Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/7kowxtOZlxb6XvD3buysyzf0kF4.roa
File: 7kowxtOZlxb6XvD3buysyzf0kF4.roa (raw, json)
Hash identifier: mFxNixvuUNv33qbfedLvpYdSDKz/wAC1kmo1gnrUeBY=
Subject key identifier: EE:4A:30:C6:D3:99:97:16:FA:5E:F0:F7:6E:EC:AC:CB:37:F4:90:5E
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 01856E8B468AAD79E378164B58EE6025C1D8
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/7kowxtOZlxb6XvD3buysyzf0kF4.roa
Signing time: Sun 01 Jan 2023 18:14:59 +0000
ROA not before: Sun 01 Jan 2023 18:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50272
IP address blocks: 185.41.64.0/22 maxlen: 24
62.24.32.0/19 maxlen: 19
185.155.140.0/22 maxlen: 24
185.155.143.0/24 maxlen: 24
185.155.142.0/24 maxlen: 24
2a03:1400::/32 maxlen: 32
2a07:33c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 09 Jan 2023 22:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:46:8a:ad:79:e3:78:16:4b:58:ee:60:25:c1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Jan 1 18:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee4a30c6d3999716fa5ef0f76eecaccb37f4905e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:5e:31:fd:63:da:2b:79:44:b6:8e:8f:47:
44:5a:74:16:da:b3:41:6b:c4:e5:59:83:af:cf:3b:
09:7e:be:ad:71:b4:ee:b9:fa:44:6c:b3:e7:fe:c0:
7d:61:3b:9e:b0:4f:a9:76:7f:8c:eb:a5:c4:0c:8e:
46:fa:c2:e9:35:32:47:13:a6:74:9b:f9:6d:04:88:
67:0b:30:5b:fc:53:34:13:54:2e:1c:04:90:81:5f:
c0:e0:7e:8b:92:8d:cd:da:b0:51:ba:d1:cb:43:81:
81:48:61:e9:5c:7a:ef:af:b7:12:77:e8:55:5e:62:
ff:82:eb:1a:7b:77:3d:31:4f:ac:ff:4e:27:80:46:
cb:23:76:cf:41:a0:f5:9d:81:d9:ba:fc:a4:e7:31:
b5:3b:3a:5f:24:ee:90:6a:1b:7a:56:3c:58:5e:82:
bd:22:72:8d:7c:c9:7d:fb:2b:3d:09:76:77:7d:50:
b1:c9:9e:25:d3:41:f7:39:c3:e5:83:e8:e0:cd:91:
e8:6e:40:b9:75:da:11:7b:b3:06:47:68:f8:c0:7d:
48:d8:a3:7d:dc:15:a7:d3:8e:5e:34:ac:6b:1d:1c:
bf:1b:af:e7:3b:66:0c:91:b4:41:17:35:59:8e:b9:
7d:f8:c4:d3:c4:93:71:4f:ec:0e:9e:7f:d1:50:3f:
29:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4A:30:C6:D3:99:97:16:FA:5E:F0:F7:6E:EC:AC:CB:37:F4:90:5E
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/7kowxtOZlxb6XvD3buysyzf0kF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.24.32.0/19
185.41.64.0/22
185.155.140.0/22
IPv6:
2a03:1400::/32
2a07:33c0::/29
Signature Algorithm: sha256WithRSAEncryption
7d:a7:35:92:d2:5a:1f:4a:fb:54:18:ac:ee:d0:16:d3:34:25:
1e:5b:eb:19:ee:37:96:93:52:b8:b2:d4:28:ac:e1:fa:fa:62:
83:d2:d7:33:8f:63:91:7e:b2:b7:8a:ad:68:d4:ba:62:ac:f9:
7e:65:21:bb:ca:0f:2d:49:c5:9d:82:04:52:58:31:03:9f:0d:
20:98:cc:25:dc:85:9c:1d:9b:d6:07:11:1d:a1:e4:3b:97:c0:
b1:f8:88:3f:2d:c0:69:aa:a9:06:0e:c1:85:37:71:59:45:24:
15:85:38:c8:33:3b:6d:fd:e7:7d:2a:40:88:e0:37:ad:d4:7c:
9d:77:d2:35:13:30:b1:3d:f8:de:c3:26:b5:79:db:31:86:fa:
db:09:8a:2c:85:64:2e:d7:cb:f8:ad:6b:2d:93:d4:0a:c5:45:
d2:e9:30:ae:03:22:1e:bd:cc:b0:ea:40:d5:90:1e:8d:75:cb:
c7:40:71:ed:e4:8b:d5:b1:05:80:50:40:95:fb:84:0c:ed:db:
b9:da:ef:14:26:61:3d:3d:58:f6:d7:25:0a:aa:5d:78:a1:d4:
48:f0:a9:44:74:5c:a8:fd:6b:c8:73:cb:d1:6e:8f:d2:f3:27:
9d:4b:be:f4:72:2a:4d:27:72:74:75:16:f4:78:02:69:cc:1a:
c2:b4:e7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:19 2024 by rpki-client on console-ams.rpki-client.org