Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/R6TgD2YOqrWnFIC5IRkN6d2rmcA.roa
File: R6TgD2YOqrWnFIC5IRkN6d2rmcA.roa (raw, json)
Hash identifier: aue3VUXxYo0TgcjGrk54KYwEmkDgJeLCkkCytU5xZ8k=
Subject key identifier: 47:A4:E0:0F:66:0E:AA:B5:A7:14:80:B9:21:19:0D:E9:DD:AB:99:C0
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737AC59E43ABC3FC11A58966579C8FE6
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/R6TgD2YOqrWnFIC5IRkN6d2rmcA.roa
Signing time: Mon 02 Jan 2023 17:15:03 +0000
ROA not before: Mon 02 Jan 2023 17:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51487
IP address blocks: 185.138.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:c5:9e:43:ab:c3:fc:11:a5:89:66:57:9c:8f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47a4e00f660eaab5a71480b921190de9ddab99c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:23:d0:b8:e6:ea:7a:19:3b:ae:67:a5:95:
69:50:37:ee:a5:74:e8:02:d9:80:26:42:9c:c9:01:
85:1a:e4:e7:7c:1f:fc:d6:9d:63:51:6f:27:41:cd:
af:c2:c5:33:a8:5c:41:3d:fc:0f:09:9a:d3:d4:72:
16:13:a3:d4:19:dd:2c:bf:21:bf:63:64:2f:50:0c:
a5:9c:5c:cd:b3:36:86:75:37:5a:6d:3c:2b:5d:f7:
b3:72:b5:4c:ed:f5:70:f6:79:98:38:d8:7b:4e:fd:
f8:40:ec:27:1f:80:cc:e9:90:d3:48:35:e5:c8:b0:
c1:ed:97:26:55:c0:35:48:a4:c0:b3:be:e3:8d:59:
65:50:0b:47:e5:f8:e7:9e:e2:7e:5b:50:1a:a2:d0:
34:f6:ec:34:4e:f0:9e:c0:99:bb:6d:60:a1:1b:8f:
e0:52:29:39:36:ae:22:bd:ce:84:23:f9:50:82:22:
c0:27:f2:7f:16:6e:ee:08:5d:e6:82:2b:b1:d8:05:
21:c8:59:45:b7:4f:6f:ed:ae:1e:31:89:00:eb:4b:
ea:1c:e4:44:76:b2:11:e4:d9:b6:11:a7:9d:62:b7:
ba:c9:89:fa:ef:e2:33:1a:1a:5e:43:5e:e7:29:eb:
a3:73:6f:21:11:1e:f9:a3:a2:46:50:2c:d9:6d:6c:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A4:E0:0F:66:0E:AA:B5:A7:14:80:B9:21:19:0D:E9:DD:AB:99:C0
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/R6TgD2YOqrWnFIC5IRkN6d2rmcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.92.0/22
Signature Algorithm: sha256WithRSAEncryption
79:b3:6f:28:a0:87:6b:b6:b5:6c:13:e9:28:e9:95:cc:9f:04:
4b:8a:54:4b:26:37:0a:49:83:03:0d:d4:10:33:35:78:78:d9:
b9:c9:58:37:22:5c:47:2e:83:39:5a:df:11:62:e5:bd:d2:bb:
e3:44:0b:a2:31:f6:94:05:08:37:2e:dd:7e:54:c5:b3:17:7f:
75:5e:3e:47:86:16:5d:ad:28:77:49:f1:bc:54:c5:8c:c7:41:
85:a4:ef:98:ed:af:89:b6:81:3d:62:db:75:7c:28:38:4d:63:
f2:33:9b:e0:fd:d8:a1:ee:f8:c2:1e:58:a8:55:43:fa:92:2b:
8a:42:2c:84:b1:04:93:c3:e7:69:8b:58:82:03:8f:aa:93:5b:
eb:b5:73:2e:1b:c3:25:be:84:b7:7e:b3:d3:54:44:b2:a2:22:
39:0a:83:b2:11:28:70:59:48:8d:1a:70:5d:38:dd:36:65:8d:
02:f7:61:de:f8:3e:a8:34:f5:1d:e3:e0:00:b9:60:26:3f:c1:
8d:18:83:76:71:9b:bc:4a:a9:b3:8e:23:40:e6:4c:e2:8e:dd:
2f:a1:f3:42:fe:13:9c:3c:5e:3e:bb:21:e0:f1:52:c2:f5:9a:
e7:f7:8f:48:5f:05:1b:5d:7d:0f:b7:0d:f4:0b:e4:83:42:55:
01:5c:6e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org