Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/UpLlcaJqcuR8NPQHarnvnd9bHvI.roa
File: UpLlcaJqcuR8NPQHarnvnd9bHvI.roa (raw, json)
Hash identifier: 9UleVF5QeFIWzbfB/J10wVxZOZeVC5SQBvYytUzJv5U=
Subject key identifier: 52:92:E5:71:A2:6A:72:E4:7C:34:F4:07:6A:B9:EF:9D:DF:5B:1E:F2
Certificate issuer: /CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Certificate serial: 018728E80EEAFD70D898747BDB8123110391
Authority key identifier: 16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/UpLlcaJqcuR8NPQHarnvnd9bHvI.roa
Signing time: Tue 28 Mar 2023 15:48:29 +0000
ROA not before: Tue 28 Mar 2023 15:48:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202509
IP address blocks: 185.220.76.0/22 maxlen: 22
2a0b:f240::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:e8:0e:ea:fd:70:d8:98:74:7b:db:81:23:11:03:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Validity
Not Before: Mar 28 15:48:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5292e571a26a72e47c34f4076ab9ef9ddf5b1ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:73:06:07:4c:4d:ad:6a:4f:98:7c:7f:a3:8b:
49:f4:19:a9:ab:89:4f:fb:0f:77:53:56:e6:2b:bc:
02:98:f2:2a:c3:7a:1a:06:74:da:70:47:b0:0b:6f:
07:58:19:2a:7f:3b:46:b0:4d:5c:dc:02:f4:93:d1:
59:68:3c:45:45:44:e6:43:56:b0:6b:5b:19:e5:11:
95:d1:f5:06:4d:e1:d3:a0:b0:d2:26:5e:c6:d1:42:
30:61:69:36:0d:42:78:e9:04:66:b1:6b:f9:6d:a5:
71:6e:c1:8c:e7:3a:84:bb:52:e5:7d:b9:45:e3:09:
49:4a:5a:67:f7:dd:31:f7:90:68:17:6c:dd:a0:a6:
4a:75:92:54:45:5e:b8:53:1c:a2:9f:0a:c1:ff:51:
7d:60:fb:d8:98:f7:ce:9d:98:ea:95:a6:1d:0e:8c:
e3:ee:c3:6c:cb:d3:96:55:38:67:08:a5:84:9e:05:
d5:bd:db:59:91:e8:76:ba:43:9e:97:f8:05:5b:17:
94:fa:8a:6b:e1:f7:30:91:7b:89:8e:0d:0b:81:c5:
d1:20:2e:74:ea:df:1c:1e:53:e4:2c:5a:4a:f3:c3:
94:8b:09:ba:91:ff:0f:e5:33:76:52:1b:07:f9:fd:
a0:9b:8d:03:5a:04:a7:c1:ef:38:0a:46:95:36:4d:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:92:E5:71:A2:6A:72:E4:7C:34:F4:07:6A:B9:EF:9D:DF:5B:1E:F2
X509v3 Authority Key Identifier:
keyid:16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/UpLlcaJqcuR8NPQHarnvnd9bHvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.76.0/22
IPv6:
2a0b:f240::/29
Signature Algorithm: sha256WithRSAEncryption
90:15:77:6d:b5:88:91:4f:91:06:f8:67:73:8f:52:cf:0a:b3:
62:47:82:e9:a1:eb:8d:b6:1f:84:5b:08:80:2b:20:79:43:4e:
71:a0:e5:c0:32:07:bd:32:a2:4b:8c:b4:a1:d5:fe:20:62:2d:
12:b3:27:fa:56:22:a1:c0:3b:a3:8e:db:0d:db:44:77:fa:40:
a0:e1:f9:8b:f5:41:c3:df:44:0b:0c:f4:d8:bc:51:91:8c:6d:
62:07:ea:fd:bc:b2:1a:e1:12:8a:c0:48:26:17:8e:d7:9d:5b:
cf:53:55:05:40:be:f1:a0:bf:21:7c:38:34:1d:6f:d8:d7:4e:
42:9f:e0:0d:95:b2:36:86:3e:45:4f:bf:df:5e:48:8d:f2:88:
b7:8a:f9:2f:c6:66:5a:77:26:b4:43:b2:dc:ae:a7:61:86:4b:
bf:6d:d5:b4:71:54:d1:84:0c:fd:bf:9e:76:11:fa:c7:80:64:
f4:49:09:e0:7d:05:84:bc:cb:30:87:be:27:bc:71:80:84:a9:
c5:5c:25:2a:8a:dc:40:7a:81:89:e4:6b:58:17:31:12:23:d9:
7c:ef:ef:b1:c4:d1:42:ed:50:b6:de:9d:42:68:07:24:85:77:
14:d9:57:33:fb:b7:16:d1:f6:83:cd:93:c5:a4:77:d2:c9:a9:
aa:07:1b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:08 2024 by rpki-client on console-ams.rpki-client.org