Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/dV-IpuLI7DpQBRZbUNP949sk0WE.roa
File: dV-IpuLI7DpQBRZbUNP949sk0WE.roa (raw, json)
Hash identifier: PsiLSjhHusaetrQ6CoAO+jeurkMs6CWapQIeWn72yn0=
Subject key identifier: 75:5F:88:A6:E2:C8:EC:3A:50:05:16:5B:50:D3:FD:E3:DB:24:D1:61
Certificate issuer: /CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Certificate serial: 018B3E2EF4AA9B38E44F1EEE97FA980171A1
Authority key identifier: 86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/dV-IpuLI7DpQBRZbUNP949sk0WE.roa
Signing time: Tue 17 Oct 2023 15:09:06 +0000
ROA not before: Tue 17 Oct 2023 15:09:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211007
IP address blocks: 212.6.40.0/24 maxlen: 24
185.207.244.0/22 maxlen: 24
2a10:1f40::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:2e:f4:aa:9b:38:e4:4f:1e:ee:97:fa:98:01:71:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Validity
Not Before: Oct 17 15:09:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=755f88a6e2c8ec3a5005165b50d3fde3db24d161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:21:51:bd:56:d7:d7:f7:b6:99:da:89:99:
db:f4:e4:ed:d7:39:37:f5:f8:30:74:0a:27:65:6a:
1a:aa:64:ab:63:71:34:75:70:77:38:cb:49:32:0f:
9e:ed:4a:28:c5:c7:22:95:8b:ab:5d:7b:e6:39:1f:
ed:d8:11:b7:28:99:32:88:e2:b9:6d:cb:e1:3c:27:
ec:55:10:51:1f:8e:5f:38:ca:b8:90:05:49:3b:14:
78:6e:b0:18:63:05:1a:26:93:34:3c:3c:f4:00:73:
5e:44:79:76:89:23:ce:05:4f:97:cf:1c:cb:7f:bf:
e8:f7:f1:10:9c:e9:98:0d:55:48:e2:90:02:dd:54:
81:3b:e4:ac:64:d3:9d:3b:7e:1e:43:69:fa:03:c8:
17:c7:49:5a:0a:6c:af:12:b8:ea:2a:1d:4b:01:c6:
f5:ea:d1:30:aa:89:75:af:16:96:35:8a:d3:fc:a4:
57:f5:b6:b1:01:c0:a4:ed:58:1d:b2:47:65:6b:ad:
92:b8:70:7f:25:c2:ca:95:3c:a7:35:95:1a:f4:4c:
da:1c:dc:2b:76:9e:a4:75:5f:85:b9:1f:8b:2f:0f:
64:f5:5f:25:45:5f:0e:8b:c3:d0:a2:3b:82:eb:9f:
5a:6d:f6:41:ed:49:03:7e:f3:92:3e:01:74:f0:35:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5F:88:A6:E2:C8:EC:3A:50:05:16:5B:50:D3:FD:E3:DB:24:D1:61
X509v3 Authority Key Identifier:
keyid:86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/dV-IpuLI7DpQBRZbUNP949sk0WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.244.0/22
212.6.40.0/24
IPv6:
2a10:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
96:ca:11:27:58:3d:8d:f1:de:cc:89:f4:c8:f8:a6:78:93:22:
e1:26:1c:e6:a6:ae:81:1f:56:af:81:91:19:04:98:86:09:d7:
94:3e:13:30:19:45:7e:36:ba:fd:ce:fd:b6:33:e5:01:37:90:
e2:4a:ac:9e:70:74:71:3e:95:bb:f9:fd:02:ac:f5:c6:6d:9f:
96:50:a0:9e:aa:54:c2:6e:70:fa:20:ad:05:0a:ab:a1:b3:de:
2f:82:3d:dd:dc:8b:4b:82:a2:64:df:1b:dd:a8:b3:00:ef:c3:
fa:af:33:74:1e:22:3d:65:e2:d4:0f:87:3a:cd:cd:50:3d:8a:
2b:8d:2e:0f:19:1b:5c:5d:74:3c:c9:77:1e:48:b9:27:a9:be:
df:68:31:5b:71:45:61:13:53:b3:87:87:b4:50:78:41:76:5d:
09:24:93:f1:c7:b3:38:95:6e:a2:7e:4b:1b:23:87:28:d1:f9:
ff:99:db:db:b3:a6:d1:64:50:71:bf:6c:31:5b:c6:6f:8a:44:
35:1f:3d:be:a7:ef:79:a1:b7:ac:eb:38:bb:04:8c:c5:29:20:
1b:c1:94:0f:58:5c:a7:45:f2:e8:8e:c9:58:76:c0:ce:79:d7:
38:63:df:17:33:29:47:79:14:0b:a4:26:56:c9:55:80:41:22:
87:6e:ad:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:47 2024 by rpki-client on console-ams.rpki-client.org