Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1uVF-4lQW-TrkH8SAtDcc2C-tjI.roa
File: 1uVF-4lQW-TrkH8SAtDcc2C-tjI.roa (raw, json)
Hash identifier: Q8F+eSlYBHmkMgetU2N45MotLshJE0VPZ+W8yKrgSYU=
Subject key identifier: D6:E5:45:FB:89:50:5B:E4:EB:90:7F:12:02:D0:DC:73:60:BE:B6:32
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737ABD712697064CC5EF34A791F60BA3
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1uVF-4lQW-TrkH8SAtDcc2C-tjI.roa
Signing time: Mon 02 Jan 2023 17:15:01 +0000
ROA not before: Mon 02 Jan 2023 17:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41531
IP address blocks: 185.214.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:bd:71:26:97:06:4c:c5:ef:34:a7:91:f6:0b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6e545fb89505be4eb907f1202d0dc7360beb632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d2:9f:fb:fc:10:82:26:6f:c7:19:a5:84:ff:
63:6f:6a:62:fd:a1:07:72:03:1b:06:9c:cd:8a:19:
39:01:55:5f:02:7c:3a:a5:1e:65:f5:de:c8:85:ae:
40:81:e6:56:ae:3a:88:74:e7:70:33:25:29:de:14:
cd:55:06:c5:6d:87:53:90:77:30:0e:6b:ed:4c:bc:
9d:c6:9f:15:10:d9:27:5e:f2:9f:bd:69:14:f5:58:
8b:3c:b7:6c:a9:79:98:7e:0d:b5:ca:50:25:b2:b4:
1c:a7:18:72:bf:f6:c8:87:a5:94:74:43:79:57:a7:
8a:5a:a0:d0:93:47:91:b2:4b:3b:56:58:0e:45:00:
6e:07:1f:b3:b5:ce:9c:f2:4f:38:f7:38:d1:75:64:
25:96:cb:9b:10:dc:f5:c9:53:69:6e:86:47:e2:e3:
8b:ef:8a:51:b4:d8:ae:ac:cb:1e:7d:7d:66:c4:d3:
c3:42:19:7c:2b:c5:e5:74:f0:54:5b:6c:36:46:d6:
0f:cd:25:1e:1e:a9:fb:15:a2:bf:6c:6d:3e:ed:08:
ed:72:95:b7:f1:69:3f:1b:b4:b1:60:71:80:ff:22:
ad:f3:f4:2c:12:98:75:d4:98:c3:39:cd:70:a6:ec:
6d:d7:23:55:b5:fd:06:3c:65:88:96:e0:05:05:ac:
bc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E5:45:FB:89:50:5B:E4:EB:90:7F:12:02:D0:DC:73:60:BE:B6:32
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1uVF-4lQW-TrkH8SAtDcc2C-tjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.12.0/22
Signature Algorithm: sha256WithRSAEncryption
31:70:6e:25:2f:76:44:a4:47:9b:be:4d:ab:57:a9:6f:0b:d5:
d7:c9:67:23:d7:30:68:f2:30:c7:2a:37:72:af:51:c7:a6:4d:
34:d5:d9:d8:51:99:c0:a4:f8:e0:cc:34:6c:e8:cf:f1:9c:32:
ee:c4:d0:eb:9d:f9:bb:5b:c9:8c:0b:ad:3a:5c:f6:d1:d9:eb:
a1:b8:29:df:4d:b4:71:0a:b3:67:37:81:1e:b4:b0:37:4a:1f:
d1:ef:8b:90:b1:c4:04:ab:b9:2e:63:12:f0:10:7e:b2:55:a3:
d8:3a:43:7b:1c:5a:68:53:9b:66:f0:05:40:c3:34:f2:b4:ac:
b9:85:7e:d0:67:6a:79:ea:07:f1:eb:4f:3b:00:73:62:21:0c:
31:31:e9:3b:84:8f:d8:3f:18:6b:03:98:be:62:80:42:32:28:
c0:3f:99:b7:8b:02:72:30:59:bb:3c:00:82:ba:a0:db:f2:40:
70:83:0a:8a:1b:e4:16:4a:7b:e6:2e:6c:f9:f9:6e:21:54:fc:
f0:92:15:f9:5a:a3:a0:4b:49:01:ec:b2:05:d1:16:28:17:44:
d7:87:c3:68:b2:5a:cb:a1:04:25:4d:4b:46:8e:1f:b2:c3:eb:
79:58:14:f6:39:f9:28:93:b2:1c:c3:cc:b1:3c:de:06:89:0f:
4d:8f:c7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org