Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/eyMZlJi-rMjLQpVONCoFBf6VHBA.roa
File: eyMZlJi-rMjLQpVONCoFBf6VHBA.roa (raw, json)
Hash identifier: 9/RU84yfOLc/NFE35WFSDcs/+byU9tLuslc9yYZYnRk=
Subject key identifier: 7B:23:19:94:98:BE:AC:C8:CB:42:95:4E:34:2A:05:05:FE:95:1C:10
Certificate issuer: /CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Certificate serial: 01856FA6FDA5F5730C4519B5BB1D07520671
Authority key identifier: 28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/eyMZlJi-rMjLQpVONCoFBf6VHBA.roa
Signing time: Sun 01 Jan 2023 23:24:52 +0000
ROA not before: Sun 01 Jan 2023 23:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44545
IP address blocks: 185.212.92.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:fd:a5:f5:73:0c:45:19:b5:bb:1d:07:52:06:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Validity
Not Before: Jan 1 23:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b23199498beacc8cb42954e342a0505fe951c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1d:3a:68:1a:ec:4d:e8:f7:0b:fb:a2:dc:df:
ca:17:7c:2b:50:51:f7:c1:59:c0:26:1f:c8:2b:87:
91:8a:30:61:78:fa:eb:f7:7d:07:69:d7:5f:59:1c:
33:25:c9:55:92:ee:0d:9a:24:5c:cc:ca:c8:d2:a4:
1b:d9:78:73:ee:3a:5f:49:78:f4:27:ad:49:fa:48:
aa:9f:4f:0a:84:20:d2:3e:91:eb:8f:55:a4:df:e7:
1a:1e:70:99:6f:1f:61:b6:19:16:86:8e:b7:02:4e:
4e:05:b3:6c:9e:93:28:a5:c8:05:d3:41:5d:af:52:
f9:a9:af:3b:c2:04:fa:80:12:39:b2:82:66:ae:ca:
08:e5:72:21:43:3c:60:f2:fe:13:22:1c:6d:ad:27:
53:4d:e9:4a:28:55:d7:e7:68:4e:8f:fa:35:3c:6b:
1e:df:92:5a:57:8e:4d:ba:00:3f:07:d8:49:e6:15:
98:f2:10:f6:0b:e0:d5:8e:e6:6a:4c:13:86:5d:76:
1a:75:b0:75:d9:39:61:3b:eb:01:ff:43:fa:a1:e2:
f1:d8:b9:01:40:da:1d:31:6e:ba:5c:b8:b6:ea:4b:
73:a4:03:ae:e4:29:bf:21:ea:d7:82:38:05:50:aa:
e1:78:ea:2e:84:47:7c:3a:99:88:53:38:0f:9b:16:
da:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:23:19:94:98:BE:AC:C8:CB:42:95:4E:34:2A:05:05:FE:95:1C:10
X509v3 Authority Key Identifier:
keyid:28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/eyMZlJi-rMjLQpVONCoFBf6VHBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.92.0/22
Signature Algorithm: sha256WithRSAEncryption
99:df:75:e7:63:c6:c7:5e:c5:b3:f8:de:22:82:fb:55:a9:bf:
13:af:04:f0:65:30:ed:2d:ac:c8:b0:2f:fb:61:35:f6:e9:63:
ab:d4:75:a5:20:0f:01:0c:78:11:44:2f:1e:79:fe:39:19:b5:
39:94:31:2d:ec:0c:5f:ae:4f:8b:24:38:c8:87:fe:4c:67:55:
bc:3d:4f:0e:5d:4c:15:e2:a4:fe:ea:cc:ac:64:2e:46:a2:73:
bf:17:e6:da:d4:c8:97:d5:e2:19:39:95:18:96:1e:a4:44:88:
2c:e7:2b:5c:e1:8a:41:51:9f:c6:47:1e:6b:c1:f1:03:5a:ab:
08:43:ce:9c:aa:83:58:85:30:d7:96:39:a7:d7:9a:df:a9:15:
d9:fd:48:08:25:7d:bf:bf:0a:3a:74:7e:a2:d7:b8:8d:83:ea:
3b:69:95:38:8a:01:22:5e:6e:09:c8:a8:3b:ba:8a:c4:e1:4d:
1c:59:34:28:fa:61:05:ea:08:0e:6b:01:51:be:fa:71:cc:f5:
10:6c:9f:06:78:b1:db:5b:6c:c7:59:33:9b:78:9c:d3:f7:a8:
43:2e:f1:54:69:c0:24:23:19:b0:f0:e2:0d:87:11:10:5f:0d:
38:31:6f:b2:ed:07:27:60:81:ef:fb:27:29:be:98:ca:ad:45:
19:8d:3a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:20 2024 by rpki-client on console-fra.rpki-client.org