Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/IU1UH0wJMdQIM5pfxXYByo2sSUo.roa
File: IU1UH0wJMdQIM5pfxXYByo2sSUo.roa (raw, json)
Hash identifier: XEw3N/xTHwIZANZi64Alw9OUjDGx061ShYRNgx5nX9M=
Subject key identifier: 21:4D:54:1F:4C:09:31:D4:08:33:9A:5F:C5:76:01:CA:8D:AC:49:4A
Certificate issuer: /CN=d2de05d3ca750dd5c27eebfa5539c20b7d2829cf
Certificate serial: 018D25A2DE53E63223C3708779BCD1A21BEC
Authority key identifier: D2:DE:05:D3:CA:75:0D:D5:C2:7E:EB:FA:55:39:C2:0B:7D:28:29:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t4F08p1DdXCfuv6VTnCC30oKc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/IU1UH0wJMdQIM5pfxXYByo2sSUo.roa
Signing time: Sat 20 Jan 2024 06:50:47 +0000
ROA not before: Sat 20 Jan 2024 06:50:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208925
IP address blocks: 185.157.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 22 Mar 2024 11:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:25:a2:de:53:e6:32:23:c3:70:87:79:bc:d1:a2:1b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2de05d3ca750dd5c27eebfa5539c20b7d2829cf
Validity
Not Before: Jan 20 06:50:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=214d541f4c0931d408339a5fc57601ca8dac494a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:b0:93:e9:af:1f:57:db:03:bc:9d:3b:17:
1c:9f:20:92:75:fe:e9:70:99:af:20:6a:a8:83:eb:
59:a1:e0:d8:c0:92:f3:31:b3:26:3d:37:f5:3d:4c:
7e:7c:41:b2:2c:33:03:04:af:82:fe:90:52:5d:ee:
ac:bd:ad:0d:1b:a0:c3:f6:10:6a:c8:de:7f:09:31:
29:0e:bb:88:09:ab:93:4c:c8:68:bf:e2:9c:0c:2a:
75:a3:b4:3b:c2:22:11:b4:64:06:7f:00:a4:73:ba:
a1:9c:f8:6f:9d:4b:d1:e2:4e:a2:1c:a8:fb:65:42:
95:59:f5:e5:c9:56:bc:f7:e1:0a:90:f3:9c:19:a9:
40:c0:5d:b1:05:01:84:f3:29:00:e7:d2:25:f2:72:
ed:93:fc:3b:05:29:ac:1f:a1:24:57:24:11:62:c3:
c1:6d:4a:21:c4:b1:f3:c2:c4:33:d1:51:25:29:af:
ac:6e:78:18:95:92:ca:bd:44:09:0f:44:7b:7f:d4:
02:24:74:f1:8d:0b:b6:91:05:9c:6a:d9:8d:0d:6f:
1a:1c:a2:bb:e8:6e:20:2c:ba:82:8b:b2:32:50:19:
4d:43:18:76:28:cd:99:09:50:93:d6:b6:f0:22:8d:
47:07:a9:d6:0a:83:84:2a:cc:32:05:2c:a8:9d:95:
19:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4D:54:1F:4C:09:31:D4:08:33:9A:5F:C5:76:01:CA:8D:AC:49:4A
X509v3 Authority Key Identifier:
keyid:D2:DE:05:D3:CA:75:0D:D5:C2:7E:EB:FA:55:39:C2:0B:7D:28:29:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t4F08p1DdXCfuv6VTnCC30oKc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/IU1UH0wJMdQIM5pfxXYByo2sSUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/0t4F08p1DdXCfuv6VTnCC30oKc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:9f:af:97:0a:ae:cd:41:23:ea:5f:3d:2d:39:94:8b:9f:9e:
19:af:ae:9d:9d:29:93:6e:16:66:5f:b9:10:39:42:38:1e:17:
05:e4:f3:9e:f2:db:db:0a:62:b0:00:22:7b:7a:61:19:2a:96:
31:20:aa:42:25:4b:8b:6a:b9:bf:e6:4f:ae:08:93:fe:11:49:
bc:92:df:b3:d3:b0:b5:c0:c8:92:b9:1c:c9:23:03:78:8c:d8:
68:a7:a2:b3:1d:f7:8b:28:43:d5:1a:86:f2:a1:d5:4b:35:0c:
16:1b:9b:38:2e:10:b5:30:58:c8:91:7c:d3:9f:3a:de:77:f7:
25:80:32:71:b1:fb:ae:45:fb:72:f3:9f:20:5f:60:6f:b8:e0:
06:dc:b7:c0:1d:24:57:0f:15:7b:04:8f:70:79:11:30:87:ea:
d6:f3:c2:0b:1b:19:35:78:e2:8f:b8:7c:ab:cb:33:2a:03:ee:
75:5e:17:57:ea:46:75:db:35:dc:8a:ed:8c:37:8c:73:0e:f3:
f0:1a:9d:dc:47:e1:47:99:4d:06:12:f0:b5:57:bd:fe:f9:db:
9c:52:ec:04:72:5d:98:d6:d9:0a:31:0f:cb:f4:b2:23:aa:b3:
31:c9:75:7c:1e:6b:ac:eb:a7:89:30:3b:98:96:67:65:87:8f:
59:3b:31:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 16:08:05 2024 by rpki-client on console-ams.rpki-client.org