Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/9o8M5YyjwKvsS0wvtJI4l2-ciL4.roa
File: 9o8M5YyjwKvsS0wvtJI4l2-ciL4.roa (raw, json)
Hash identifier: rWUeqQsI94Tfr4VsiBrzrLhUPaibY5toeGQigBg+V3k=
Subject key identifier: F6:8F:0C:E5:8C:A3:C0:AB:EC:4B:4C:2F:B4:92:38:97:6F:9C:88:BE
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 01856F5DEFC9C5F86B3559E392DF29221CB3
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/9o8M5YyjwKvsS0wvtJI4l2-ciL4.roa
Signing time: Sun 01 Jan 2023 22:05:05 +0000
ROA not before: Sun 01 Jan 2023 22:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206136
IP address blocks: 185.195.104.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:ef:c9:c5:f8:6b:35:59:e3:92:df:29:22:1c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 1 22:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f68f0ce58ca3c0abec4b4c2fb49238976f9c88be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7b:49:bb:69:e0:f7:d6:fe:e4:59:99:2e:60:
f4:ba:c1:0d:dc:c9:e6:00:2c:48:75:16:8e:f7:00:
97:cd:11:9d:41:ba:97:af:34:77:62:2d:3a:dd:1e:
3c:70:56:59:05:1e:f8:d0:c8:84:34:a6:a7:bd:41:
7b:08:d8:9c:bc:96:6b:67:f3:29:24:07:8f:f7:6a:
64:64:3c:b7:91:96:c1:68:d0:52:d4:e1:69:0a:94:
88:01:55:29:74:a9:61:b0:25:7e:e9:37:29:f5:f3:
9b:23:fc:a6:80:a2:43:67:2d:b2:69:b6:65:8c:7f:
f9:0d:87:76:8c:7f:24:bc:54:7a:72:62:9a:08:30:
d0:f3:58:f3:31:bf:09:32:3a:70:bf:f6:ec:6a:ce:
60:77:98:f6:b0:cb:ae:90:3c:84:08:3e:c2:53:19:
90:9e:34:31:3a:20:d0:71:9f:fb:89:07:5c:0e:88:
a2:04:82:43:e0:04:94:97:12:ee:10:a2:ce:ac:46:
f1:9e:2a:07:55:a8:71:01:ee:04:74:28:d8:2b:d3:
bd:3a:86:f2:8e:34:67:a2:1f:06:7c:af:42:98:7f:
ef:b3:13:6b:33:4f:dd:c5:8b:97:44:36:28:d2:3a:
be:89:1c:95:7b:1f:8f:55:04:4e:1a:36:be:dc:36:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8F:0C:E5:8C:A3:C0:AB:EC:4B:4C:2F:B4:92:38:97:6F:9C:88:BE
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/9o8M5YyjwKvsS0wvtJI4l2-ciL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.104.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:49:f5:b8:7d:22:62:30:c1:d2:4e:c4:c2:7f:99:97:5a:21:
f6:00:44:63:45:63:84:87:af:2f:a7:25:cb:68:71:b4:e9:df:
d2:72:46:3e:81:17:69:b8:44:34:8e:b4:f0:6d:60:06:16:dd:
91:fa:3a:ac:e2:58:20:c8:b8:ec:76:0f:16:8f:e3:92:bf:73:
9b:63:0f:08:63:11:9d:db:f0:3a:af:43:a1:6d:2b:ee:75:d1:
53:fb:19:5a:9b:1f:97:c3:a0:c8:13:33:52:97:7c:f5:fc:2f:
1d:df:16:78:a1:e4:6c:7a:0b:48:2b:4f:fe:ea:71:b4:dc:b8:
8d:7c:b8:14:b5:56:3d:a6:4e:c3:aa:ce:93:b3:05:ba:54:94:
0c:f3:91:ec:93:0a:b6:46:87:de:ff:e8:61:0b:6c:06:a2:e4:
f8:ee:12:bf:b4:13:3e:42:7f:76:f3:c8:ed:5f:20:4f:76:fa:
32:1a:4d:be:e2:fb:9b:db:76:3d:e5:b4:6b:b8:87:23:38:0f:
1c:8e:d6:f5:d1:ba:60:27:b2:16:87:7f:9d:fe:a6:e4:06:a7:
01:1a:12:94:84:9b:7d:7a:53:b5:fc:ef:ae:5c:de:60:5a:6d:
f4:48:88:60:75:ee:4c:ac:16:55:89:61:9b:a0:95:7e:3e:cf:
35:46:6b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:56 2024 by rpki-client on console-fra.rpki-client.org