Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/tJ4MGbf4_CH2DHcdaqNagFrUqBI.roa
File: tJ4MGbf4_CH2DHcdaqNagFrUqBI.roa (raw, json)
Hash identifier: v0tDPdbDpSrdwG43M8hY7Vx4ls7M6of7k7AbEVftnBA=
Subject key identifier: B4:9E:0C:19:B7:F8:FC:21:F6:0C:77:1D:6A:A3:5A:80:5A:D4:A8:12
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 01856EAFDB877B0336553265311AB7441FCF
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/tJ4MGbf4_CH2DHcdaqNagFrUqBI.roa
Signing time: Sun 01 Jan 2023 18:54:56 +0000
ROA not before: Sun 01 Jan 2023 18:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31679
IP address blocks: 212.55.224.0/19 maxlen: 19
185.165.36.0/22 maxlen: 24
84.16.32.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:db:87:7b:03:36:55:32:65:31:1a:b7:44:1f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Jan 1 18:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b49e0c19b7f8fc21f60c771d6aa35a805ad4a812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d0:08:d2:c3:6f:13:0b:85:d1:f5:ae:c8:dc:
ed:a7:92:10:b7:cf:ba:92:0b:ae:10:1a:8b:ae:c6:
d9:8a:37:54:b3:f0:47:65:31:6b:66:79:1f:e6:23:
54:96:0e:89:06:c3:29:ce:89:66:c4:3b:73:05:85:
7e:f5:72:cb:fb:c1:ef:6f:7a:5e:7e:19:d2:66:43:
5e:bd:7a:26:c3:bc:13:dc:ce:52:10:24:32:8b:43:
bb:14:7c:a6:b3:4c:24:ab:d3:3f:a0:c2:cd:cc:dc:
1e:6c:3d:d2:51:92:06:de:d9:b5:7d:cf:43:48:fe:
f7:6b:62:56:b8:d9:a4:48:c8:51:4b:d2:51:c3:84:
be:10:36:fe:b4:8c:81:ca:98:a3:1a:af:38:fe:83:
c6:dc:d7:fb:7f:d3:17:c6:fe:7a:9c:5d:98:0f:e1:
a4:45:94:81:50:6c:db:18:83:ba:b4:33:38:a5:21:
60:f3:a3:86:f6:75:c5:00:de:2b:d9:23:75:f3:94:
c8:3c:0d:81:7a:cc:73:e8:90:bf:35:a6:2b:d4:ce:
73:45:f7:1e:05:94:54:82:eb:c0:9b:72:5b:2c:7f:
63:a3:e0:da:2d:e5:df:67:0f:05:f9:54:55:37:22:
48:49:fa:d6:36:3e:7c:ea:e5:95:58:65:3e:a8:68:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9E:0C:19:B7:F8:FC:21:F6:0C:77:1D:6A:A3:5A:80:5A:D4:A8:12
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/tJ4MGbf4_CH2DHcdaqNagFrUqBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.16.32.0/19
185.165.36.0/22
212.55.224.0/19
Signature Algorithm: sha256WithRSAEncryption
b1:36:76:55:e1:32:c8:ad:5c:3f:83:89:7b:20:7a:c5:a4:6e:
33:b9:03:00:fb:dd:e7:0e:fe:d8:0d:84:00:6e:d4:c1:04:a6:
d5:2f:d1:0e:a6:d9:4d:54:ee:75:4c:a2:43:95:63:bb:a4:d2:
14:58:fc:78:cd:ec:1f:81:c0:8d:98:fb:b3:0e:35:ba:1a:70:
1a:ac:5f:b3:4c:ce:df:cf:68:93:1b:ba:df:d7:39:ec:d7:e5:
38:a9:a0:a9:66:89:16:df:8e:9b:41:27:af:2b:90:c6:17:87:
cd:6e:65:e8:57:97:fd:be:8e:6b:98:c7:11:86:4b:38:51:92:
b3:37:25:ad:16:22:03:6b:64:86:de:5a:6a:f4:02:13:c3:b0:
8e:2e:a9:cb:bb:ca:01:79:69:39:59:b6:1d:49:ed:30:3e:84:
b2:c7:e0:22:fc:db:85:71:df:9e:d2:eb:06:59:fb:4d:0b:48:
5d:ea:fa:90:12:fb:92:43:ca:82:7e:5f:a2:99:dd:25:04:c8:
ca:19:83:3b:67:90:83:a1:7c:a3:38:a2:37:57:f6:ff:b6:df:
2e:54:b2:d0:1f:97:5a:74:12:7a:95:44:21:22:0c:82:f4:b8:
a3:b6:19:b1:d5:37:fe:a5:79:5f:7f:4d:75:a6:c8:cd:85:3d:
24:84:ac:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:38 2024 by rpki-client on console-ams.rpki-client.org