Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/rVN7kP2BlYiNOSlB28mWjfVXHFg.roa
File: rVN7kP2BlYiNOSlB28mWjfVXHFg.roa (raw, json)
Hash identifier: mLG+pPylodFmOuUNukGSfXODwEnKMCIs9+kZC6B0CS4=
Subject key identifier: AD:53:7B:90:FD:81:95:88:8D:39:29:41:DB:C9:96:8D:F5:57:1C:58
Certificate issuer: /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial: 01857246ACFE62AC19AD0CC5E04DC9CD8518
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/rVN7kP2BlYiNOSlB28mWjfVXHFg.roa
Signing time: Mon 02 Jan 2023 11:38:32 +0000
ROA not before: Mon 02 Jan 2023 11:38:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203715
IP address blocks: 185.126.60.0/22 maxlen: 23
2a06:bf00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ac:fe:62:ac:19:ad:0c:c5:e0:4d:c9:cd:85:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Validity
Not Before: Jan 2 11:38:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad537b90fd8195888d392941dbc9968df5571c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:17:7e:cc:95:09:8b:d7:5d:b9:2f:13:8a:d5:
29:ae:d6:f8:b4:aa:3c:2a:7d:99:dd:59:55:79:a4:
fe:e8:50:79:1c:22:ae:be:fd:ce:06:00:f3:a8:f7:
97:8e:f4:bb:2d:9b:65:02:3f:fb:ff:ad:97:f0:67:
9e:e0:5c:3a:c1:7d:80:e0:1e:23:7b:01:3f:e0:3a:
8a:68:b7:38:8a:49:8d:6e:9b:a0:e3:14:40:20:20:
a4:7b:d2:31:41:82:39:ac:47:98:8e:1c:b0:ab:56:
f2:78:b8:88:f7:e1:b9:d2:c4:d0:c2:f2:c2:35:6f:
cc:9f:a7:f3:9e:31:25:35:ed:45:67:af:42:f5:3f:
7e:db:d0:92:4e:b0:d1:61:0e:46:6e:eb:85:ba:1a:
0f:97:28:6b:cf:d5:3e:f8:18:3b:85:48:2e:b4:e4:
ff:86:ac:61:96:31:88:22:9f:94:c7:9d:8b:9a:d5:
17:44:c8:03:af:f1:04:81:29:6c:1d:90:7b:eb:56:
91:d0:af:6f:94:79:f3:f7:d7:09:16:7a:ed:f3:5a:
52:5e:50:e0:40:9e:7c:d0:f7:f0:38:de:ea:9c:14:
57:ca:79:b1:63:18:59:ea:6f:b6:86:8e:92:52:e5:
bd:50:a8:2c:ea:b9:e9:13:28:ae:39:c8:a6:b2:08:
5f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:53:7B:90:FD:81:95:88:8D:39:29:41:DB:C9:96:8D:F5:57:1C:58
X509v3 Authority Key Identifier:
keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/rVN7kP2BlYiNOSlB28mWjfVXHFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.60.0/22
IPv6:
2a06:bf00::/29
Signature Algorithm: sha256WithRSAEncryption
2a:8b:7c:62:51:68:29:f1:a7:9d:41:a7:46:4a:ba:5f:21:99:
f3:54:b0:8f:5b:ec:8d:8a:f4:cd:12:c9:34:98:d1:d3:b5:52:
f3:bc:5d:a1:1b:e0:10:0d:6f:7f:fc:45:fb:32:44:c4:99:c1:
2e:32:b7:a9:b9:a6:f7:f8:96:0e:f3:d0:a5:68:1d:07:b7:59:
f4:85:06:d1:8e:b3:61:1d:af:5a:58:a1:23:d7:f2:60:6c:f2:
6c:4f:92:be:ce:d7:d3:fc:33:ec:c0:1f:86:6b:94:0c:d7:4c:
17:bb:a7:20:bd:97:3b:50:6c:1c:5f:d8:c8:ae:35:53:59:6c:
7c:6e:97:2f:06:91:05:b2:fc:96:e3:69:77:9a:33:ff:9b:b7:
d6:1a:9a:f0:6b:73:8d:58:16:de:fb:07:21:cf:2f:22:b5:a7:
68:74:b8:e1:15:40:5f:09:22:e9:28:71:f0:af:9f:5a:d4:84:
8e:b7:e2:e3:7e:ea:79:fa:b1:c0:f5:3f:71:df:2b:b7:92:f9:
1f:9e:6f:f4:49:24:67:f8:05:50:65:bd:91:5c:31:f0:6b:c6:
a7:c4:d2:c3:be:64:a2:85:6d:77:2c:1d:10:d7:a4:28:d1:e8:
97:ec:9a:dc:52:cd:47:7b:49:65:19:c7:80:e8:09:8b:98:8e:
db:8d:03:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:16 2024 by rpki-client on console-ams.rpki-client.org