Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/FwSGgapQ_qXg9t60tn8xqs8kbjQ.roa
File: FwSGgapQ_qXg9t60tn8xqs8kbjQ.roa (raw, json)
Hash identifier: 4cvak4hnb64YworVe2fobtdPC2r1eiyk7oTv0dvKS+4=
Subject key identifier: 17:04:86:81:AA:50:FE:A5:E0:F6:DE:B4:B6:7F:31:AA:CF:24:6E:34
Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial: 018CC8016B392FB2E0D5CA6278D6005907A8
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/FwSGgapQ_qXg9t60tn8xqs8kbjQ.roa
Signing time: Tue 02 Jan 2024 02:29:45 +0000
ROA not before: Tue 02 Jan 2024 02:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 393559
IP address blocks: 185.230.180.0/22 maxlen: 24
2a13:d00:cf00::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 15 Jan 2024 13:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:6b:39:2f:b2:e0:d5:ca:62:78:d6:00:59:07:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Validity
Not Before: Jan 2 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17048681aa50fea5e0f6deb4b67f31aacf246e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bd:d2:9e:07:5f:d8:76:bc:24:58:a5:b3:07:
5a:2f:38:1a:6d:90:97:e4:b6:e3:d4:54:b0:81:48:
bb:5a:65:c3:86:c0:56:e0:98:3a:15:ee:70:81:91:
6c:91:bd:6a:76:bd:eb:67:ec:14:a4:a1:32:40:6a:
9b:47:31:c1:e3:db:da:93:58:bf:a5:4d:3e:4b:a2:
d0:cb:07:30:a8:b8:01:3b:5b:41:43:22:64:b3:76:
2b:b4:06:86:7a:e2:48:45:bb:62:9c:5e:8b:b9:81:
9a:9e:19:e9:0b:e1:30:40:f0:aa:35:80:5e:f7:80:
bc:8c:44:23:45:07:34:9e:4d:26:18:a8:a5:e3:1a:
66:bd:2c:be:85:31:68:3d:4b:48:ec:bb:7f:91:b5:
e1:4e:b5:fa:5e:20:73:f4:12:8b:26:47:ba:33:51:
db:c2:1f:6c:9e:58:10:7a:92:15:44:04:28:cd:0c:
9b:ed:cc:fa:d7:be:2a:b8:fc:69:44:db:8a:2a:f6:
5e:1e:63:4e:4e:0b:f3:dc:7e:13:24:df:52:97:c4:
c8:f8:28:bd:14:2b:33:b8:a1:79:30:a0:35:69:04:
b8:35:d2:3b:91:ea:f0:43:02:78:8a:d4:f0:59:ad:
10:e9:99:db:0a:05:c7:53:61:5c:ce:c6:af:b8:10:
59:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:04:86:81:AA:50:FE:A5:E0:F6:DE:B4:B6:7F:31:AA:CF:24:6E:34
X509v3 Authority Key Identifier:
keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/FwSGgapQ_qXg9t60tn8xqs8kbjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.180.0/22
IPv6:
2a13:d00:cf00::/40
Signature Algorithm: sha256WithRSAEncryption
1a:4a:0e:f4:97:88:a5:01:6a:cb:fd:d3:e8:0b:f1:6c:a2:63:
a5:3a:de:e7:76:41:83:75:e4:11:25:b3:d0:24:77:c4:b7:61:
9d:6e:ed:12:59:fa:de:17:57:d5:b6:ad:a0:fd:83:b2:64:6c:
06:f0:62:d9:cf:b9:1d:84:bf:c1:0c:74:db:a9:8e:b1:99:7c:
6e:7f:f9:49:b1:93:da:6f:b7:f9:62:32:91:ee:7c:ec:05:42:
1a:08:b3:35:81:d2:32:80:be:27:99:64:1c:c2:f0:d9:c5:a7:
00:28:d0:45:c8:9b:9f:5a:c7:1f:14:3d:d1:20:e2:26:a1:49:
f3:b8:d8:e8:84:f5:53:ef:bc:b6:83:c9:e4:fc:70:23:4e:d9:
e1:b1:ed:56:22:38:5a:4f:ae:d8:3a:ca:91:76:3b:9b:1c:61:
c0:8b:70:bf:a3:60:f3:33:5d:96:df:d6:15:42:a0:eb:52:54:
86:1c:03:b9:db:5a:b1:12:11:0f:5e:be:4c:9d:fa:b1:99:93:
38:5f:09:e1:59:60:fb:f0:73:44:93:a5:56:0f:23:10:a3:19:
b2:c5:79:1a:ea:a8:9a:42:a2:a0:26:1e:ce:d9:09:f1:fc:2e:
81:1e:35:20:53:79:e8:55:36:c8:e0:5f:fb:94:1a:cc:dd:8b:
dd:97:83:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:53 2024 by rpki-client on console-ams.rpki-client.org