Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/9uNBW4XoRwfaLveO9XlJWM-906E.roa
File: 9uNBW4XoRwfaLveO9XlJWM-906E.roa (raw, json)
Hash identifier: dx1eMhYiD5dQN91JwD6jmrkvImorN+OfeXpLw4mxzKQ=
Subject key identifier: F6:E3:41:5B:85:E8:47:07:DA:2E:F7:8E:F5:79:49:58:CF:BD:D3:A1
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 01856EC22F7EE79C3DBF8AACBB57D7810110
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/9uNBW4XoRwfaLveO9XlJWM-906E.roa
Signing time: Sun 01 Jan 2023 19:14:57 +0000
ROA not before: Sun 01 Jan 2023 19:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 185.161.88.0/22 maxlen: 24
2a00:ddc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:2f:7e:e7:9c:3d:bf:8a:ac:bb:57:d7:81:01:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Jan 1 19:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6e3415b85e84707da2ef78ef5794958cfbdd3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:02:f7:e0:73:82:42:ab:8b:e0:54:c2:0e:
5e:7b:cb:ed:c1:5b:6d:81:1f:e8:0a:af:19:6a:8f:
86:4a:56:08:8a:c2:10:09:96:b2:13:f1:81:96:1f:
66:eb:28:2c:e4:9c:bc:bd:da:df:fe:97:84:ab:1e:
84:2b:59:98:55:4e:b0:9a:50:91:e7:3c:9e:4b:a8:
34:91:d6:35:1d:9b:1f:0b:43:de:38:c8:14:ec:2b:
8c:50:12:a1:df:23:38:08:f6:98:42:87:32:22:97:
28:78:e5:95:d3:97:1b:5f:31:64:ae:03:b6:e7:d8:
0a:9f:5d:82:72:ff:03:ec:a1:91:b3:c7:eb:1b:da:
2a:dd:10:07:a3:8b:66:c6:fd:7f:22:d3:b1:87:ae:
63:20:3c:fc:a3:70:ef:71:86:96:de:a9:a8:75:4c:
ae:6a:65:82:8f:de:52:93:43:56:07:83:a5:b2:fe:
d9:56:f1:f5:be:f6:90:1b:40:f1:f7:23:be:af:d8:
ee:b4:25:6f:e0:a4:20:fd:c6:a6:84:5e:fc:7b:9b:
ff:aa:a8:21:8a:98:eb:64:45:be:af:34:7e:49:0a:
aa:ff:a4:81:dd:f1:cd:03:9b:f6:b5:bd:08:2d:e0:
e6:d3:9e:31:6d:8e:5b:20:6e:38:4b:31:94:2e:3a:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E3:41:5B:85:E8:47:07:DA:2E:F7:8E:F5:79:49:58:CF:BD:D3:A1
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/9uNBW4XoRwfaLveO9XlJWM-906E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.88.0/22
IPv6:
2a00:ddc0::/32
Signature Algorithm: sha256WithRSAEncryption
45:5a:44:c2:bd:dc:a7:1f:63:22:a9:1d:b0:e0:05:0e:0e:21:
65:8d:7c:21:d1:19:13:61:dd:92:44:3b:f6:bb:f0:93:23:d4:
ff:2e:10:b7:df:d2:ce:9d:55:73:cb:a8:dd:8f:84:f2:98:67:
02:fc:c7:07:7f:09:6d:27:b5:33:1a:a5:2d:ac:33:0c:ee:9f:
0a:dd:c8:76:d3:a8:f7:26:d5:fd:e6:d5:f9:6a:a6:bd:48:22:
bf:6d:51:1c:5a:5e:d9:1d:69:06:92:29:b3:c5:a0:93:0d:9b:
61:63:e5:57:c7:14:e8:fb:6f:70:6b:5e:f2:37:ef:4e:87:51:
aa:1c:55:cf:38:41:43:a6:0d:e1:7c:ac:95:8f:e7:93:4f:ef:
be:8d:0c:88:20:c8:f8:ed:a6:9b:68:50:16:9a:37:6f:a4:81:
72:6e:46:58:7d:54:28:78:32:21:19:68:36:d4:fa:2e:16:9d:
ff:a0:13:0d:17:74:21:48:04:ab:42:23:13:5f:99:29:f6:a3:
6b:15:fd:c4:a0:d9:bd:0a:7b:bb:22:75:dd:6b:90:ab:ce:71:
31:93:06:b2:8e:84:49:0e:2a:52:1e:ed:bc:7d:f4:93:27:8e:
70:f0:8c:ea:9b:7a:91:b2:f3:2e:a3:06:46:6d:43:6e:87:12:
01:ae:7d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:13 2024 by rpki-client on console-fra.rpki-client.org