Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/jLO6wtDBvmxK1wDvF1mz1_DZs3c.roa
File: jLO6wtDBvmxK1wDvF1mz1_DZs3c.roa (raw, json)
Hash identifier: /0+YsC7ELRBuuRPsZOap10Pasp33oL7LQKqViV12u8c=
Subject key identifier: 8C:B3:BA:C2:D0:C1:BE:6C:4A:D7:00:EF:17:59:B3:D7:F0:D9:B3:77
Certificate issuer: /CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Certificate serial: 01856ED4CFC248501C2723FD7BB4006027A2
Authority key identifier: 37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/jLO6wtDBvmxK1wDvF1mz1_DZs3c.roa
Signing time: Sun 01 Jan 2023 19:35:18 +0000
ROA not before: Sun 01 Jan 2023 19:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205315
IP address blocks: 185.222.116.0/24 maxlen: 24
185.222.117.0/24 maxlen: 24
2a0c:3800:ff::/48 maxlen: 48
2a0c:3800::/40 maxlen: 48
2a0c:3800:100::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:cf:c2:48:50:1c:27:23:fd:7b:b4:00:60:27:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Validity
Not Before: Jan 1 19:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cb3bac2d0c1be6c4ad700ef1759b3d7f0d9b377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:13:ba:3d:69:0d:34:75:ac:f7:3b:f4:c5:
15:e2:1b:87:38:9e:c0:01:dd:94:76:7a:46:3f:a0:
4a:2a:5a:9f:db:58:31:fe:ed:9a:b8:57:bf:29:7b:
dc:2f:9c:02:a5:34:ad:2e:8e:fd:85:3c:af:8f:88:
fa:df:24:40:da:cc:c8:86:a2:09:e0:26:c5:3a:12:
20:e6:01:37:16:d6:ae:9a:42:17:a8:c0:d7:e5:19:
61:25:ce:a8:86:eb:f7:a9:fc:9f:26:92:cd:13:3a:
4f:6e:f6:71:21:84:66:49:7b:82:bc:5e:ed:d7:f7:
ca:27:4b:06:02:b6:87:ef:e4:eb:9b:88:8d:de:fd:
27:8b:52:50:af:97:ea:fe:a0:8d:42:01:11:a5:74:
3c:ec:3b:f8:40:48:c9:1e:ef:d6:e5:64:29:91:e3:
97:fe:c6:64:6c:be:a2:9c:73:00:df:96:ff:28:80:
4b:9b:30:d5:87:4f:29:96:ea:26:a9:d7:5f:a3:2b:
a9:5b:73:56:b2:fb:37:54:9c:59:b4:8c:f7:d1:06:
d6:4d:a5:b2:9d:21:66:f5:d8:39:ac:1c:f7:a8:26:
07:a3:15:99:af:ab:1a:5f:da:99:82:13:16:38:ab:
78:10:4b:e3:64:76:52:b6:c9:1a:77:85:7c:37:9b:
e1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B3:BA:C2:D0:C1:BE:6C:4A:D7:00:EF:17:59:B3:D7:F0:D9:B3:77
X509v3 Authority Key Identifier:
keyid:37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/jLO6wtDBvmxK1wDvF1mz1_DZs3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.116.0/23
IPv6:
2a0c:3800::-2a0c:3800:100:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
37:49:29:e4:b1:44:af:76:52:2a:d2:6c:d4:3b:23:67:d4:2c:
8a:d4:99:ac:15:c4:5b:e0:0a:9a:40:62:40:2c:e9:c6:ff:8a:
9a:d6:8a:ef:09:eb:36:44:ed:9b:c6:67:6f:e8:b6:14:03:e9:
af:a3:97:d9:c0:a9:99:67:75:62:81:0b:f7:ec:f3:e1:7d:24:
d8:07:d6:57:8e:b6:b5:3b:c4:7a:33:36:fa:6c:15:af:b2:0e:
6e:17:d9:b2:dc:e3:3d:23:8e:3d:b1:1f:b3:e4:b6:cd:6f:20:
b6:62:5e:f1:9e:63:d9:b1:b5:8c:35:93:a1:5a:d2:52:4e:1f:
9b:ab:e7:b3:cf:89:83:cc:d0:1d:99:52:f1:19:5b:95:db:60:
7a:6f:00:71:3d:1d:13:9a:68:1d:de:82:c1:0b:26:db:26:46:
b5:81:08:03:8b:88:51:98:32:c0:32:7b:7d:c5:81:9e:10:37:
ba:a5:87:e5:fc:98:72:5f:32:20:6a:c2:56:ff:08:f7:d9:5d:
8b:5e:19:a1:97:7b:f3:da:f0:52:58:36:17:49:61:c4:90:f7:
ef:20:6b:fb:d3:50:29:ac:c7:9d:59:45:b9:9a:c0:8e:70:88:
a3:ff:3a:30:28:e6:46:9f:a6:a8:b4:01:50:46:1b:8b:c9:f1:
15:c0:fb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:04 2023 by rpki-client on console-ams.rpki-client.org