Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/48-VuLZGbgcm58OJm28-PTmQLps.roa
File: 48-VuLZGbgcm58OJm28-PTmQLps.roa (raw, json)
Hash identifier: CPHv9oXjkw1hwwGSM7eLww+iOVpUAVmpO2zVHBePhPk=
Subject key identifier: E3:CF:95:B8:B6:46:6E:07:26:E7:C3:89:9B:6F:3E:3D:39:90:2E:9B
Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial: 018756E41B4CEAC104C514EFC0A61D5E9758
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/48-VuLZGbgcm58OJm28-PTmQLps.roa
Signing time: Thu 06 Apr 2023 14:06:42 +0000
ROA not before: Thu 06 Apr 2023 14:06:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212136
IP address blocks: 185.228.248.0/24 maxlen: 24
185.247.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:e4:1b:4c:ea:c1:04:c5:14:ef:c0:a6:1d:5e:97:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Validity
Not Before: Apr 6 14:06:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3cf95b8b6466e0726e7c3899b6f3e3d39902e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:be:44:0f:09:04:db:b8:5f:df:44:fc:15:9d:
3f:cb:75:cd:27:35:24:9c:9c:cc:bd:9e:02:1a:60:
03:78:20:47:5d:62:98:b9:f9:ba:8e:14:cb:ed:c7:
98:f6:4b:d4:f6:cc:b5:70:5c:e8:9b:8d:eb:2a:e3:
b7:2d:33:25:43:8f:b5:f5:74:07:24:7b:83:6f:18:
2d:a4:04:eb:58:82:7a:b0:0d:29:bb:c0:f2:ae:4b:
31:b9:bf:bb:ac:1a:3b:f3:1f:f8:bb:60:3a:fa:7b:
a4:c1:cd:24:62:63:a9:1b:94:0f:a0:24:86:a0:2f:
66:d2:ad:99:34:60:9d:08:f6:7c:c1:ee:b0:0c:b9:
8f:fc:5c:e0:ea:23:a2:73:14:f0:6e:25:e4:87:cf:
e4:45:ed:12:d7:9d:1a:ef:38:00:4d:fe:17:53:d6:
d1:70:dd:e5:2b:59:49:9b:03:6a:94:d7:32:e0:1d:
9b:e5:3e:15:8f:e2:a2:de:ad:ec:61:4e:47:76:da:
4a:11:3b:41:2b:cf:96:ff:4f:23:a9:6e:73:eb:37:
c0:14:9e:a8:5e:d0:06:6b:c7:67:c7:ca:35:e9:99:
35:9b:3e:01:8b:27:3b:1e:72:44:89:1b:4d:54:89:
5c:99:af:68:4f:10:79:1a:2a:46:eb:e0:8c:50:f1:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CF:95:B8:B6:46:6E:07:26:E7:C3:89:9B:6F:3E:3D:39:90:2E:9B
X509v3 Authority Key Identifier:
keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/48-VuLZGbgcm58OJm28-PTmQLps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.248.0/24
185.247.187.0/24
Signature Algorithm: sha256WithRSAEncryption
60:41:9f:14:8a:e9:ad:dd:b3:17:df:da:b0:73:17:a8:72:fa:
7b:c0:ca:08:0e:82:39:a2:b9:07:b0:ec:d6:7f:c5:28:e7:66:
85:f4:fa:78:3d:6f:e1:51:07:96:f5:d8:9a:e1:54:82:19:44:
f6:80:ce:7c:de:6b:54:14:de:c1:91:03:10:d3:42:12:a7:3e:
be:7a:e6:64:fc:c9:5c:fa:ee:8c:48:15:c7:62:47:3d:e1:80:
00:a4:ad:f4:76:8c:ea:1a:52:3c:e3:e4:50:41:58:02:4d:29:
16:6c:82:8c:7e:65:73:1f:17:a7:4a:22:2c:07:48:87:90:72:
79:8a:f9:b8:a1:1b:9f:b3:bb:83:91:d4:5f:d0:6b:ff:2a:47:
5e:46:b0:37:6c:ab:39:7a:fe:43:73:34:85:5d:3b:d9:79:41:
89:8c:c1:1e:df:7e:06:08:ae:82:5e:b9:13:db:d3:f4:49:9f:
8a:ee:ee:13:d0:38:55:0c:52:e7:62:18:00:41:5c:a2:43:6c:
e7:a8:1c:27:8c:86:41:07:dc:8a:a9:f3:de:a4:2d:00:a2:ef:
74:7b:42:4a:9f:0d:0f:c6:3c:4b:71:50:73:84:d4:68:08:8a:
85:6c:fb:06:98:7e:fc:05:05:ee:e1:5c:07:e8:05:06:e6:2f:
c4:98:32:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:14 2024 by rpki-client on console-ams.rpki-client.org