Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/FJfap2QntZJUbqg2SXgSj5IolJI.roa
File: FJfap2QntZJUbqg2SXgSj5IolJI.roa (raw, json)
Hash identifier: g8+xcIsqd/r4UcSFLxELiCeoOL5fKhz/GTCVAB6y49w=
Subject key identifier: 14:97:DA:A7:64:27:B5:92:54:6E:A8:36:49:78:12:8F:92:28:94:92
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 01857270F8E3DB1236163D0998EE30856C04
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/FJfap2QntZJUbqg2SXgSj5IolJI.roa
Signing time: Mon 02 Jan 2023 12:24:44 +0000
ROA not before: Mon 02 Jan 2023 12:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47674
IP address blocks: 185.11.146.0/24 maxlen: 32
185.11.147.0/24 maxlen: 32
188.209.49.0/24 maxlen: 24
188.209.52.0/24 maxlen: 32
185.62.188.0/24 maxlen: 32
185.62.189.0/24 maxlen: 32
185.62.190.0/24 maxlen: 32
185.11.145.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:70:f8:e3:db:12:36:16:3d:09:98:ee:30:85:6c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Jan 2 12:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1497daa76427b592546ea8364978128f92289492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:0a:18:32:5a:5a:ed:b5:58:3a:3a:91:11:
64:b9:b3:dc:35:9b:cb:7b:d1:a5:12:b9:86:2d:d0:
6f:f3:c5:d5:7e:0a:cc:f4:b5:12:7c:db:d9:e3:6e:
23:81:d3:4e:e8:77:c1:e8:33:d0:ba:54:8d:8a:4b:
1a:f4:d3:19:7f:c3:51:2d:82:af:e1:06:1c:c4:16:
57:1e:fb:d5:c4:67:8d:72:e0:bf:2b:74:60:09:6b:
5c:ab:d5:8e:ee:32:48:62:73:68:e5:32:94:cc:02:
c0:29:5b:8c:ac:69:42:f3:28:f2:d3:ba:d2:5c:9f:
4e:35:89:0e:c3:20:64:6d:a8:db:94:de:8a:01:6d:
f1:87:56:3d:f8:60:52:ef:d8:0b:95:b4:45:11:0d:
4e:4e:47:bc:1e:8a:cf:0b:c8:a0:d1:fa:8d:62:d0:
31:dc:67:d5:a0:3d:ab:f7:80:0e:86:a9:df:77:0b:
5d:cf:3a:97:e5:bf:38:f7:30:fe:0e:ad:b6:60:25:
e5:dc:c1:34:ac:31:6c:ec:c8:96:18:ae:0b:40:df:
cb:b9:c5:17:86:d1:ad:e1:b9:76:33:16:65:3a:98:
4b:af:6f:c3:2e:f7:23:39:25:31:e2:5b:d8:68:65:
a4:5a:b9:c3:1b:6e:91:1c:bf:d8:ac:d4:65:8e:01:
0e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:97:DA:A7:64:27:B5:92:54:6E:A8:36:49:78:12:8F:92:28:94:92
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/FJfap2QntZJUbqg2SXgSj5IolJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.145.0-185.11.147.255
185.62.188.0-185.62.190.255
188.209.49.0/24
188.209.52.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:5f:a6:94:3d:a3:ce:8b:65:fb:c2:c3:17:72:77:46:de:29:
7b:c6:0d:1e:bd:cb:86:f4:24:4f:76:f0:65:49:e8:d9:7e:34:
ec:e1:4f:c8:b3:7d:c1:79:dd:38:89:cd:09:46:26:92:ad:a2:
ec:fa:2c:d9:bd:a8:f4:e2:80:31:e7:df:cb:b6:d5:cc:5e:5d:
58:3a:de:f1:0e:c4:8b:b7:59:db:9a:66:11:99:2f:48:1a:d8:
eb:c5:d5:ab:25:92:5b:9f:94:23:2a:c0:c7:2d:5e:34:56:89:
f9:46:5d:16:33:ee:ff:31:04:c0:d9:78:2b:89:0e:ef:bd:fb:
29:60:a7:e6:9b:de:0a:94:3c:a3:e1:65:95:cb:aa:45:7d:bd:
93:8c:57:10:a0:0d:95:d6:81:9c:76:1f:f6:47:88:b0:7a:68:
41:22:e2:d1:d1:45:90:b4:ec:97:8a:13:15:e5:3f:b3:70:ab:
a3:e0:dc:96:6f:0d:32:63:a6:9a:e0:f0:3e:1d:ea:26:cd:5a:
5a:41:21:9c:70:5f:eb:c8:f9:ab:94:a9:b3:c2:f8:15:33:ec:
32:77:c6:25:60:9b:d4:b7:24:76:00:d5:3b:e5:c9:3c:48:e6:
b4:6a:19:c8:44:fd:94:65:32:89:97:5c:43:a1:2c:82:8d:b2:
d2:9a:78:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:11 2024 by rpki-client on console-ams.rpki-client.org