Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/iKXJQaMCfMA-Ll70mR1hdL9nSQw.roa
File: iKXJQaMCfMA-Ll70mR1hdL9nSQw.roa (raw, json)
Hash identifier: hY4Lx4Uf6oGbWNeGI+fiqZeMYbfkWyazSy0a/zkOYvs=
Subject key identifier: 88:A5:C9:41:A3:02:7C:C0:3E:2E:5E:F4:99:1D:61:74:BF:67:49:0C
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 01856EA6BB94234DDE45016A16376CDF438C
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/iKXJQaMCfMA-Ll70mR1hdL9nSQw.roa
Signing time: Sun 01 Jan 2023 18:44:58 +0000
ROA not before: Sun 01 Jan 2023 18:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6908
IP address blocks: 185.215.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:bb:94:23:4d:de:45:01:6a:16:37:6c:df:43:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: Jan 1 18:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88a5c941a3027cc03e2e5ef4991d6174bf67490c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:04:c5:d9:37:6b:c2:49:68:69:8e:96:35:
ae:a5:9b:5f:03:d5:5a:d4:0c:d8:f0:b5:47:b5:96:
1c:0a:20:2c:9c:58:05:ac:c8:a0:1b:05:9e:2f:51:
6b:03:ce:37:21:ed:2e:ee:5c:4e:6e:b5:18:1a:e1:
79:ae:8a:fb:f5:4a:4d:59:dd:73:26:19:90:37:6e:
6a:33:98:60:c3:e4:7a:52:8b:6a:6e:58:96:76:13:
54:45:ea:d9:2e:30:ed:9b:d5:ec:ec:1e:1e:9f:4d:
92:65:84:73:4a:c2:68:d6:09:f8:24:61:33:3b:f4:
a9:ce:bd:8a:0a:22:f7:03:6f:c1:b2:22:a6:8a:6f:
f9:30:87:cf:f8:2f:47:91:9d:98:98:e0:a2:94:0a:
ba:9c:75:ae:60:17:fc:b7:fa:7a:b3:3a:6b:54:72:
61:6f:57:9e:49:b5:ce:a7:25:49:ca:6f:ce:c3:4c:
a9:6f:0c:43:05:9c:d7:38:3b:94:9f:49:1b:ba:eb:
0a:99:75:58:a5:79:80:fe:c3:09:9f:a8:dc:4d:b7:
db:41:a4:ab:11:40:03:ee:1e:e3:99:00:ba:8e:11:
82:18:7d:7d:33:20:ce:8b:da:22:03:37:ae:67:7d:
fe:cd:2a:6f:3e:80:f2:3b:4f:a6:93:90:99:73:6b:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A5:C9:41:A3:02:7C:C0:3E:2E:5E:F4:99:1D:61:74:BF:67:49:0C
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/iKXJQaMCfMA-Ll70mR1hdL9nSQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.36.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:6d:fc:8c:d3:ed:f3:47:e9:b6:ca:91:89:ed:4c:30:09:ca:
1e:e1:df:b9:77:68:1e:c5:db:f1:32:d6:3d:8c:e4:ce:9e:81:
32:98:65:c5:82:a0:07:5a:86:97:2f:52:15:f7:1c:2b:77:51:
5b:31:4d:04:bc:db:c3:ca:d9:dc:00:6e:9a:4c:c2:eb:76:fd:
75:30:db:5b:c6:6f:9d:e2:85:22:22:98:f8:39:5c:61:26:0e:
90:78:4e:11:a4:de:b2:ef:73:73:8f:02:65:d2:bb:cf:91:d4:
3f:20:9b:18:b1:39:56:87:52:50:48:09:01:5a:fe:cc:d8:33:
31:c5:a4:b4:e1:91:8b:f3:ff:f5:a6:96:d5:24:f9:58:51:47:
b8:80:c4:50:63:89:1f:4f:87:ef:dd:31:92:1f:2a:db:f1:95:
af:08:60:2b:78:67:5b:fd:83:c7:92:07:5a:d6:7b:be:6f:d7:
2a:4d:7c:0c:48:cf:ea:8d:72:64:6d:2e:67:0b:37:26:9a:8e:
1c:04:bd:6c:da:bf:46:73:e0:66:5d:2e:ef:ce:c5:0f:11:99:
d5:d2:e9:81:65:85:d2:c9:fd:a9:72:ed:35:bb:09:ab:cb:97:
da:22:cf:c1:bf:75:67:c4:25:82:e2:15:3c:88:5e:64:8b:b7:
53:67:ba:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:17 2024 by rpki-client on console-ams.rpki-client.org