Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/JmIOmcUJmq7fCVOt99ljXUw6X_s.roa
File: JmIOmcUJmq7fCVOt99ljXUw6X_s.roa (raw, json)
Hash identifier: 37qG0BjLdPX8pkLtt8Z56tmsJUFVYxhYtFo2eT8VTJw=
Subject key identifier: 26:62:0E:99:C5:09:9A:AE:DF:09:53:AD:F7:D9:63:5D:4C:3A:5F:FB
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 018571954128B4BE33C4138D23F7D159B1D3
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/JmIOmcUJmq7fCVOt99ljXUw6X_s.roa
Signing time: Mon 02 Jan 2023 08:24:44 +0000
ROA not before: Mon 02 Jan 2023 08:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206481
IP address blocks: 185.218.96.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:41:28:b4:be:33:c4:13:8d:23:f7:d1:59:b1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Jan 2 08:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26620e99c5099aaedf0953adf7d9635d4c3a5ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ca:f5:62:68:3b:f0:b2:2d:5f:87:84:86:09:
1d:ea:df:fa:5f:c0:df:8f:81:22:62:d8:4e:09:02:
ef:07:be:a0:e7:4a:d2:9c:8e:36:7f:eb:09:4e:a2:
66:8d:f1:46:59:d0:87:66:63:1b:25:8f:9a:36:a9:
c0:85:af:90:0a:c3:fc:f6:e5:48:97:43:13:bb:d8:
d2:f9:d5:7e:5b:af:40:82:3d:8a:2d:f2:ed:de:68:
0d:ce:ec:98:96:4e:f7:c7:86:19:02:26:99:8c:c5:
8d:67:b7:16:eb:a9:1e:40:c6:b5:c8:16:13:43:9d:
b0:8b:fc:ef:72:d0:ab:56:12:b1:93:06:14:79:6e:
8a:ce:43:58:b1:04:e6:8c:d1:ca:24:67:c5:86:4d:
31:35:29:f1:db:1a:97:9f:7c:25:05:7c:4d:bf:73:
81:3d:2b:34:7b:4b:04:bc:79:95:39:79:16:58:23:
83:53:81:0a:8d:bd:82:6c:03:84:99:dd:4a:7e:43:
64:27:03:7c:94:ab:7d:c1:36:ed:85:28:22:71:81:
b2:82:fc:0b:0a:4e:c5:8b:6f:07:28:c9:f1:9b:a5:
37:73:d2:28:0f:4e:d3:40:00:21:c3:3c:92:3b:4f:
a1:3b:81:5e:84:5b:ab:be:03:44:5c:e9:2f:d5:39:
bf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:62:0E:99:C5:09:9A:AE:DF:09:53:AD:F7:D9:63:5D:4C:3A:5F:FB
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/JmIOmcUJmq7fCVOt99ljXUw6X_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.96.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:98:1c:08:90:bf:e6:d6:59:f2:00:0e:fb:32:d6:da:e7:54:
e3:9d:3a:b1:df:9e:09:10:d1:c9:78:cc:59:aa:29:db:25:d0:
15:c8:94:56:37:9b:81:d6:d0:e6:af:60:cb:94:2e:24:64:98:
37:9d:06:dc:1e:82:d4:03:c1:49:2d:9a:9f:f8:ce:d3:f5:38:
d7:52:6d:e7:ba:48:79:ec:7b:08:de:52:d2:32:54:90:8c:aa:
eb:8c:c1:58:41:c6:af:71:8f:be:48:e2:ea:80:62:aa:0b:27:
33:46:1c:26:db:35:23:3b:7f:89:67:7b:3f:49:28:11:e6:b2:
27:10:af:ba:69:70:d0:f5:62:52:7b:90:e2:19:0c:42:9f:e2:
d1:02:c2:70:59:a5:1c:5b:2c:7e:e4:31:42:a8:4c:5c:3a:7b:
93:56:26:59:47:21:6e:3c:88:7f:bf:fc:b3:6a:59:8b:51:0f:
89:3d:a8:4e:41:02:6d:a9:e7:c5:50:e6:97:5b:aa:dc:28:32:
59:2b:bc:fd:f0:95:b7:5d:a2:97:eb:ed:86:30:dc:b1:df:e3:
45:82:13:25:3c:2c:d0:3d:aa:22:15:32:c7:1c:39:ba:8c:99:
e6:8b:17:0f:e6:d4:b5:28:82:91:64:90:00:b1:b4:f4:db:a5:
f7:a6:71:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:52 2024 by rpki-client on console-ams.rpki-client.org