Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/1-ixKna4BblMmwUKoe0uPuqmj7Hs.roa
File: 1-ixKna4BblMmwUKoe0uPuqmj7Hs.roa (raw, json)
Hash identifier: eRgmwRebRUaptku8c8miHBSx2PHqlT1BJqmYYx4cEjA=
Subject key identifier: FA:2C:4A:9D:AE:01:6E:53:26:C1:42:A8:7B:4B:8F:BA:A9:A3:EC:7B
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 018573280CF2CF35811F2E485F5FDC41D949
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/1-ixKna4BblMmwUKoe0uPuqmj7Hs.roa
Signing time: Mon 02 Jan 2023 15:44:42 +0000
ROA not before: Mon 02 Jan 2023 15:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209044
IP address blocks: 5.183.48.0/22 maxlen: 22
185.254.1.0/24 maxlen: 24
2a0e:d200::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:0c:f2:cf:35:81:1f:2e:48:5f:5f:dc:41:d9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Jan 2 15:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa2c4a9dae016e5326c142a87b4b8fbaa9a3ec7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9b:e8:1e:04:16:9e:12:b7:fc:ce:97:5e:d7:
20:38:9b:dd:aa:89:87:c6:80:58:b4:9d:cc:36:6a:
7a:a2:90:f6:c7:62:1a:6e:0b:06:d8:c5:d3:f0:d6:
7b:b7:42:03:4c:67:ed:43:03:06:b2:53:b5:ee:46:
95:ef:82:05:f1:72:69:28:4e:a5:b6:31:65:0a:42:
55:75:e8:b4:b3:ad:e8:f0:64:54:aa:ee:92:21:4f:
3d:ac:0b:a9:9e:3b:c7:d8:d2:08:4d:95:57:5b:bb:
fd:d4:31:6f:ec:1a:ad:29:36:80:5d:c9:0c:07:e2:
47:7b:ed:a2:d4:ba:3f:c9:e1:40:5f:98:a8:79:75:
22:7e:a4:e1:ca:c6:40:4a:93:ac:fa:9f:33:5b:a0:
1e:86:20:67:13:3e:d5:c0:c3:79:1a:96:78:2f:fe:
bf:72:ac:ed:c1:50:12:4e:cd:5f:1f:56:19:07:61:
6c:f2:58:7a:09:ed:b0:64:b3:be:ee:ad:b0:51:bc:
47:7e:3b:91:11:5a:49:26:56:c4:e3:18:5c:01:47:
f7:ec:5c:5f:f9:d0:09:81:00:d4:b9:83:ca:db:34:
b5:4c:76:82:32:d1:3f:14:72:18:85:c3:1f:7c:6e:
16:18:21:c9:20:7d:87:04:96:dc:98:03:07:7e:32:
3f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2C:4A:9D:AE:01:6E:53:26:C1:42:A8:7B:4B:8F:BA:A9:A3:EC:7B
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/1-ixKna4BblMmwUKoe0uPuqmj7Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.48.0/22
185.254.1.0/24
IPv6:
2a0e:d200::/29
Signature Algorithm: sha256WithRSAEncryption
9f:e6:2e:4f:14:68:69:44:5a:0f:60:2f:61:c7:b8:d2:2c:cd:
b2:e9:b9:c0:1c:2f:94:9b:70:11:b0:fe:64:07:5c:4f:4d:e0:
4c:75:f4:72:d0:0c:6f:04:3e:80:43:83:d2:55:8a:af:6d:f3:
6d:b9:89:e5:54:49:cf:be:c4:63:c9:af:0d:d0:cd:82:7a:b1:
77:89:cc:2a:44:bd:29:ba:f2:b0:f2:db:8e:72:f1:a2:e9:15:
45:9e:e1:f2:b5:69:1f:26:45:80:9e:4e:3d:4e:3a:e6:20:28:
c9:b6:80:a2:91:c2:bd:59:48:87:cc:e0:fa:b2:9a:6e:93:0c:
56:5a:80:ed:46:1c:95:7c:e2:82:13:73:6d:5a:8c:18:58:e8:
e5:16:44:34:de:3e:dd:3b:73:0e:b5:8c:9b:01:f2:ea:85:14:
6f:3a:d8:e2:1a:d2:c8:28:0a:6d:6b:8b:e9:8b:47:74:80:80:
6b:8e:dd:b4:fe:e2:9c:80:6c:4e:05:41:19:cd:c3:7b:c4:74:
d5:b5:45:84:73:d3:65:b0:86:cd:1b:98:af:e4:9a:0f:c9:9d:
0e:c4:cb:a4:c9:ff:aa:bc:5b:93:30:10:26:5d:43:ca:94:7f:
d8:97:fe:17:85:36:47:6e:e2:06:77:b3:89:09:93:73:7a:14:
46:64:0a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:19 2024 by rpki-client on console-fra.rpki-client.org