Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/SP2aW5LkB1Ph7OijFPMZCC3fNsI.roa
File: SP2aW5LkB1Ph7OijFPMZCC3fNsI.roa (raw, json)
Hash identifier: qTic5jV+jeIjvBAuvsV3np0/9Rsb3l3bXx/Ghtwrw+s=
Subject key identifier: 48:FD:9A:5B:92:E4:07:53:E1:EC:E8:A3:14:F3:19:08:2D:DF:36:C2
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 0188C3B734ED002D15FF930E3C69A30DB8DA
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/SP2aW5LkB1Ph7OijFPMZCC3fNsI.roa
Signing time: Fri 16 Jun 2023 10:19:03 +0000
ROA not before: Fri 16 Jun 2023 10:19:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 185.69.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 19 Jun 2023 07:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:b7:34:ed:00:2d:15:ff:93:0e:3c:69:a3:0d:b8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Jun 16 10:19:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48fd9a5b92e40753e1ece8a314f319082ddf36c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:5b:c5:26:87:71:3c:e3:ad:2a:fa:3c:bf:
ee:f7:c4:07:98:60:d2:19:35:42:0b:05:d0:25:bb:
27:04:a2:e1:3d:ca:ed:c6:e1:f7:30:66:26:54:52:
90:b9:b8:6b:0f:8c:d8:29:26:dc:4a:56:58:fe:b9:
91:cd:59:25:4c:65:e7:06:3f:97:d5:ac:58:04:14:
f2:a2:ff:f7:32:03:cf:4a:d4:59:93:31:49:f7:fa:
a3:82:3a:f3:e8:37:38:22:bd:ac:9b:34:09:70:3a:
ea:ce:60:4c:7b:06:4c:cc:77:26:38:e8:b1:04:5d:
40:28:b0:ef:9d:4e:0f:36:8b:bc:4e:12:f5:cf:c0:
8d:36:5f:57:6c:9a:e5:de:a2:8d:55:c0:b2:18:d2:
98:68:08:95:a9:21:36:b8:f7:f0:8f:2c:ff:da:36:
d8:c3:04:a1:87:af:d8:2a:b1:a5:06:2b:4a:6c:d9:
73:a1:14:b8:ef:25:5d:2e:0e:47:43:8b:52:ab:6a:
f2:12:66:ab:61:e5:0b:14:b2:13:76:d0:af:ac:35:
f1:d8:ab:e6:73:22:ca:cc:7a:fc:3b:e9:cc:6e:98:
68:51:19:4d:7a:77:bc:ae:bb:6b:82:2e:5d:9e:27:
28:35:20:e1:4d:8c:92:d8:99:5a:54:ad:83:22:92:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FD:9A:5B:92:E4:07:53:E1:EC:E8:A3:14:F3:19:08:2D:DF:36:C2
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/SP2aW5LkB1Ph7OijFPMZCC3fNsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.120.0/22
Signature Algorithm: sha256WithRSAEncryption
87:2d:44:e8:f6:93:03:d8:f1:42:5a:91:81:15:e8:79:fd:e2:
96:6e:58:a7:5d:5d:b8:b1:33:4a:c1:ff:06:e6:64:77:06:f0:
78:00:42:4e:67:fc:22:e0:5c:c8:13:de:af:48:a2:a9:66:49:
a6:e2:37:ee:1b:ce:19:cf:19:3b:89:34:8c:4d:f4:cd:2b:69:
01:0c:a2:3f:84:cc:38:05:51:4f:2f:83:a7:99:c7:f8:6b:47:
df:12:53:85:38:06:af:1d:35:5d:b6:20:a6:74:3d:00:5d:80:
71:89:cc:f1:5e:70:9c:8c:00:b4:2b:19:9e:ca:85:a8:05:5c:
ea:3a:c6:84:04:87:f4:a3:6d:21:10:03:0a:ea:ad:ee:ad:66:
49:d2:56:37:a3:4f:b5:9c:c9:50:d4:5a:1f:c3:ba:ac:11:92:
e6:18:52:b9:72:5d:df:47:80:54:b5:fe:51:59:92:07:21:5b:
ea:d2:b3:ec:ea:65:81:41:ec:f8:2c:c2:49:8d:10:66:b1:88:
5c:b3:c4:3b:99:7f:ce:92:d5:36:50:92:c6:9e:a1:aa:2e:e1:
16:d1:6f:d9:9c:20:33:77:a1:73:84:eb:41:5e:8f:f6:1d:c4:
7a:73:ca:1b:3c:7a:03:84:9b:55:96:13:b7:79:c6:06:88:9d:
50:7e:69:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:46 2024 by rpki-client on console-fra.rpki-client.org