Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/48AfOyYajFmch6KSB2xAHXID15A.roa
File: 48AfOyYajFmch6KSB2xAHXID15A.roa (raw, json)
Hash identifier: q6O2kuijEV/Q3TRp+DIKA1vWcjjxjUfillHl3zYISqg=
Subject key identifier: E3:C0:1F:3B:26:1A:8C:59:9C:87:A2:92:07:6C:40:1D:72:03:D7:90
Certificate issuer: /CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Certificate serial: 018CCA99D67C1AB0D65796E23ACA31A0CA0B
Authority key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/48AfOyYajFmch6KSB2xAHXID15A.roa
Signing time: Tue 02 Jan 2024 14:35:28 +0000
ROA not before: Tue 02 Jan 2024 14:35:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204180
IP address blocks: 185.111.250.0/24 maxlen: 24
185.111.251.0/24 maxlen: 24
185.111.248.0/22 maxlen: 22
185.111.248.0/24 maxlen: 24
185.111.249.0/24 maxlen: 24
2a06:6080::/40 maxlen: 40
2a06:6080::/48 maxlen: 48
2a06:6080:1::/48 maxlen: 48
2a06:6080:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Jun 2024 02:09:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:d6:7c:1a:b0:d6:57:96:e2:3a:ca:31:a0:ca:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Validity
Not Before: Jan 2 14:35:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3c01f3b261a8c599c87a292076c401d7203d790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:8a:c4:a9:ef:58:59:ed:4c:fd:ea:77:2e:
85:91:93:55:19:3f:4e:e1:14:9a:00:ff:99:d0:ba:
81:7b:ad:d2:1e:14:7f:39:2f:ef:db:81:c5:39:2b:
31:4a:fd:67:2f:b8:12:92:78:83:4c:c5:24:4a:ef:
27:3f:c7:d7:01:2f:05:40:2b:24:25:57:64:08:26:
d7:6b:3a:22:11:a3:3f:50:49:f7:3c:38:a4:85:bf:
52:25:83:00:73:d3:60:e2:68:6c:09:88:b9:e8:0f:
07:67:2f:c5:cd:2f:0e:89:dd:8e:c9:cc:fe:02:9c:
e5:5f:03:64:37:9a:a5:97:3f:5e:c7:5e:d7:8d:52:
a0:91:67:19:c1:ba:ac:a7:ee:4c:86:7a:11:b4:09:
d1:50:e6:bb:24:39:ef:3f:ec:82:f9:f0:51:ef:1b:
57:bf:61:e9:55:dc:d4:fa:a7:40:b4:11:55:55:ff:
b5:26:f4:1d:a5:5a:b1:b5:72:38:e4:e2:04:e1:d8:
cc:0a:46:26:f6:99:9f:ba:d9:c5:8a:c6:d2:b4:88:
01:a8:47:50:41:c0:9f:00:ba:b5:c7:87:60:aa:25:
e3:32:43:1e:a5:0e:e0:38:09:52:3c:a3:4e:f0:64:
8f:73:b5:bb:6a:46:30:4f:59:3b:74:04:f1:34:fb:
63:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C0:1F:3B:26:1A:8C:59:9C:87:A2:92:07:6C:40:1D:72:03:D7:90
X509v3 Authority Key Identifier:
keyid:95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/48AfOyYajFmch6KSB2xAHXID15A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.248.0/22
IPv6:
2a06:6080::/40
Signature Algorithm: sha256WithRSAEncryption
35:3d:5c:90:d4:84:9e:87:59:55:c9:b7:99:d3:c2:46:a7:b0:
fa:bf:c9:98:03:1c:82:20:2e:38:04:88:f2:7f:7b:ee:ac:ba:
d7:b6:bb:d8:17:0a:9f:06:b9:3c:bc:7d:44:9d:b4:ec:a9:63:
2a:28:0c:9f:9f:ee:01:55:63:4d:a9:9c:33:8d:c9:53:23:4a:
96:7d:f9:50:b8:82:ba:50:27:14:e5:44:0d:0e:e0:86:d3:aa:
be:35:5c:b7:d5:21:4e:34:8e:56:1c:fd:f5:74:39:8f:e9:30:
39:c7:0e:71:82:f1:3b:7a:4a:96:31:cc:22:b3:1b:f1:01:f3:
09:3b:45:c8:4a:4c:5f:63:d4:76:d8:49:5f:f5:b5:76:d8:81:
0e:9d:4e:2b:f9:1f:9a:47:97:e3:bc:ff:38:f5:ea:e9:0f:60:
fc:7e:5a:07:43:5a:c7:fd:d4:e7:2e:c8:1e:b5:7a:7b:d1:4c:
5c:14:0b:d6:84:45:be:cf:ea:64:c2:ce:e0:fe:1d:7b:5b:23:
1c:2b:ea:b7:ec:18:22:fd:ec:59:b1:38:9a:25:9b:ea:9b:3f:
2b:38:a5:cb:a7:16:19:b7:e2:3f:cb:72:ec:b4:ee:8d:c3:10:
a0:22:76:87:9f:fb:fb:ce:e7:e8:1d:08:13:53:12:c2:5f:e1:
f7:f6:83:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 05:42:35 2024 by rpki-client on console-ams.rpki-client.org