Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/aaeBqozRLWYl7evarg7YRVIQL5I.roa
File: aaeBqozRLWYl7evarg7YRVIQL5I.roa (raw, json)
Hash identifier: mZnEYvnFMunc72xx+oWekQ1MNuaSyIVYwXRoVSrWBmY=
Subject key identifier: 69:A7:81:AA:8C:D1:2D:66:25:ED:EB:DA:AE:0E:D8:45:52:10:2F:92
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 01856C0104C9CFFFCADBA3D6EEC603880D51
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/aaeBqozRLWYl7evarg7YRVIQL5I.roa
Signing time: Sun 01 Jan 2023 06:24:44 +0000
ROA not before: Sun 01 Jan 2023 06:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 185.184.172.0/23 maxlen: 23
185.184.174.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:04:c9:cf:ff:ca:db:a3:d6:ee:c6:03:88:0d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Jan 1 06:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69a781aa8cd12d6625edebdaae0ed84552102f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:9c:7f:b7:8b:b9:59:d0:5e:ec:b9:12:54:
f1:c3:0e:60:61:2b:85:c0:e2:5e:ec:4d:a8:97:a4:
47:9c:38:83:3c:7f:59:99:4c:c7:95:88:5c:93:9a:
3d:a2:b3:d8:5f:c0:21:09:54:d4:23:53:c7:47:3f:
99:cd:eb:8e:40:55:65:0f:e1:16:ee:ea:c5:bb:47:
0e:99:83:70:91:6e:da:e0:62:d9:25:58:53:72:2d:
b2:0c:6d:5a:9d:bf:f6:44:62:73:11:92:44:e6:22:
1d:84:9d:3f:4c:a0:c4:65:a1:6f:c9:29:4b:a6:1c:
34:c3:1d:5a:f4:6b:9c:4f:52:70:ad:b7:5c:70:57:
0a:58:d6:03:8b:63:af:d4:d2:bd:09:9f:13:61:00:
32:57:4f:6b:e3:80:5c:05:17:02:e2:61:ea:c4:be:
91:a8:b0:99:c1:bd:0e:93:58:76:8e:49:16:e4:56:
13:53:51:b2:97:16:07:fe:de:9b:d5:7e:ff:9c:df:
fe:32:48:de:30:d2:2a:69:6a:67:ef:e4:b5:f5:85:
ec:60:1e:aa:f2:a9:78:bb:10:79:0a:50:0a:c2:9c:
9f:91:cb:58:e8:4b:1a:51:24:26:4f:86:e5:1f:3d:
c7:85:d9:89:85:12:04:91:40:e5:39:0c:8a:6a:01:
4c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A7:81:AA:8C:D1:2D:66:25:ED:EB:DA:AE:0E:D8:45:52:10:2F:92
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/aaeBqozRLWYl7evarg7YRVIQL5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.172.0/22
Signature Algorithm: sha256WithRSAEncryption
75:c1:8a:8b:9b:d8:05:6b:65:8d:32:38:69:5c:93:ca:b1:23:
e5:74:a8:e5:f0:2e:e2:39:47:91:9d:b8:cc:08:03:31:b7:4e:
1a:87:82:07:da:c4:2c:27:14:0e:b0:e5:b3:45:5c:9d:ac:8a:
30:ba:86:41:cb:a3:93:44:00:77:85:04:f4:b3:18:06:ca:b2:
5e:74:8a:dc:16:f8:ca:4b:85:4f:c2:68:f5:69:e3:7f:4b:ab:
55:20:d4:9b:ef:75:78:3a:87:7a:ab:ac:d1:8e:23:8c:f1:d6:
83:d2:14:b2:09:2e:ca:da:97:c8:28:d5:4b:69:29:04:cc:36:
d1:ab:4e:69:3e:6c:7b:48:b5:b9:14:a6:a6:b4:83:b1:f8:85:
d9:04:8c:ad:ff:d0:21:a4:0a:29:25:53:41:cb:eb:b2:ae:4d:
96:f8:b2:24:1e:45:97:2f:b6:1a:24:9b:09:4c:09:e5:5e:6a:
d6:62:68:79:52:2f:f8:1c:42:95:84:ba:7d:d7:39:b8:23:22:
a0:51:ad:f4:fb:de:b1:d6:0c:73:bf:90:67:f4:a7:f0:19:e0:
d0:c4:74:9a:af:0e:5d:ed:9d:be:89:20:07:c1:86:c3:2f:6c:
67:7f:78:18:ce:c8:15:64:ff:d1:cb:6f:02:97:69:9b:27:26:
b7:a4:b7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:55 2024 by rpki-client on console-ams.rpki-client.org