Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/8Fqg1uTBNjbQ9j9fEXNmykIA9vE.roa
File: 8Fqg1uTBNjbQ9j9fEXNmykIA9vE.roa (raw, json)
Hash identifier: 8G7xnfQYkLOl78gDiCCTIxst+G5PYc4YJL8ay4GE5tc=
Subject key identifier: F0:5A:A0:D6:E4:C1:36:36:D0:F6:3F:5F:11:73:66:CA:42:00:F6:F1
Certificate issuer: /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Certificate serial: 018A40CB111E3D81DB37A48201DECA44E14F
Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/8Fqg1uTBNjbQ9j9fEXNmykIA9vE.roa
Signing time: Tue 29 Aug 2023 10:16:04 +0000
ROA not before: Tue 29 Aug 2023 10:16:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202214
IP address blocks: 185.50.64.0/23 maxlen: 24
185.50.66.0/23 maxlen: 24
185.50.65.0/24 maxlen: 24
185.50.67.0/24 maxlen: 24
2a01:a6a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:cb:11:1e:3d:81:db:37:a4:82:01:de:ca:44:e1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Validity
Not Before: Aug 29 10:16:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f05aa0d6e4c13636d0f63f5f117366ca4200f6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:f5:dc:4b:49:83:55:e0:3a:94:7f:0c:ee:
34:41:e9:6f:df:45:12:b4:8c:ae:1f:63:1d:51:22:
d2:ad:a0:c3:11:25:1a:3e:59:40:14:d8:dd:28:45:
6f:4b:68:d3:49:88:db:a4:57:f0:43:1f:57:2f:4c:
92:3c:18:12:01:85:b6:e7:df:86:ef:5a:a5:8a:71:
91:dd:a8:dd:23:79:c3:09:80:67:28:7e:1f:c2:94:
1d:c3:3b:11:b2:56:f2:69:e0:23:f4:85:e7:2f:07:
48:9c:68:b2:ac:e0:44:65:58:61:9b:3e:91:b9:a4:
5a:31:2b:ca:35:05:52:1a:74:c6:45:3f:2e:c1:83:
e2:f9:47:e1:f3:81:d1:b3:a7:ea:c7:9d:7b:56:99:
5a:28:bd:73:25:4f:e6:c3:21:3b:f1:c0:ef:78:15:
55:5a:e0:7f:0e:df:0e:29:99:de:3d:f5:ac:b4:85:
2b:ac:a2:66:97:ba:96:5a:cd:b3:54:5b:b6:4b:5a:
e2:52:69:b9:5b:9b:c8:b2:20:f9:bf:e8:5b:e3:11:
0b:9e:4a:47:53:0e:73:a3:a6:44:67:3f:23:d8:ba:
c4:b3:94:6f:ab:41:d6:08:80:f3:2e:a3:4b:2c:51:
c7:cd:61:15:51:95:d8:1d:a5:d9:fc:7a:52:be:71:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5A:A0:D6:E4:C1:36:36:D0:F6:3F:5F:11:73:66:CA:42:00:F6:F1
X509v3 Authority Key Identifier:
keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/8Fqg1uTBNjbQ9j9fEXNmykIA9vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.64.0/22
IPv6:
2a01:a6a0::/32
Signature Algorithm: sha256WithRSAEncryption
0d:a0:d7:7a:80:3f:b2:7d:08:3e:50:93:ad:39:d9:ac:44:e2:
a0:dd:83:85:3b:e7:1f:55:a7:b0:56:42:c8:85:b5:e4:31:14:
1b:38:4b:bd:ba:bd:89:23:48:98:32:5e:5e:1d:cb:dd:b1:ff:
f4:9e:9d:fe:b8:6a:a8:87:da:a1:c5:22:9b:d4:18:df:30:48:
93:1b:61:f5:fd:57:e6:bf:a1:5a:15:6c:1f:a1:aa:7c:f0:00:
35:2d:33:62:2c:ca:a3:f5:25:59:68:1c:61:22:df:05:b8:e5:
37:da:f0:ba:2b:59:33:79:e1:15:03:6c:22:f0:7d:f2:e5:c9:
8b:7f:f5:20:ff:67:17:56:ed:1a:97:44:af:c7:a7:bd:d6:06:
8f:54:6a:36:e7:48:df:74:3d:22:68:df:99:6d:00:0d:48:e5:
54:22:bf:24:0c:b8:f3:4c:37:c1:e3:4e:8f:28:fe:9c:b4:5e:
82:da:fb:ae:63:f0:73:fc:12:c2:98:fe:77:3d:f6:e6:a1:77:
3d:c8:0d:d6:8a:38:d3:c2:d5:bb:08:20:26:4a:74:f8:69:11:
b5:cd:68:ce:06:37:c3:eb:a5:90:b0:5c:2c:8f:cb:06:eb:da:
ce:0b:d9:74:a3:ca:78:ac:43:cc:02:2c:1a:14:96:ee:8d:0d:
fc:72:8c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:24 2024 by rpki-client on console-ams.rpki-client.org