Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/cIXwQh4FCss2VwyfQs4H8rDag5U.roa
File: cIXwQh4FCss2VwyfQs4H8rDag5U.roa (raw, json)
Hash identifier: 9NyIbaA/p2SZNn3J2U/JpIcb9p2S8g5xGB49A04nXQ0=
Subject key identifier: 70:85:F0:42:1E:05:0A:CB:36:57:0C:9F:42:CE:07:F2:B0:DA:83:95
Certificate issuer: /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial: 018571F0E5E196E10A71D7C1C61126769E22
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/cIXwQh4FCss2VwyfQs4H8rDag5U.roa
Signing time: Mon 02 Jan 2023 10:04:50 +0000
ROA not before: Mon 02 Jan 2023 10:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30848
IP address blocks: 185.169.176.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:e5:e1:96:e1:0a:71:d7:c1:c6:11:26:76:9e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Validity
Not Before: Jan 2 10:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7085f0421e050acb36570c9f42ce07f2b0da8395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:47:ba:ea:3c:e2:e5:a9:c1:10:f1:8c:de:
6a:c5:f1:4f:55:6e:5d:59:d8:7d:87:f1:8f:be:8c:
dc:55:2b:fc:c6:24:b3:c6:f6:af:cd:87:16:20:4c:
79:6a:10:c8:28:21:14:d0:e6:d8:a9:f8:81:15:94:
99:26:20:92:8a:28:ed:73:d0:df:af:3a:9f:55:d5:
b1:9f:13:eb:39:93:ca:6b:10:c0:f1:fb:a9:d7:3b:
16:bb:86:4a:58:50:94:6e:90:c4:55:d2:53:69:9a:
8e:24:66:85:d5:87:8e:77:23:1a:09:03:45:6c:e5:
8e:90:74:9d:52:5c:dc:f3:6e:a9:9f:a6:ab:89:51:
75:c9:e2:8c:12:30:48:d9:47:49:37:0c:d1:25:6b:
d1:1f:70:2c:c3:0b:ba:2b:52:29:9c:42:1b:bf:ad:
92:77:11:19:fb:7e:b1:d5:50:ad:f2:98:8b:9a:42:
15:f6:2b:39:8b:e5:aa:5e:45:7d:27:ef:45:c6:ce:
40:3f:25:09:ef:cf:cf:43:eb:a1:b9:b4:d5:97:0c:
87:3f:72:1c:51:04:30:7a:cd:a1:4a:e6:74:25:f6:
24:65:87:70:90:45:94:6a:27:2a:cc:7e:83:f9:c2:
85:20:ad:25:f7:4b:ec:44:45:83:fd:51:41:99:77:
1d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:85:F0:42:1E:05:0A:CB:36:57:0C:9F:42:CE:07:F2:B0:DA:83:95
X509v3 Authority Key Identifier:
keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/cIXwQh4FCss2VwyfQs4H8rDag5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.176.0/22
Signature Algorithm: sha256WithRSAEncryption
68:bf:01:46:72:b0:4e:c5:86:3c:55:12:3b:99:8e:58:43:b0:
70:99:22:2d:17:b8:ca:ee:95:ff:45:c2:b8:7a:c8:e7:1d:3a:
e6:fc:d1:61:23:62:02:39:15:88:c5:2c:7d:76:a1:40:5f:69:
af:c5:6c:f5:f6:12:cf:2f:b3:f8:cc:b3:4a:5c:bc:64:fe:78:
a2:f4:a0:50:f4:b0:36:3f:c7:c9:e1:38:76:a4:8c:f1:54:9a:
50:49:b8:2c:d6:37:8a:fb:7d:b2:fd:21:69:fe:58:bb:d0:74:
01:5f:6c:71:b1:ed:d3:3d:c9:b2:4e:3b:d0:39:9a:75:c7:11:
fe:41:4c:2c:9d:c1:0f:ae:31:4f:75:e5:42:cd:16:85:f5:12:
d3:50:e0:95:1f:9c:25:3d:4c:5b:0e:d0:49:75:66:3c:16:49:
0a:eb:f3:82:78:39:ae:ca:74:a2:04:47:00:65:b8:bd:ef:05:
b7:a8:77:20:8c:70:01:5f:81:6c:61:3c:be:e2:a7:af:0e:85:
4a:7d:61:9c:66:07:e6:5a:39:fd:45:be:13:cd:6f:61:89:af:
42:36:91:71:ff:5f:fa:b1:c4:56:1d:d4:44:1a:60:07:08:a0:
66:e9:3d:26:53:20:97:91:59:bc:b6:a9:94:c4:62:5a:e6:e0:
be:e4:4b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:29 2024 by rpki-client on console-fra.rpki-client.org