Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/IAgN0hZWPqVw8Yu4VM6wqks9MIU.roa
File: IAgN0hZWPqVw8Yu4VM6wqks9MIU.roa (raw, json)
Hash identifier: Z2DlKKTopCvb/XCcxoQK3q9ftL+GkGB5aa3HCt8sygw=
Subject key identifier: 20:08:0D:D2:16:56:3E:A5:70:F1:8B:B8:54:CE:B0:AA:4B:3D:30:85
Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial: 01857030723DD286F7F0CC12A3B971BFC0DD
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/IAgN0hZWPqVw8Yu4VM6wqks9MIU.roa
Signing time: Mon 02 Jan 2023 01:55:01 +0000
ROA not before: Mon 02 Jan 2023 01:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199361
IP address blocks: 185.77.232.0/22 maxlen: 24
185.20.76.0/23 maxlen: 24
2a00:49e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:72:3d:d2:86:f7:f0:cc:12:a3:b9:71:bf:c0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Validity
Not Before: Jan 2 01:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20080dd216563ea570f18bb854ceb0aa4b3d3085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0d:0d:49:96:d6:97:08:90:ac:c0:6b:15:f1:
04:4b:51:7b:a2:d6:de:c5:35:3c:60:89:e9:35:3b:
f0:61:05:66:0e:93:60:29:2a:ad:3e:ba:4c:d6:69:
69:42:66:c1:8c:5b:e7:8b:b7:f9:02:14:17:d7:9e:
fc:8c:c8:35:61:45:56:f4:9d:e5:11:8a:05:eb:49:
a1:ca:e3:9f:91:d3:84:0b:03:81:fe:af:b7:21:51:
2c:e3:fc:a6:62:87:bf:20:9c:78:6e:cb:76:a8:7a:
17:81:7c:ed:91:c9:52:29:58:17:d1:8e:af:33:d2:
91:10:f9:e6:64:19:c5:4a:b3:fd:0e:9b:c4:87:0a:
1a:f6:57:5b:8c:c4:4f:07:70:4e:77:c7:79:9e:26:
3a:20:87:fb:a3:8c:5a:79:35:dc:c5:f2:96:c5:04:
25:47:9b:aa:02:a2:9a:1f:17:bb:6c:35:97:c7:67:
c6:af:98:31:58:06:28:16:c9:19:7c:65:72:06:9a:
5a:e4:5f:41:58:54:2d:58:14:13:9a:3c:99:e5:4d:
93:0f:67:f7:53:8e:1c:15:41:9b:07:8b:0e:ba:c9:
10:90:1c:05:e4:8e:23:5b:88:32:7d:a5:8f:90:e2:
e5:44:69:0f:6d:6f:ac:f2:88:23:c0:a1:da:c0:e5:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:08:0D:D2:16:56:3E:A5:70:F1:8B:B8:54:CE:B0:AA:4B:3D:30:85
X509v3 Authority Key Identifier:
keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/IAgN0hZWPqVw8Yu4VM6wqks9MIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.76.0/23
185.77.232.0/22
IPv6:
2a00:49e0::/32
Signature Algorithm: sha256WithRSAEncryption
1c:d5:a0:6e:29:f6:6d:59:ff:26:ee:23:70:97:ea:53:2a:b7:
6d:a5:5f:66:0e:db:bf:a9:ad:89:26:cc:6d:4e:a3:7a:19:c3:
91:39:eb:9b:a5:b0:11:08:10:74:e4:97:01:1c:28:b2:c2:95:
3c:b8:81:39:7c:55:23:d2:3c:76:2e:b1:48:aa:7a:69:ea:66:
a1:c6:49:69:4e:0d:e1:da:c4:9f:de:f6:d0:ed:d6:cb:4a:19:
10:98:9b:67:5c:f0:36:60:3d:d6:97:ce:9c:ec:9c:37:8c:77:
32:17:0a:64:7b:43:1e:75:1e:77:f5:72:df:73:73:bc:a1:6c:
1c:d6:5d:72:e7:39:82:54:d6:96:f9:ee:d3:8d:52:d1:e1:64:
ab:e3:e6:95:e7:04:83:ed:f8:0f:39:18:ff:28:ec:6c:dc:18:
9b:68:99:27:52:47:10:6d:7f:e4:50:cb:69:93:c4:96:fc:ea:
14:b2:19:8f:f5:f8:12:df:5e:63:1c:2d:cb:27:36:48:78:17:
0f:4d:52:74:ef:72:08:57:f6:e6:96:7c:bc:1b:0d:16:32:33:
7a:81:c4:8c:90:37:f3:6d:44:af:7b:23:10:c4:ea:62:98:ed:
c8:dc:58:65:9d:2d:a7:e7:d9:65:59:7a:75:69:01:9f:3a:39:
10:c1:88:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:05 2024 by rpki-client on console-fra.rpki-client.org