Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/AuGuK56x9ZJs0y2yqWIdWXQKQLY.roa
File: AuGuK56x9ZJs0y2yqWIdWXQKQLY.roa (raw, json)
Hash identifier: 1Va5521vbHpPWw+gR5MCHd3ESh2ukK8PirXD+tpNJkc=
Subject key identifier: 02:E1:AE:2B:9E:B1:F5:92:6C:D3:2D:B2:A9:62:1D:59:74:0A:40:B6
Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial: 0185730C9C2E886487E84D0FBA8A4B6A7268
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/AuGuK56x9ZJs0y2yqWIdWXQKQLY.roa
Signing time: Mon 02 Jan 2023 15:14:44 +0000
ROA not before: Mon 02 Jan 2023 15:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198985
IP address blocks: 46.231.240.0/22 maxlen: 22
45.67.80.0/23 maxlen: 23
185.233.100.0/22 maxlen: 22
2a09:7340::/32 maxlen: 32
2a0c:e300::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:9c:2e:88:64:87:e8:4d:0f:ba:8a:4b:6a:72:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Validity
Not Before: Jan 2 15:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02e1ae2b9eb1f5926cd32db2a9621d59740a40b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a5:8c:a1:54:0c:d5:e2:72:08:01:1e:69:48:
63:48:0d:bc:71:86:bf:ca:6f:fe:d4:fb:a4:1d:09:
00:1e:a1:e5:b4:28:7a:1f:ec:67:ba:b1:fa:99:05:
64:5b:93:cd:f9:fc:d9:3b:bb:97:90:1d:ef:91:a5:
ed:fe:5d:bc:7b:dd:22:bd:71:4e:54:35:5e:4a:23:
b7:54:93:9b:29:34:fc:24:a8:0a:7f:ec:55:f5:2c:
b2:04:9f:6a:e7:f0:6c:e5:25:f9:46:54:dd:06:75:
59:46:ac:5c:68:d8:0a:a8:09:f8:65:f5:f1:c0:2c:
df:ad:8a:0f:b5:72:52:f4:b0:ca:68:0a:71:d2:1f:
f1:63:7c:d6:1d:2f:f6:9f:b4:4b:af:ee:97:e8:4e:
d4:cd:04:53:99:4f:34:d4:9a:31:59:9d:d1:7b:0a:
f9:53:57:9a:f3:9b:44:ef:10:81:64:fd:6b:2a:6c:
85:93:5e:18:81:ab:cb:58:f8:52:f5:03:ee:97:70:
f1:e2:b1:f0:54:7f:ea:93:f9:af:a9:92:5b:81:ea:
73:6c:06:cd:e4:3f:d4:37:f0:9b:be:7d:ee:d2:53:
2e:40:87:d9:42:68:ae:4a:0d:a8:89:49:cd:47:bd:
69:bf:7a:98:8d:db:6a:5a:4e:73:3f:24:4c:f2:c6:
05:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E1:AE:2B:9E:B1:F5:92:6C:D3:2D:B2:A9:62:1D:59:74:0A:40:B6
X509v3 Authority Key Identifier:
keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/AuGuK56x9ZJs0y2yqWIdWXQKQLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.80.0/23
46.231.240.0/22
185.233.100.0/22
IPv6:
2a09:7340::/32
2a0c:e300::/29
Signature Algorithm: sha256WithRSAEncryption
b2:c6:c0:3e:c8:9d:c2:34:6d:8d:26:ed:ba:a5:c6:d9:5e:98:
f2:5a:a4:ef:1e:7c:b8:df:3e:e2:02:d3:06:00:16:06:4d:e9:
1f:c2:b6:7b:df:48:88:20:f1:ef:a0:32:14:0d:23:29:a0:8b:
a6:e8:04:d3:80:c1:3e:b1:61:11:13:ef:01:d6:2e:16:5b:82:
6a:37:46:d4:dd:e0:2f:b7:ba:be:05:75:38:38:4e:e7:4c:4c:
5f:f8:d3:38:6b:45:20:76:a4:9b:ee:53:6f:b6:fc:29:35:c6:
08:3d:48:23:e3:a7:50:5c:c7:dd:e5:e2:d2:a0:ea:16:f5:2f:
c2:f7:49:04:e3:52:60:32:35:a8:95:ef:2f:d4:a7:84:47:9a:
9c:90:9e:80:dc:e9:e7:1b:aa:fb:c5:ca:b1:5d:65:af:04:82:
81:d2:8c:1b:6b:50:7e:16:23:a8:7d:1f:22:b9:e1:93:83:ff:
23:80:57:eb:f3:db:c8:bc:20:78:e3:35:11:2b:53:03:f4:28:
16:25:08:03:ca:29:57:15:ca:3c:65:da:1e:27:27:4e:6d:5e:
bf:f3:75:e6:96:fc:84:03:df:ab:1b:a4:e4:bd:8b:b6:4f:b0:
c0:5e:1f:1f:8c:6d:97:d2:0d:87:10:89:01:3e:53:c4:59:d1:
e3:53:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:56 2024 by rpki-client on console-fra.rpki-client.org