Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/S8Yxi6sMmJGBxN6ztmgnPUOuqGM.roa
File: S8Yxi6sMmJGBxN6ztmgnPUOuqGM.roa (raw, json)
Hash identifier: Xj5bgFoscZQTrp3VQmtQou58MRaWNTH4h11y0XCBPlQ=
Subject key identifier: 4B:C6:31:8B:AB:0C:98:91:81:C4:DE:B3:B6:68:27:3D:43:AE:A8:63
Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial: 01857169D17AB0DB686A72168144FEFB4D4C
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/S8Yxi6sMmJGBxN6ztmgnPUOuqGM.roa
Signing time: Mon 02 Jan 2023 07:37:18 +0000
ROA not before: Mon 02 Jan 2023 07:37:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60537
IP address blocks: 185.29.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:d1:7a:b0:db:68:6a:72:16:81:44:fe:fb:4d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
Validity
Not Before: Jan 2 07:37:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bc6318bab0c989181c4deb3b668273d43aea863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8f:bd:78:53:42:0f:15:10:48:d4:02:30:a3:
80:e5:cf:c4:38:dd:22:3c:37:25:1a:6d:6e:a1:fa:
31:d4:fd:e7:26:e4:07:fd:ff:d7:8d:94:c2:af:de:
c0:a8:4b:69:5c:48:c7:8e:45:0e:b4:cf:ad:93:a4:
ab:49:8f:d5:a5:ed:a3:af:56:7e:c5:75:08:37:96:
88:c0:2a:5f:7f:d7:ba:7d:31:4f:8f:01:00:c9:9e:
8d:79:93:75:5d:b8:fa:7a:99:1c:27:21:c9:1f:ac:
ee:20:fc:bc:81:73:4b:81:22:ab:5a:80:a4:0c:b8:
8a:c5:43:b6:6e:ae:d0:10:61:cd:54:30:68:5e:09:
75:f6:09:bf:f1:c2:bc:6f:91:61:9e:79:a3:9b:db:
20:32:53:13:ac:4e:90:3a:9d:0e:aa:3b:87:e2:e3:
04:8a:27:40:21:00:fe:9e:fd:2e:96:7e:fb:dc:d1:
27:4b:9d:b8:56:6f:8e:8e:fe:7c:e0:ef:4c:7b:c9:
8d:c9:64:c3:82:c7:f7:b3:7a:d0:33:f8:fe:04:c8:
d7:11:2a:f2:74:05:e4:cb:af:a6:1d:48:26:fa:73:
02:fc:51:40:d0:d3:8b:30:af:47:c2:c4:ea:c9:bb:
6a:94:b6:bd:fc:73:20:10:46:f9:79:1c:18:a4:e5:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C6:31:8B:AB:0C:98:91:81:C4:DE:B3:B6:68:27:3D:43:AE:A8:63
X509v3 Authority Key Identifier:
keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/S8Yxi6sMmJGBxN6ztmgnPUOuqGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.192.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:ac:e5:49:8b:a7:eb:8b:57:53:3f:46:6b:76:b9:da:08:b1:
72:2c:62:49:bf:c6:e0:97:9d:a2:f5:cd:a3:be:7b:b2:1c:25:
6f:d1:00:ad:c8:72:b7:a7:33:f0:78:c8:b4:0b:95:55:a3:e9:
ce:af:3d:bb:0f:c3:d0:ba:e3:b0:20:d3:08:48:12:02:43:9f:
59:81:7d:2a:c4:d8:56:7e:0d:8d:1b:01:f4:f2:62:7a:73:30:
00:14:ff:9e:c8:f3:20:0d:28:99:71:ee:2e:cc:d1:cf:a2:ba:
98:d1:c6:08:dc:52:ca:72:b7:82:27:78:0e:eb:60:b7:55:61:
aa:d3:c6:42:e5:0c:b3:0a:6b:2a:7f:80:64:ed:52:13:52:49:
fb:4d:73:63:36:44:a7:a0:76:54:20:21:85:cf:90:07:1f:2e:
59:0e:59:05:32:ab:e5:15:33:90:37:1c:e9:b2:bd:64:a2:41:
60:95:0c:84:61:55:c0:bb:d5:60:59:7c:3b:da:62:0c:5f:b1:
a2:0f:45:2d:c0:25:a9:d2:9c:59:67:64:59:9a:09:5c:27:79:
69:29:d2:dd:44:b5:07:22:bc:19:80:73:f8:08:71:c3:0f:e0:
43:af:97:16:1c:34:2b:06:ab:0c:26:07:39:0a:64:74:1c:1b:
a5:e0:f2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:28 2024 by rpki-client on console-ams.rpki-client.org