:E3:39:84:48:93:C1:57:15:12:D8
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 0186CC6233703B7C6A0E493601541C1ABC42
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/KVUydxgWKyjzU-M5hEiTwVcVEtg.roa
Signing time: Fri 10 Mar 2023 16:37:13 +0000
ROA not before: Fri 10 Mar 2023 16:37:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.69.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 May 2023 12:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:62:33:70:3b:7c:6a:0e:49:36:01:54:1c:1a:bc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Mar 10 16:37:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2955327718162b28f353e339844893c1571512d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:df:8c:d5:38:a0:74:39:6b:1b:d6:88:57:11:
47:bd:51:90:9c:37:b0:6c:2c:8b:c1:2b:42:ab:d3:
0c:7e:33:54:e8:4e:af:03:29:3d:6c:93:37:68:a1:
0f:bb:a7:24:d0:60:f2:8d:f0:a8:a3:70:b1:ab:5e:
58:fa:d5:1d:bc:b5:aa:03:95:61:8f:1a:93:56:fb:
3a:f6:ee:e2:e2:61:41:06:50:e1:71:c2:6a:4f:4f:
c0:b5:34:65:11:63:e1:91:13:4b:eb:b8:24:0b:cf:
50:6f:2d:25:c1:1e:83:0e:7d:f8:0b:bd:69:3c:87:
84:c2:ce:ba:44:51:68:49:b9:d3:00:dd:24:b5:b6:
bc:be:35:ee:96:04:06:33:23:6e:45:1c:dd:5a:78:
93:3d:a1:70:e9:83:70:a4:1e:f9:9c:78:e6:68:dc:
33:9e:7f:03:d2:5d:d3:9c:0f:ce:b5:61:ac:58:7a:
c1:c8:bb:36:83:9d:3f:3f:53:e8:09:37:9a:e0:fb:
1e:f6:50:4f:89:32:a3:5a:05:69:1c:27:5b:7a:3a:
85:09:04:7a:3a:b6:ef:a6:d0:61:f1:8a:fc:5f:56:
4b:f8:09:7f:77:f3:34:49:c5:70:9f:ac:88:c0:c6:
6b:16:1a:4f:0a:11:81:91:65:8f:6a:25:ed:57:18:
7a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:55:32:77:18:16:2B:28:F3:53:E3:39:84:48:93:C1:57:15:12:D8
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/KVUydxgWKyjzU-M5hEiTwVcVEtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.220.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:92:57:1a:b3:27:c6:51:98:2d:8c:20:08:c7:54:50:d2:72:
85:db:b7:36:77:7a:7b:61:93:33:eb:a9:1a:6d:26:58:e0:b2:
2b:bd:84:86:f9:b3:2d:2b:7d:dd:dc:1c:bc:34:e6:0d:e7:81:
9b:c8:32:27:9b:5b:61:fd:ab:76:62:d7:1a:92:12:70:88:41:
5c:4d:4c:cc:fe:7c:13:d6:7c:10:cd:49:65:9e:9c:da:52:29:
c0:f6:8a:ba:cc:9e:c5:28:40:ed:8c:f3:ec:e5:31:ef:0f:2c:
9b:af:7f:e0:9d:8a:24:63:46:60:3b:a2:8b:5a:89:8d:27:4b:
f3:63:db:e7:e4:84:41:d7:a2:5d:a0:10:6c:cd:0f:c6:8f:e2:
d3:ed:35:52:ee:27:48:a7:57:2f:50:4f:3f:03:5e:17:4a:0a:
97:aa:fe:5b:11:9e:ac:af:ad:df:5d:a7:94:a9:35:43:cc:40:
c7:b9:d7:f8:0a:53:ce:a3:3f:a3:2c:f2:4e:93:de:22:dc:03:
4f:48:53:92:68:66:bf:a3:ee:76:75:05:8e:d1:30:07:b3:a8:
2a:9c:aa:82:59:81:23:e2:9e:79:e0:9c:98:96:96:a5:6e:4b:
be:29:5e:c7:fb:f8:cd:49:fd:09:f5:ce:f4:17:39:9a:68:1c:
40:81:5d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:23 2024 by rpki-client on console-ams.rpki-client.org