Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/mWw9X49tiPpbo4E-v1aBf3QHmsI.roa
File: mWw9X49tiPpbo4E-v1aBf3QHmsI.roa (raw, json)
Hash identifier: BrRy+FauQhHoNMoXCPSP1HEgSF15h1zCjrRDiv1Mih8=
Subject key identifier: 99:6C:3D:5F:8F:6D:88:FA:5B:A3:81:3E:BF:56:81:7F:74:07:9A:C2
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 01856FC264695BBD7CFFF5EFCC1158367A6E
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/mWw9X49tiPpbo4E-v1aBf3QHmsI.roa
Signing time: Sun 01 Jan 2023 23:54:48 +0000
ROA not before: Sun 01 Jan 2023 23:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49673
IP address blocks: 185.54.244.0/24 maxlen: 24
94.247.111.0/24 maxlen: 24
94.247.110.0/23 maxlen: 23
94.247.110.0/24 maxlen: 24
2a02:47a0:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Mar 2023 16:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:64:69:5b:bd:7c:ff:f5:ef:cc:11:58:36:7a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Jan 1 23:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=996c3d5f8f6d88fa5ba3813ebf56817f74079ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6a:ec:49:46:82:ee:40:a9:5c:87:e5:ef:cb:
fe:2e:e5:27:8d:95:6a:80:de:09:88:79:0a:fd:5a:
52:db:e8:4c:04:02:9b:a9:37:5f:02:00:c6:a7:bc:
a1:73:fa:6d:67:a4:05:a6:12:6d:3c:67:6e:c8:b7:
e8:fd:55:42:8c:e6:27:36:2c:27:f1:42:5d:e5:a2:
ed:78:a9:68:28:71:e5:72:1f:c1:c5:7b:22:86:8b:
05:b8:45:e2:90:02:f4:e1:b9:a7:52:25:ad:0a:ec:
40:02:86:d3:1b:5d:ed:cd:54:c3:4b:27:b9:ca:28:
38:bd:eb:c5:14:e4:39:3e:a0:9d:b5:54:9b:8b:09:
e7:aa:b1:4b:d8:5d:12:2e:75:87:a5:af:be:68:7d:
b5:61:78:24:d2:64:85:a2:1a:a9:1b:c3:f5:f2:78:
95:df:27:e2:4c:89:40:5c:5d:07:32:bc:d8:51:13:
31:91:4e:e5:9c:7d:5d:bb:5b:75:57:63:85:68:23:
74:c7:13:b0:01:ce:ca:a8:91:62:47:50:d3:51:da:
2d:93:88:f0:1a:39:e6:30:6c:8a:71:01:64:68:a7:
42:80:cc:a8:46:b5:71:f1:5e:2d:ea:af:54:8b:a5:
5d:d5:41:ea:4b:c4:ff:00:ff:b8:73:6e:6a:38:50:
7d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6C:3D:5F:8F:6D:88:FA:5B:A3:81:3E:BF:56:81:7F:74:07:9A:C2
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/mWw9X49tiPpbo4E-v1aBf3QHmsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.110.0/23
185.54.244.0/24
IPv6:
2a02:47a0:a::/48
Signature Algorithm: sha256WithRSAEncryption
ae:8e:c8:5e:65:b2:27:fb:65:b6:4b:24:bd:70:c1:c2:6b:a5:
92:83:6c:1e:82:ff:32:89:46:ea:10:58:88:7f:9d:6f:6f:32:
a6:43:af:45:64:f2:1b:29:ed:4c:47:aa:4a:a1:ed:e9:4b:4c:
9f:62:12:05:b0:ab:51:bf:3f:6a:8d:28:37:d0:40:e0:e5:cd:
6b:34:05:35:7a:21:36:62:97:99:9a:59:af:3d:67:30:0b:12:
2c:8f:85:81:14:28:55:cb:40:1b:39:02:03:83:99:58:92:3c:
b3:90:36:2d:e8:f4:06:4e:c6:f4:c3:8f:80:d6:8b:95:0b:d4:
8f:c4:9a:c8:fb:25:67:74:3a:34:d7:40:e7:9e:7f:86:46:f7:
c9:23:11:9b:f6:7f:84:f6:5e:0d:73:3e:a3:c6:25:3e:86:85:
b4:2d:90:05:14:9d:31:fd:70:69:ee:a1:f8:66:3c:75:49:5f:
0c:12:50:41:e4:31:01:97:bf:3e:92:9c:90:40:0c:c3:42:84:
c7:e8:ec:98:67:f5:71:03:21:e7:10:d8:6f:c0:93:c5:e3:94:
29:62:fb:0f:43:1e:36:45:01:05:b0:3a:00:d7:4f:76:2f:f3:
65:c8:61:a1:80:a2:9a:ec:81:aa:f0:13:35:69:11:ae:84:f3:
6f:da:f6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:50 2024 by rpki-client on console-fra.rpki-client.org