Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/goMxn9eMVguoRyoEpUB6WMIeuBg.roa
File: goMxn9eMVguoRyoEpUB6WMIeuBg.roa (raw, json)
Hash identifier: MBulMEG0gxa14BOuj98fxkEnmGDyodh1vf/ODMZtbSs=
Subject key identifier: 82:83:31:9F:D7:8C:56:0B:A8:47:2A:04:A5:40:7A:58:C2:1E:B8:18
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 01856E2FA22E5317FB9236A96556CE8C28D2
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/goMxn9eMVguoRyoEpUB6WMIeuBg.roa
Signing time: Sun 01 Jan 2023 16:34:53 +0000
ROA not before: Sun 01 Jan 2023 16:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48314
IP address blocks: 185.62.150.0/23 maxlen: 23
185.248.148.0/22 maxlen: 22
2a03:567::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:a2:2e:53:17:fb:92:36:a9:65:56:ce:8c:28:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Jan 1 16:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8283319fd78c560ba8472a04a5407a58c21eb818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:ca:e8:df:dc:e6:f8:46:1e:55:d9:89:14:
d2:9f:39:03:2a:c7:7f:27:62:9d:df:85:49:c4:ed:
ba:5c:06:41:2d:f6:a9:6f:6c:25:23:06:e7:bb:d7:
32:68:90:8a:20:33:82:97:ae:d9:0f:ab:f4:19:22:
2d:b2:5f:dd:42:8e:e3:01:b0:b3:eb:1b:6c:d2:3b:
3a:4f:f4:26:09:50:48:04:2a:53:99:b7:95:27:52:
ef:0a:2c:31:bb:d3:7e:1a:69:a7:af:2e:58:e7:55:
44:2e:9f:6e:51:05:93:43:c5:68:46:cd:da:93:42:
cd:04:86:c7:54:5f:60:fa:55:ce:5d:51:4a:32:84:
9c:70:23:27:ec:3c:85:92:12:57:9e:71:13:d6:41:
aa:4a:a1:91:cf:33:12:07:00:4c:2a:27:a2:7f:20:
f6:c9:d6:d6:95:f9:83:4d:8b:97:ea:cc:2b:11:8b:
d3:7d:93:66:5a:5b:eb:da:79:84:06:6e:1b:96:6d:
c2:c8:05:1a:dd:a4:67:69:91:d5:10:9a:af:d3:28:
be:28:9c:43:c8:73:e5:32:50:97:d0:25:4a:24:9e:
34:e6:ec:83:58:f4:54:db:10:f3:b6:ff:93:23:0c:
f2:4e:04:5f:c0:98:2d:dd:a7:69:f3:6c:30:31:31:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:83:31:9F:D7:8C:56:0B:A8:47:2A:04:A5:40:7A:58:C2:1E:B8:18
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/goMxn9eMVguoRyoEpUB6WMIeuBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.150.0/23
185.248.148.0/22
IPv6:
2a03:567::/32
Signature Algorithm: sha256WithRSAEncryption
88:bb:3d:be:1e:32:e3:1e:85:1e:cd:c0:66:d9:cf:29:13:8c:
4f:8d:10:d2:2a:f5:97:94:42:b9:1b:db:96:1b:4c:2a:36:f3:
57:7a:29:49:bb:1b:11:ad:b2:89:14:f8:7a:f1:ab:ae:6e:96:
a4:d2:b0:f1:a1:77:b1:13:4d:ce:89:a2:f0:66:50:4d:bd:06:
34:3b:a2:6d:16:8f:67:12:33:49:ce:71:0c:cb:ca:96:34:68:
d6:7d:ca:3c:79:8a:92:29:3d:30:90:ce:7f:53:06:54:6e:e5:
36:85:7b:67:a7:0e:c8:f6:c0:0a:f5:c5:c7:26:7b:b9:ac:d1:
98:1a:b0:81:88:fd:6a:44:84:3f:1a:2a:a9:93:f5:86:a7:c1:
0c:1c:57:f0:da:f3:50:ad:78:61:df:46:ff:3f:20:60:ed:ba:
61:28:a9:48:4c:3f:fa:f1:2b:af:b1:33:7d:cb:e5:2c:10:de:
ee:df:8b:53:dc:9f:99:47:25:04:3a:0b:f5:12:2f:f0:4d:16:
2b:17:b3:f5:c9:ea:c6:ae:9a:1d:0f:c9:10:62:f8:f0:64:02:
66:be:fc:cb:b5:1f:2e:46:21:f6:7f:9d:86:37:93:1a:ec:4b:
c5:c6:4f:15:16:4b:c2:cf:28:41:d4:7b:e7:c7:d2:4f:ed:81:
b9:c1:eb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:22 2024 by rpki-client on console-ams.rpki-client.org