Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/cUxvAl4clqKTvPCVSqHczhOIMcs.roa
File: cUxvAl4clqKTvPCVSqHczhOIMcs.roa (raw, json)
Hash identifier: ru5tFEsu52/lmINPbU4FSUvACviu0pKBb0LBZUR65xo=
Subject key identifier: 71:4C:6F:02:5E:1C:96:A2:93:BC:F0:95:4A:A1:DC:CE:13:88:31:CB
Certificate issuer: /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial: 01868D0F4FDAE9C83C210D109A7D5C921601
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/cUxvAl4clqKTvPCVSqHczhOIMcs.roa
Signing time: Sun 26 Feb 2023 09:30:36 +0000
ROA not before: Sun 26 Feb 2023 09:30:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31898
IP address blocks: 185.208.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 28 Feb 2023 15:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8d:0f:4f:da:e9:c8:3c:21:0d:10:9a:7d:5c:92:16:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Validity
Not Before: Feb 26 09:30:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=714c6f025e1c96a293bcf0954aa1dcce138831cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6d:91:f4:2c:d8:a8:16:d2:e1:f1:a5:7b:a4:
3d:3a:86:ab:1c:7e:fb:9f:f5:78:9f:de:f7:48:ec:
70:1e:b6:22:63:34:d0:4c:43:dd:b0:2e:48:ea:f7:
b3:57:ad:d0:8e:bb:d3:0b:62:fa:43:f0:97:d1:36:
fe:76:b2:65:0b:83:d7:4b:c8:c9:4c:70:85:15:8f:
1d:8d:c2:17:72:36:25:62:f8:9b:05:6a:90:e3:13:
66:a8:8d:d6:89:70:70:b0:44:11:3b:7a:27:af:ed:
d9:6f:f6:4e:93:e1:af:13:d6:1c:48:de:52:f3:79:
9c:15:a5:f0:77:72:3a:5d:1d:8b:50:1e:ad:d8:25:
58:10:24:55:a8:bf:37:16:2d:73:59:8d:7f:84:b3:
13:f3:ef:fc:a3:50:30:65:11:c7:04:81:83:b6:0f:
55:4d:6f:b7:18:d0:90:52:61:bd:f6:1c:53:4f:40:
5e:21:56:04:da:a0:f6:c8:e8:2d:80:1c:81:39:5c:
3b:d0:00:8b:eb:9f:c0:57:f5:76:c1:1c:ed:43:4d:
ae:e5:e8:c8:f0:aa:ce:58:5b:85:76:a8:4a:09:41:
52:ed:b8:dd:23:cd:23:f1:6d:b1:a9:0e:74:7f:b1:
00:ee:35:6b:d8:b5:08:91:dc:e1:b3:40:b3:7b:52:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4C:6F:02:5E:1C:96:A2:93:BC:F0:95:4A:A1:DC:CE:13:88:31:CB
X509v3 Authority Key Identifier:
keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/cUxvAl4clqKTvPCVSqHczhOIMcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.36.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:61:a4:6a:4e:91:3c:07:b7:f7:48:2a:48:3e:8e:31:58:a4:
3e:37:0c:9b:80:05:c9:d8:6d:5a:5d:e9:f7:84:a1:76:e5:ea:
12:b4:90:d6:cc:07:2f:10:39:e5:2b:8c:8b:e3:be:fd:77:46:
15:02:2f:58:4f:f6:f7:57:98:0b:28:ef:10:aa:3b:37:19:4d:
1d:f6:1b:be:10:eb:86:04:7b:50:15:14:eb:30:63:1c:66:a1:
6c:c2:37:55:57:68:37:3c:2d:39:88:ca:5e:87:3f:64:4b:25:
8b:13:15:94:01:7b:59:7b:be:76:79:b7:64:36:9e:91:44:72:
e4:4d:8b:2b:79:e6:ec:45:04:95:b0:7d:51:a8:8a:4d:cc:c7:
09:6c:a5:ad:ff:12:58:88:a3:37:40:47:57:87:b7:d3:ac:2e:
10:12:b8:99:d5:e2:ca:d1:9a:72:bc:7b:a5:a0:9e:3b:51:96:
4b:44:fd:e8:52:d1:b9:a5:3e:d2:4b:e7:72:df:86:ad:d7:8e:
1f:d7:1d:59:42:4c:f1:a8:0b:ef:3e:e7:b3:2d:19:39:4f:ae:
da:1d:4f:bb:3f:93:ea:5c:3f:0f:5b:06:03:5b:45:15:71:10:
bd:98:d1:02:a9:d5:dc:bf:31:b7:90:70:34:57:5c:bf:4d:75:
65:0d:92:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:34 2024 by rpki-client on console-ams.rpki-client.org