Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/u-YzqO11vuuU5lrRsyMT_Y8n2QY.roa
File: u-YzqO11vuuU5lrRsyMT_Y8n2QY.roa (raw, json)
Hash identifier: UTEvJtOBlHjz4Mw2ASqnU1UBIHyRFadsyNbXEvNTN3U=
Subject key identifier: BB:E6:33:A8:ED:75:BE:EB:94:E6:5A:D1:B3:23:13:FD:8F:27:D9:06
Certificate issuer: /CN=afea396f4de355da8dc079a1e885e0c3375ece32
Certificate serial: 01856F5DF719B2934F6EEF6647074C3828C0
Authority key identifier: AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/u-YzqO11vuuU5lrRsyMT_Y8n2QY.roa
Signing time: Sun 01 Jan 2023 22:05:07 +0000
ROA not before: Sun 01 Jan 2023 22:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199728
IP address blocks: 185.48.112.0/24 maxlen: 24
185.48.114.0/23 maxlen: 23
185.48.113.0/24 maxlen: 24
2a04:adc0::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:f7:19:b2:93:4f:6e:ef:66:47:07:4c:38:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afea396f4de355da8dc079a1e885e0c3375ece32
Validity
Not Before: Jan 1 22:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbe633a8ed75beeb94e65ad1b32313fd8f27d906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:24:f0:e1:e8:0b:48:2a:30:b4:54:da:dc:
ea:5d:a6:f7:80:8c:ea:54:1e:50:f7:44:c2:df:7a:
14:8c:85:30:d4:94:69:84:a0:0b:e3:e4:ac:1a:b9:
30:9f:72:3c:76:fa:85:b8:63:96:62:f1:b7:74:08:
76:b7:5d:c3:75:93:e8:8f:81:0b:1d:a3:46:06:43:
3b:c7:4c:38:b2:51:85:c4:3a:82:b5:85:12:36:ab:
6e:27:29:a2:1d:7e:e6:4c:d7:0f:bb:80:40:3f:b4:
04:7d:1c:5f:e8:2c:e5:7a:f9:c5:ee:b5:a0:5c:8b:
8f:ad:7a:55:bc:69:75:a5:ce:9a:5b:18:48:33:bb:
8e:aa:bf:78:a1:93:4f:21:e7:a7:56:56:a5:6d:3a:
74:b6:fe:b6:e8:dc:0b:66:a3:d0:7a:ee:c9:a9:be:
46:94:60:7b:06:6f:dc:9c:d1:d4:28:cc:ca:ae:46:
2c:7c:c9:49:30:8c:45:81:46:b9:d4:6a:78:73:4c:
62:99:f0:0f:79:94:b7:3b:ca:3a:c3:ee:95:69:af:
a8:61:f0:cc:cf:4d:8f:05:2c:86:1f:0a:1d:e5:5c:
38:46:8e:83:b8:37:08:89:e0:38:b4:46:62:40:ca:
e3:ab:a5:1b:5a:39:49:0e:67:9c:2a:6b:a0:88:8c:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E6:33:A8:ED:75:BE:EB:94:E6:5A:D1:B3:23:13:FD:8F:27:D9:06
X509v3 Authority Key Identifier:
keyid:AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/u-YzqO11vuuU5lrRsyMT_Y8n2QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.112.0/22
IPv6:
2a04:adc0::/29
Signature Algorithm: sha256WithRSAEncryption
2e:98:8a:88:4a:bf:73:22:00:72:4d:83:be:29:ca:b3:13:9e:
9e:a8:c7:6b:db:a8:4b:9a:12:8f:80:22:5d:fd:e2:1c:09:1e:
66:90:b2:a9:3a:f0:57:b6:d1:e5:68:26:87:68:27:e6:39:03:
f4:8f:de:17:8b:81:3a:75:cf:c3:6d:06:94:25:95:e3:d0:6a:
cc:38:6c:af:5d:66:bc:dc:6c:c8:ec:69:93:f4:ef:e2:fb:2c:
b3:42:3c:6b:a6:8a:5e:8c:be:e3:73:35:b6:6b:28:12:b4:65:
d6:ab:ba:72:08:38:60:17:dd:7d:b8:ca:55:0e:76:1f:99:1a:
07:06:40:5b:41:6b:4e:91:ab:18:99:dc:5e:31:c3:88:7c:4b:
fc:9a:19:fe:48:97:73:ac:c7:7e:f3:4f:2e:98:42:14:b9:24:
c8:b4:35:71:73:62:32:86:c9:fe:34:b9:d2:9d:84:91:38:63:
bc:6a:5e:b5:e2:01:80:ee:97:4f:91:fd:19:25:34:ed:5a:4d:
35:ca:dc:d2:de:a6:bb:d1:2b:03:bf:40:bc:04:be:ba:3f:a8:
79:dd:cd:34:3f:6a:56:b7:5d:25:bb:2c:d8:ed:17:04:0d:f6:
13:61:b8:37:bb:fa:84:86:95:4d:3f:c5:47:05:14:3b:a6:57:
df:ee:ce:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:57 2024 by rpki-client on console-ams.rpki-client.org