Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/cVk4yo8k7Uf5ugkT_peNcC2MFRY.roa
File: cVk4yo8k7Uf5ugkT_peNcC2MFRY.roa (raw, json)
Hash identifier: G+qwHgFjv+L8f5xwG4QBTB9cRRNcRymKx55FHNAD+n0=
Subject key identifier: 71:59:38:CA:8F:24:ED:47:F9:BA:09:13:FE:97:8D:70:2D:8C:15:16
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737AD8D4B74E1ACCD8FA4B0FEAFEE480
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/cVk4yo8k7Uf5ugkT_peNcC2MFRY.roa
Signing time: Mon 02 Jan 2023 17:15:08 +0000
ROA not before: Mon 02 Jan 2023 17:15:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206930
IP address blocks: 185.188.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:d8:d4:b7:4e:1a:cc:d8:fa:4b:0f:ea:fe:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=715938ca8f24ed47f9ba0913fe978d702d8c1516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:54:f1:93:39:ed:ac:16:92:52:d2:7b:25:6c:
c5:98:98:e5:5c:92:57:1a:ca:8c:c9:9b:78:ac:36:
d5:07:f1:72:e3:44:ae:06:66:4c:d3:b9:1b:eb:f2:
a3:98:cb:e3:60:e1:cd:31:5f:6c:4a:d8:09:d4:dd:
09:ce:8f:51:82:d4:df:32:f4:da:73:58:80:45:16:
6b:ba:9c:a4:b9:2d:ee:d7:c4:39:d8:87:4e:dc:c5:
1d:b7:67:87:62:11:d5:34:6f:86:f2:e0:99:90:d3:
bc:0c:41:20:3b:c0:2b:9f:9b:85:a6:9e:29:3c:9b:
47:95:a1:31:ac:87:7a:86:90:59:4e:93:1e:53:dc:
7b:71:d8:56:6c:22:5c:a6:4e:06:97:5b:d2:e5:f1:
fe:7b:94:e1:49:53:bc:92:0c:55:3b:80:bb:6d:9d:
4d:59:37:d1:5a:17:61:db:71:27:aa:f3:d4:25:e7:
ab:2d:86:85:70:8d:a1:b4:60:e1:da:e9:f8:35:5c:
0e:81:0c:6a:0a:82:6c:f4:43:78:0d:11:a1:1c:80:
d8:24:e0:c1:38:b3:7e:97:a2:54:4a:98:00:b9:ec:
54:a6:0c:61:fa:1d:ab:92:34:cc:17:b3:c3:54:ac:
ab:e7:74:93:47:27:65:09:e8:3c:9e:2f:44:2b:80:
41:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:59:38:CA:8F:24:ED:47:F9:BA:09:13:FE:97:8D:70:2D:8C:15:16
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/cVk4yo8k7Uf5ugkT_peNcC2MFRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.212.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:ea:07:cb:7f:44:c5:bd:e1:5c:de:81:be:c7:c2:d7:7b:ba:
d9:78:1e:7b:fb:32:d8:0e:8b:a6:58:87:ad:6e:5b:43:7f:3d:
b0:6b:13:c8:64:9c:de:8c:4d:8f:24:6d:55:d2:ce:3f:c0:e0:
0e:4b:0c:9e:90:93:9d:c2:83:1e:04:53:84:7f:69:59:56:a2:
23:9c:0a:68:29:9a:ab:5d:6f:12:16:33:08:83:26:56:d9:bd:
97:bc:6f:dc:6a:11:6f:a4:80:03:5d:62:e5:59:99:21:96:f8:
f2:3b:b2:04:13:79:fb:fb:be:9f:d7:12:c9:fc:38:1e:ed:b1:
98:75:2e:88:02:82:1c:22:63:a6:da:0b:c2:2d:06:2b:d1:dc:
c1:bc:3c:76:7c:66:af:c4:9b:b2:66:d0:60:5a:74:bd:1f:d9:
9f:ac:b6:58:a6:27:ae:c9:ca:49:3c:8d:cb:05:1f:f7:f1:b6:
b7:76:fc:92:61:a7:a7:57:3a:ee:a7:e5:d3:53:b0:2a:fd:f1:
bf:69:c6:bd:a9:91:34:6c:14:b0:43:ba:74:02:28:be:4d:c4:
b9:21:92:82:6e:66:e7:8f:40:ed:7c:6e:fd:c6:a8:08:12:dc:
73:59:0b:43:06:cb:7a:8b:0a:97:df:75:e7:c4:5c:f3:f9:9f:
06:61:86:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:51 2024 by rpki-client on console-ams.rpki-client.org