Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/1-GOFOIbLzFapmXXndRsV7rHnV7I.roa
File: 1-GOFOIbLzFapmXXndRsV7rHnV7I.roa (raw, json)
Hash identifier: rTyTMw0FcnzrAxVZeNX7qwlSd0uR6rudT2hHeUKEaXA=
Subject key identifier: F8:63:85:38:86:CB:CC:56:A9:99:75:E7:75:1B:15:EE:B1:E7:57:B2
Certificate issuer: /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial: 0185723A3A71B5626E3479E40A228988ADE4
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/1-GOFOIbLzFapmXXndRsV7rHnV7I.roa
Signing time: Mon 02 Jan 2023 11:24:56 +0000
ROA not before: Mon 02 Jan 2023 11:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43998
IP address blocks: 185.111.116.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:3a:71:b5:62:6e:34:79:e4:0a:22:89:88:ad:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Validity
Not Before: Jan 2 11:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f863853886cbcc56a99975e7751b15eeb1e757b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:64:2f:1f:a1:09:e9:19:f0:25:25:c7:92:10:
b4:97:1c:69:b2:dd:f1:99:fd:dd:f2:ee:3d:bc:5a:
9e:bc:a3:19:3f:af:42:b5:4d:ba:38:ae:5f:82:2d:
85:3b:26:0d:65:f6:97:ff:8e:04:fc:7f:60:83:83:
93:01:7d:5d:97:fd:89:94:0c:a3:fc:4e:8d:57:68:
c0:f3:3a:db:2a:06:44:43:fd:f6:d5:9c:c1:6e:9d:
19:ce:df:c7:55:44:19:98:29:19:b0:d0:34:0f:45:
d8:62:13:e0:42:0b:64:b3:be:a0:94:db:3d:d7:ab:
33:7c:07:54:6f:77:fd:d3:33:08:11:0a:f0:f0:30:
af:62:d5:48:5c:80:81:d7:e0:7d:99:70:e1:99:74:
36:a4:68:07:1d:ab:50:f1:4a:1e:a6:65:64:ea:ce:
ef:4c:16:80:52:6d:97:fe:4e:85:7b:50:ba:f8:b0:
c6:0f:1e:7a:5f:61:d9:d8:8a:a0:d8:13:de:f3:39:
55:1f:27:a6:25:55:92:01:c8:e8:b5:1e:ff:08:29:
4a:de:6e:7d:81:74:b8:ff:8d:df:c8:d1:4e:af:a7:
01:d1:ee:d6:0e:06:db:d9:a3:a4:a2:59:88:29:86:
0e:ec:7c:9e:c6:2d:07:e4:07:9a:2f:43:13:aa:d8:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:63:85:38:86:CB:CC:56:A9:99:75:E7:75:1B:15:EE:B1:E7:57:B2
X509v3 Authority Key Identifier:
keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/1-GOFOIbLzFapmXXndRsV7rHnV7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.116.0/22
Signature Algorithm: sha256WithRSAEncryption
96:ad:9e:56:c4:fe:81:c3:b2:e4:22:e1:b5:a6:0f:54:bb:d4:
23:c6:42:84:5e:9f:9f:b6:a0:2f:f2:f4:61:88:70:35:8e:85:
ec:45:32:eb:25:3e:cd:38:1e:af:00:52:07:88:5f:ec:a4:e1:
5e:cb:cf:09:53:b8:eb:c6:f5:30:fe:5f:da:fe:22:37:1d:4a:
e4:92:00:40:8f:e2:1f:12:33:28:a6:d4:0e:60:f4:21:67:df:
06:7c:70:e0:7d:6e:b8:dd:78:5f:54:7e:d7:85:5a:e7:dd:d7:
cd:f6:dd:1b:e6:9c:3a:45:bf:99:12:c1:3d:ca:13:98:72:4f:
2a:74:0a:f5:b5:e5:a7:28:06:ce:73:a9:d5:e6:1f:02:5f:75:
e2:20:84:38:5d:b6:a7:97:bd:a8:e4:2e:06:d2:fe:0e:9d:28:
45:64:7e:72:8c:61:c3:e6:86:31:a1:8c:18:1c:b2:16:dc:d4:
25:6a:d4:ff:34:6e:d0:1f:ee:ff:7b:d3:ea:17:66:21:16:70:
e0:41:e1:b8:c8:44:c2:67:71:cc:0c:d5:ec:18:1d:be:b1:6b:
6c:40:78:94:0e:4d:bd:a2:28:34:6d:ba:c8:58:a0:bf:c7:c5:
81:ff:61:f7:72:c6:81:00:63:aa:3b:b6:70:0a:ba:cc:48:b4:
4c:ef:19:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:20 2024 by rpki-client on console-ams.rpki-client.org