Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/oSUmp9kOqOebLIwaOBORD8swKqQ.roa
File: oSUmp9kOqOebLIwaOBORD8swKqQ.roa (raw, json)
Hash identifier: u1MhfcYKxkVz7YKIRNnnyVRXdOsBPn7WDx67oPZirZs=
Subject key identifier: A1:25:26:A7:D9:0E:A8:E7:9B:2C:8C:1A:38:13:91:0F:CB:30:2A:A4
Certificate issuer: /CN=4eeb86abd5374e553098209075b9afecabef333a
Certificate serial: 018A85C2CA9DA1DF75EE13D1B7C944808297
Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/oSUmp9kOqOebLIwaOBORD8swKqQ.roa
Signing time: Mon 11 Sep 2023 19:40:50 +0000
ROA not before: Mon 11 Sep 2023 19:40:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46562
IP address blocks: 185.230.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:85:c2:ca:9d:a1:df:75:ee:13:d1:b7:c9:44:80:82:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a
Validity
Not Before: Sep 11 19:40:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a12526a7d90ea8e79b2c8c1a3813910fcb302aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:25:de:ee:a9:8c:e2:33:4f:ee:26:35:f5:db:
31:ce:8b:68:0a:2a:4b:82:6b:3e:29:f3:86:ed:be:
c5:22:a8:a2:62:15:8f:cf:f0:cc:7a:ae:1a:6c:c0:
02:c7:49:5d:34:e6:64:85:a4:10:16:17:3b:4f:fa:
05:58:bf:bd:9b:7b:83:55:d5:fa:04:b6:df:fc:e5:
22:2d:6c:60:a7:33:a4:f1:32:52:f1:6e:cd:29:05:
df:d1:67:b7:d9:5a:27:05:c4:07:94:77:10:35:b7:
c2:36:ab:38:6f:a4:c3:53:28:49:83:c6:66:c6:ab:
c4:19:1a:00:20:ea:11:24:14:96:c2:f8:1f:2d:1d:
58:aa:27:43:c5:f6:9b:22:fb:29:a2:6d:ed:0e:d1:
fb:26:7c:2a:c1:ed:0a:ba:2b:99:58:fb:0c:33:b2:
36:4d:f9:b5:ce:61:30:5b:e1:5d:a4:7c:61:d6:25:
08:b0:11:55:9b:f6:63:4d:bc:24:3a:67:bb:95:68:
ad:db:a0:5e:0f:46:3e:05:26:e6:45:9a:cb:3a:75:
b0:2b:79:2e:12:b6:55:9f:be:d0:c8:e7:06:f3:3b:
d1:aa:36:ee:1c:da:e6:2d:20:76:98:1f:d8:9e:51:
e5:b7:d2:5f:1f:e5:eb:73:df:6d:58:b1:8a:c6:a1:
e0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:25:26:A7:D9:0E:A8:E7:9B:2C:8C:1A:38:13:91:0F:CB:30:2A:A4
X509v3 Authority Key Identifier:
keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/oSUmp9kOqOebLIwaOBORD8swKqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.222.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ca:b6:6f:f8:d1:9f:b4:2d:a4:b6:e2:78:6e:14:3a:dd:a1:
e8:2a:ef:22:2d:ba:e1:da:3f:0a:15:bc:cc:5d:2f:11:ae:3d:
03:74:27:d3:54:e8:89:68:a5:dd:de:bc:ca:74:32:6f:b4:2d:
aa:70:2a:29:32:63:3a:10:de:cc:55:0b:d8:a5:08:3c:8d:4d:
61:a4:ce:33:08:eb:18:0d:7b:bf:0f:b5:82:e7:08:ff:8d:88:
e8:5c:54:cb:23:29:0c:60:de:32:5d:90:c0:bb:5e:76:4f:2f:
06:42:7e:35:50:79:e5:db:5b:20:44:06:c9:72:98:b7:00:af:
e3:8a:4d:2d:bb:6c:2d:e6:03:19:8d:70:02:c0:10:2a:fe:c5:
95:9d:e4:d9:79:61:27:3e:87:69:8a:d4:3a:fe:50:56:e7:88:
14:a1:9b:b8:0e:a3:4c:8e:ca:67:e8:a5:6a:79:bc:ef:a9:fa:
43:af:48:d5:2d:a9:13:6c:d8:50:08:aa:f2:46:1c:a5:99:78:
13:99:a4:73:4a:6c:0e:f8:3f:56:1d:f5:e6:3a:f2:64:b3:e5:
6e:a7:de:5d:a2:0f:5c:c6:fd:c4:2c:02:19:cb:c6:0c:0b:af:
2c:33:b2:19:6f:62:f4:ff:b1:ad:08:8b:04:4d:13:59:7f:24:
73:5f:67:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:05 2024 by rpki-client on console-ams.rpki-client.org