Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/pMF2OSF2H4QhKAxuIkMMrwIVgDY.roa
File: pMF2OSF2H4QhKAxuIkMMrwIVgDY.roa (raw, json)
Hash identifier: nEHy9rGVPXdBF2X97mb+QNjgGbWbgXG4cXAq4DQNY5o=
Subject key identifier: A4:C1:76:39:21:76:1F:84:21:28:0C:6E:22:43:0C:AF:02:15:80:36
Certificate issuer: /CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Certificate serial: 018573716F4CCFB86113A792BCA7E47CADFD
Authority key identifier: 42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/pMF2OSF2H4QhKAxuIkMMrwIVgDY.roa
Signing time: Mon 02 Jan 2023 17:04:51 +0000
ROA not before: Mon 02 Jan 2023 17:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47864
IP address blocks: 185.217.60.0/24 maxlen: 24
2a10:bb00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:6f:4c:cf:b8:61:13:a7:92:bc:a7:e4:7c:ad:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Validity
Not Before: Jan 2 17:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4c1763921761f8421280c6e22430caf02158036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:15:cd:16:e6:62:dd:e4:94:d3:a4:d4:77:
3f:17:d2:85:3c:08:88:95:d1:3d:e0:4e:70:d7:22:
61:12:25:2d:b9:3e:40:76:b1:5c:e6:80:62:cf:07:
b7:dc:76:a1:c9:c1:23:48:94:ae:e6:16:36:b7:67:
31:7f:66:84:e0:8c:85:d1:f3:98:fb:3b:f5:d8:94:
47:fb:8a:43:df:f3:70:da:f6:0a:53:40:66:c6:5d:
53:c5:c7:99:65:53:bc:77:34:b5:19:27:e9:9c:f2:
f7:e9:7b:b8:be:62:b2:d2:09:19:c8:f0:9d:a9:8f:
60:a9:99:f2:a4:e6:ed:d3:34:be:8a:e0:17:14:76:
27:ea:a0:b3:6a:d1:1a:35:e3:4e:a9:7e:36:97:4b:
f0:ef:ba:c6:b0:17:b9:ee:e9:6b:6b:9d:51:7f:e9:
a2:c9:92:c1:f2:f1:86:54:03:ca:c2:b0:c5:9f:67:
24:0e:43:da:f3:67:85:93:df:89:47:59:25:de:34:
10:0c:f1:a5:4a:47:f7:15:a3:3a:90:a5:5a:9d:1e:
26:e8:16:4d:18:84:29:6c:30:4e:77:89:02:6b:0a:
b0:08:b4:37:13:16:c1:59:b4:15:dd:5e:09:f2:19:
4b:50:84:36:a9:37:aa:8e:42:8c:b7:f8:0d:b4:be:
24:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C1:76:39:21:76:1F:84:21:28:0C:6E:22:43:0C:AF:02:15:80:36
X509v3 Authority Key Identifier:
keyid:42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/pMF2OSF2H4QhKAxuIkMMrwIVgDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.60.0/24
IPv6:
2a10:bb00::/29
Signature Algorithm: sha256WithRSAEncryption
dc:27:93:54:ca:4a:d4:7d:a4:e0:4c:43:7a:89:95:06:b6:8a:
a7:7a:c7:24:fa:88:76:c1:b3:39:72:4a:f4:5c:34:62:07:81:
e2:f5:8a:ea:b5:42:80:46:0c:97:17:af:9f:cb:55:11:6b:40:
d5:dc:ab:92:f0:7c:fc:ca:f2:f0:d6:38:55:91:25:49:63:78:
a8:3e:ea:45:78:df:75:26:ef:c1:c5:a3:59:73:54:a2:0c:87:
25:cb:96:81:c2:75:44:b8:f7:64:7d:20:28:72:c4:73:55:c7:
64:8f:0d:41:4d:84:d0:98:8e:70:c0:3e:bf:74:7f:e4:bc:54:
60:c1:78:eb:54:49:0f:aa:62:75:16:d8:aa:81:f9:7a:12:7d:
bf:89:d2:70:5c:1d:8f:03:11:eb:be:59:71:b8:6f:f5:9e:d6:
0a:dd:93:43:93:0b:42:56:e4:4a:de:3e:9b:47:06:51:50:24:
d0:9a:74:92:bc:1c:83:ff:b6:d5:e2:6a:ed:96:51:bd:b3:37:
a6:36:06:3c:f0:52:5b:17:84:6f:0e:6a:28:a1:b0:e9:e7:a0:
c2:34:07:4b:ce:a8:0e:aa:e4:40:61:a8:7f:3d:a0:53:05:84:
0c:cb:8b:04:8f:a0:4d:8f:70:92:46:11:8a:e3:f7:7e:34:01:
15:f9:2f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:26 2024 by rpki-client on console-ams.rpki-client.org