Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/BeKc6X8UWWOJXbD5kgj8gRVWEtY.roa
File: BeKc6X8UWWOJXbD5kgj8gRVWEtY.roa (raw, json)
Hash identifier: r9kfqJKbTutSkihjkyFVGQf/YHGTHErpJ231PKbn9eY=
Subject key identifier: 05:E2:9C:E9:7F:14:59:63:89:5D:B0:F9:92:08:FC:81:15:56:12:D6
Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029
Certificate serial: 01857054C68AD9BFBBECA85EE5057F534A52
Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/BeKc6X8UWWOJXbD5kgj8gRVWEtY.roa
Signing time: Mon 02 Jan 2023 02:34:41 +0000
ROA not before: Mon 02 Jan 2023 02:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43594
IP address blocks: 185.184.232.0/22 maxlen: 22
185.184.233.0/24 maxlen: 24
185.184.232.0/24 maxlen: 24
185.184.234.0/24 maxlen: 24
2a0b:4380::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:54:c6:8a:d9:bf:bb:ec:a8:5e:e5:05:7f:53:4a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029
Validity
Not Before: Jan 2 02:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05e29ce97f145963895db0f99208fc81155612d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:19:91:56:a4:88:64:0b:1e:06:4a:0c:4c:
af:f5:8c:83:3f:e5:af:5b:ef:d8:cb:c2:27:09:7a:
c8:07:87:1e:f2:35:e4:2d:a8:c4:41:b5:80:8d:ad:
80:93:0e:92:c0:d8:75:9d:ea:f9:89:8d:79:2d:a4:
86:29:33:01:00:96:01:a1:32:a7:06:d4:7c:4e:a1:
41:e4:3e:ef:8f:9a:92:ac:fa:26:16:00:48:64:06:
c0:34:ca:91:b1:a7:a0:b2:21:f2:e8:3e:51:06:5f:
99:95:2e:e1:57:d5:47:b3:b4:ca:0a:aa:2c:5a:f6:
c9:a4:97:a2:74:09:b8:be:5f:cb:08:0e:61:d0:98:
ed:c7:24:6b:9f:0b:77:d0:04:c1:37:df:90:15:6c:
9e:ec:ec:28:22:ac:84:f1:a5:5a:32:e4:f3:fd:c3:
f8:e0:75:11:4e:3d:74:e2:fb:94:e9:c9:6c:76:a9:
d4:79:96:b3:f0:1b:7b:81:26:33:ab:a3:6f:3a:cd:
37:14:8d:b0:ad:55:4f:b3:7a:14:32:0a:60:9e:2d:
57:d9:72:e7:7a:17:b0:2f:9d:91:66:90:cc:20:f8:
80:c0:5a:23:9b:a4:e0:b7:7e:a5:9b:7d:d6:21:20:
3c:d6:db:37:14:71:3e:dc:50:8a:d4:d1:a7:50:43:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E2:9C:E9:7F:14:59:63:89:5D:B0:F9:92:08:FC:81:15:56:12:D6
X509v3 Authority Key Identifier:
keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/BeKc6X8UWWOJXbD5kgj8gRVWEtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.232.0/22
IPv6:
2a0b:4380::/32
Signature Algorithm: sha256WithRSAEncryption
6e:02:0d:af:74:04:bf:14:eb:d1:66:34:f8:e6:ba:12:02:fa:
f9:fc:6e:43:1f:f1:a6:44:59:c8:8a:8f:ea:a0:5a:ad:e1:53:
37:ef:1c:65:3d:d0:67:a7:e5:1b:06:47:48:22:8f:fb:e7:f6:
dd:bb:7f:b8:96:cb:4c:a2:06:03:c0:66:d9:f9:16:8a:85:bd:
a6:25:61:68:64:e0:20:18:3c:c0:e3:09:f2:62:ad:ac:5f:33:
c6:de:ff:02:db:be:d1:bd:50:07:49:61:c7:41:ee:8a:c5:59:
ba:a1:6b:5e:f9:5e:5d:dc:9d:78:43:ad:03:ca:0c:40:dc:b6:
86:20:b3:00:2a:89:53:2f:28:a3:b9:95:0c:98:da:78:e1:c3:
aa:b2:60:75:10:cd:d5:b6:aa:dc:b2:f8:d4:ae:05:cf:37:ff:
8a:fa:f6:c9:67:e8:c6:ac:a4:c9:e2:98:ff:ef:74:15:46:22:
e6:f0:ba:ee:c9:b6:4b:43:10:2a:89:7f:87:7d:92:73:87:9b:
5c:cd:41:59:c6:01:21:14:0b:18:b5:06:24:37:11:fb:d9:a9:
42:8b:f5:73:b7:b5:8a:72:5f:23:99:05:d3:7b:78:98:2e:65:
ca:e2:91:9d:25:89:ed:ec:7e:82:a6:ac:c1:44:3d:aa:39:d4:
6d:d2:0f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:03 2024 by rpki-client on console-ams.rpki-client.org