Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/dSrqWgMiwPQ7fhQYM5q5M7yXd2s.roa
File: dSrqWgMiwPQ7fhQYM5q5M7yXd2s.roa (raw, json)
Hash identifier: q88SPA7qUhreyNH06gbIwRejAtfXV2kcwwIZc0iJfGY=
Subject key identifier: 75:2A:EA:5A:03:22:C0:F4:3B:7E:14:18:33:9A:B9:33:BC:97:77:6B
Certificate issuer: /CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
Certificate serial: 01856BF7E00C83D7F691C2D40297D432931E
Authority key identifier: CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/dSrqWgMiwPQ7fhQYM5q5M7yXd2s.roa
Signing time: Sun 01 Jan 2023 06:14:44 +0000
ROA not before: Sun 01 Jan 2023 06:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61246
IP address blocks: 185.14.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:f7:e0:0c:83:d7:f6:91:c2:d4:02:97:d4:32:93:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
Validity
Not Before: Jan 1 06:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=752aea5a0322c0f43b7e1418339ab933bc97776b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b0:8f:15:01:64:c1:a0:85:8c:cc:24:9c:e2:
e9:e5:ae:03:81:a4:06:52:46:19:d7:90:ef:67:49:
6e:2f:5b:4d:69:75:df:e6:d5:e9:0d:c9:1a:2b:8b:
e0:e7:27:a8:e9:4a:d5:33:89:c0:9c:63:21:fb:39:
3c:00:6a:02:24:26:93:7e:b7:c4:ac:a2:d1:95:df:
ca:a2:ac:19:fa:b2:e1:60:e0:a5:3d:78:81:c8:5d:
6d:15:c4:ea:6d:d2:a7:8f:fe:9d:dd:9a:e3:25:6a:
f7:27:72:77:2d:35:9a:ca:54:8e:92:e7:b9:09:7e:
49:60:05:43:22:26:f0:d0:68:b3:f5:b0:f5:01:04:
42:b9:3a:76:50:5b:22:cb:4a:f5:21:e1:56:b2:4c:
86:fd:c2:51:ed:ac:f0:9b:ba:a0:42:96:6e:58:98:
14:06:28:52:7f:b1:0a:24:27:7f:95:6b:b0:b2:b0:
7d:5d:09:62:0d:ca:2e:93:66:81:51:45:5e:08:97:
e8:8e:d3:0b:a5:72:85:cd:70:72:5e:e3:72:e7:65:
25:b9:a6:41:a3:6e:2e:5b:90:1b:0d:1c:09:e1:57:
4b:5d:cd:27:70:6b:9f:e6:42:91:f5:e8:cb:f3:5c:
e0:37:15:2d:76:74:00:ae:ed:81:59:a5:d7:aa:44:
f3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2A:EA:5A:03:22:C0:F4:3B:7E:14:18:33:9A:B9:33:BC:97:77:6B
X509v3 Authority Key Identifier:
keyid:CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/dSrqWgMiwPQ7fhQYM5q5M7yXd2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.80.0/22
Signature Algorithm: sha256WithRSAEncryption
38:71:d4:f5:0e:79:52:51:d3:ae:b3:91:5d:2d:11:96:9a:88:
a5:c5:13:40:e8:88:bc:60:cc:9f:2a:0f:d5:a3:d8:3b:fe:d2:
9b:8f:bc:5f:2d:85:78:bd:b2:39:39:3f:5e:b8:19:e8:3d:3b:
6c:e3:42:33:8d:2d:47:1c:90:43:48:01:6f:54:8f:68:b0:bb:
d1:d9:6a:f4:ed:a8:71:d0:87:01:78:fc:24:b6:de:d4:9a:19:
4c:04:3a:3d:f3:cc:ad:9c:35:63:c7:50:41:3c:d9:45:65:6b:
56:00:06:02:9a:95:97:be:0a:4f:5a:b5:d7:18:98:16:48:40:
f6:82:b6:7f:f7:7d:21:e2:0a:15:0d:dc:24:a1:b0:f0:f1:75:
64:33:22:6d:03:60:a8:91:07:0a:5d:66:44:f7:88:b0:a5:2b:
df:f6:91:18:93:59:1e:ed:3f:35:c8:21:6d:96:20:ca:a3:bb:
18:11:2e:08:e6:d2:ed:a4:81:33:8b:21:96:c1:a2:43:5d:2a:
a8:cc:9e:ca:f5:ff:2a:02:91:91:0b:db:d3:ba:24:a6:0b:3e:
26:a0:ef:02:09:59:be:29:25:0a:ce:92:24:65:f1:f4:03:0b:
16:f8:49:e3:31:4c:06:07:61:25:18:6a:e7:3f:a6:f2:49:f0:
d7:57:92:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:01 2024 by rpki-client on console-ams.rpki-client.org