Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/59WOsIjIotCNvfl8JJMckuIuEkg.roa
File: 59WOsIjIotCNvfl8JJMckuIuEkg.roa (raw, json)
Hash identifier: QaseYPhEH1yYuXoHRPbT5J+Tmdxpb4FVWFbZjY2Na2E=
Subject key identifier: E7:D5:8E:B0:88:C8:A2:D0:8D:BD:F9:7C:24:93:1C:92:E2:2E:12:48
Certificate issuer: /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial: 0188D38403A874C16135C802E7E3DC3AD221
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/59WOsIjIotCNvfl8JJMckuIuEkg.roa
Signing time: Mon 19 Jun 2023 11:57:04 +0000
ROA not before: Mon 19 Jun 2023 11:57:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52195
IP address blocks: 185.12.20.0/22 maxlen: 23
46.149.208.0/20 maxlen: 23
2a02:ea80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:84:03:a8:74:c1:61:35:c8:02:e7:e3:dc:3a:d2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
Validity
Not Before: Jun 19 11:57:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7d58eb088c8a2d08dbdf97c24931c92e22e1248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1f:76:c9:a8:d8:6b:99:bd:b6:2e:66:2b:3d:
50:c8:15:3e:bd:36:e1:e2:d5:95:f6:77:4f:5f:1e:
b9:c9:39:86:d3:b7:57:7f:40:ed:26:58:55:b0:99:
11:57:46:2f:0f:43:f8:e3:dd:8e:cb:5d:fa:7b:1a:
da:d1:40:74:0a:df:58:40:47:bc:c7:bd:5e:8c:4f:
c5:4c:03:e9:35:e6:1d:33:90:89:74:4c:1d:65:93:
6b:c7:f9:bb:75:61:81:91:21:22:3c:b4:bc:1b:ea:
73:b0:09:a2:c4:fe:1d:b0:e9:10:b3:df:cf:a4:19:
dd:3e:82:b6:c5:1c:97:58:a9:1b:0c:ae:57:09:e6:
6f:b5:d5:22:de:f7:4a:6d:43:5e:13:e7:66:46:b2:
c3:f0:7c:e7:0f:8a:d4:a9:05:55:8f:e1:ad:3f:b2:
7b:b5:6a:a1:d0:32:c0:eb:63:2b:d5:50:f7:6f:69:
0c:8f:d6:29:d7:5a:9b:1d:39:b1:9a:92:dd:76:20:
23:cb:46:c3:a7:3d:17:ec:33:e3:b6:c2:dc:e7:3a:
41:26:a6:43:d2:98:1d:df:64:ea:a7:e2:a7:35:5d:
ed:a4:68:d2:c5:42:46:e1:7a:cd:65:0a:25:68:e1:
a2:a2:b6:60:e9:05:d4:7d:bc:c1:45:d1:2d:6e:47:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D5:8E:B0:88:C8:A2:D0:8D:BD:F9:7C:24:93:1C:92:E2:2E:12:48
X509v3 Authority Key Identifier:
keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/59WOsIjIotCNvfl8JJMckuIuEkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.208.0/20
185.12.20.0/22
IPv6:
2a02:ea80::/32
Signature Algorithm: sha256WithRSAEncryption
43:e1:d8:e5:71:18:e9:74:fe:09:00:a8:d0:8e:46:50:2c:b5:
58:c4:a6:fb:7e:a7:9e:03:a8:19:c8:e4:fb:95:51:de:30:97:
95:9b:0c:b7:df:5f:49:9f:2d:17:dd:1b:05:3c:a9:57:56:40:
4f:f9:20:2c:a9:60:e4:85:76:93:b5:98:f7:bf:58:f6:7c:e8:
69:30:30:7c:f4:9c:19:0d:8d:6a:59:3d:8f:ae:d4:2a:8f:28:
19:f2:cc:d8:f8:a1:d2:85:55:16:97:1c:ba:3e:61:41:1b:1b:
07:31:fb:35:35:ff:21:7b:cc:a9:01:39:f8:14:46:ee:1d:84:
07:1a:93:52:e4:75:31:f2:58:1e:31:ed:5b:21:e0:74:e5:bf:
83:fd:86:00:17:63:0c:a1:0d:11:e8:6a:80:cd:fa:68:4b:07:
2c:9c:07:96:c3:38:42:1a:c3:5a:39:f4:3c:35:d1:1b:45:a4:
dd:82:10:9c:ae:e5:61:c1:82:a1:a0:ad:c8:52:11:1e:59:60:
19:73:71:dc:5b:89:9b:eb:31:85:d8:e4:7f:32:09:a7:5f:a7:
33:59:cd:bd:e2:f6:bd:c6:aa:02:8b:67:09:bb:ff:dc:8b:db:
4c:5d:4a:61:e9:e2:cf:ae:35:10:99:af:bd:72:b2:01:42:87:
f4:18:4d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:15 2024 by rpki-client on console-ams.rpki-client.org