Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/tM9SwynMfJe1VX-MuWRPjTt1LA8.roa
File: tM9SwynMfJe1VX-MuWRPjTt1LA8.roa (raw, json)
Hash identifier: 2NunxtrI1kLLZZ+G/ebxqPfBGVuNcIXOJqc+2AaC2kg=
Subject key identifier: B4:CF:52:C3:29:CC:7C:97:B5:55:7F:8C:B9:64:4F:8D:3B:75:2C:0F
Certificate issuer: /CN=f5346d3edbec6da72780722c0a41abeea63661d8
Certificate serial: 01856EC2112AE2ED6E79329EB33BDC43A78A
Authority key identifier: F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/tM9SwynMfJe1VX-MuWRPjTt1LA8.roa
Signing time: Sun 01 Jan 2023 19:14:50 +0000
ROA not before: Sun 01 Jan 2023 19:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.57.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:11:2a:e2:ed:6e:79:32:9e:b3:3b:dc:43:a7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5346d3edbec6da72780722c0a41abeea63661d8
Validity
Not Before: Jan 1 19:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4cf52c329cc7c97b5557f8cb9644f8d3b752c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:1c:73:2c:4a:85:24:a9:29:b9:b8:f2:84:
6f:36:be:fd:ab:64:d7:cb:3a:28:69:67:c5:02:00:
b8:d8:21:a8:89:4b:64:72:ca:28:79:80:05:fc:8a:
dc:d4:55:89:cb:e5:0e:be:a8:5d:ad:c7:48:3f:38:
17:a0:86:8c:ec:87:f1:fc:8e:8c:fc:58:6d:6a:6d:
47:f8:8d:42:75:df:65:a3:33:9d:59:55:16:72:6a:
0a:65:9a:f7:1d:a0:99:0d:34:b7:f4:73:9c:d1:b9:
15:37:96:82:51:08:e1:d2:14:cb:66:89:f3:c3:7d:
55:59:2b:b6:b7:40:79:58:6b:0c:8a:08:92:7a:97:
2b:83:86:f8:9f:82:91:f9:cc:6f:e1:ed:ba:4e:36:
62:45:3b:63:27:ab:37:ab:1e:ef:7e:1e:2d:f7:62:
65:a1:a8:e8:bf:bf:1d:58:8f:56:98:f5:a5:30:76:
aa:fb:d0:7c:3f:8e:40:bd:79:36:ef:11:b9:de:9f:
ae:ab:47:6d:36:04:05:a6:aa:f0:e5:e5:62:be:3a:
f7:b1:85:63:54:32:cd:f5:87:91:a6:0b:05:e6:3e:
86:b9:e3:8f:09:eb:c9:58:a6:e8:5b:4f:7d:88:eb:
f3:c0:4e:22:3f:73:62:43:e8:e3:88:50:d8:fc:df:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CF:52:C3:29:CC:7C:97:B5:55:7F:8C:B9:64:4F:8D:3B:75:2C:0F
X509v3 Authority Key Identifier:
keyid:F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/tM9SwynMfJe1VX-MuWRPjTt1LA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.216.0/22
Signature Algorithm: sha256WithRSAEncryption
69:27:56:75:5c:1a:be:43:5f:9b:e6:7a:5f:6e:ff:ec:6e:93:
f4:1a:1c:bc:e8:32:9b:a8:4b:07:fe:f8:dc:17:a4:46:6a:16:
bb:8f:79:5f:48:30:a3:bd:2e:fd:1a:6d:e4:40:07:80:dd:ef:
b0:d0:f2:c0:99:7e:38:92:08:82:d0:f6:36:0a:38:9d:7a:d9:
83:c9:a1:fd:55:33:dc:63:0f:80:32:3a:e5:38:bc:43:18:bc:
be:34:83:84:f5:e7:af:7f:2e:51:97:92:2b:20:a0:61:37:48:
00:36:c9:03:5a:28:22:a9:a0:6c:a0:08:18:ba:02:58:d7:8f:
17:2f:8c:55:4f:bd:b6:29:4a:44:7b:5a:ed:56:3b:0b:8a:56:
89:23:03:36:34:f4:f1:46:3d:4c:cb:17:04:5e:bb:98:90:aa:
68:3d:3d:64:7c:fd:0a:cd:bc:01:ad:35:ba:bf:b2:bf:b4:40:
9f:30:ca:4e:5d:2b:00:24:8d:14:2e:51:7f:7c:b9:4a:f4:fe:
b1:24:e2:a9:e7:c4:7d:f6:40:29:de:29:a7:a1:ab:56:92:59:
56:ee:03:10:5b:a6:5a:cf:a7:de:29:2a:2e:c7:5f:c1:26:82:
0b:8b:6c:a0:71:36:f8:7a:0c:da:f5:13:fd:e0:b0:4e:ef:b2:
ba:ae:21:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:43 2024 by rpki-client on console-fra.rpki-client.org