Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/am97QRGN7MdKGIBn8FOL9UUPB0o.roa
File: am97QRGN7MdKGIBn8FOL9UUPB0o.roa (raw, json)
Hash identifier: PH+JT1CSTmuuLLxe2hizxwQGDCl7osMPejbno6VVnSs=
Subject key identifier: 6A:6F:7B:41:11:8D:EC:C7:4A:18:80:67:F0:53:8B:F5:45:0F:07:4A
Certificate issuer: /CN=f58acd43c0033b13b88bb397415583aa51d9303a
Certificate serial: 0185BC0F5D3435A45CC1BDB806340C431BA8
Authority key identifier: F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/am97QRGN7MdKGIBn8FOL9UUPB0o.roa
Signing time: Mon 16 Jan 2023 19:30:01 +0000
ROA not before: Mon 16 Jan 2023 19:30:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198726
IP address blocks: 5.10.0.0/21 maxlen: 24
185.238.160.0/22 maxlen: 22
185.14.64.0/22 maxlen: 22
91.137.64.0/18 maxlen: 24
185.240.224.0/22 maxlen: 22
185.35.216.0/22 maxlen: 22
185.233.220.0/22 maxlen: 22
2a02:acc1::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bc:0f:5d:34:35:a4:5c:c1:bd:b8:06:34:0c:43:1b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58acd43c0033b13b88bb397415583aa51d9303a
Validity
Not Before: Jan 16 19:30:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a6f7b41118decc74a188067f0538bf5450f074a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:5a:14:9d:ad:e6:d0:2c:33:f9:08:87:54:
40:7d:aa:a1:d8:96:09:c0:3a:92:8a:83:79:32:c9:
9c:2b:97:c8:23:ae:05:2b:67:59:6d:d9:b1:05:ce:
16:49:89:52:2f:52:32:5b:49:ee:55:3c:a5:f1:43:
ac:c5:a7:e5:c8:9a:cc:4c:ca:a2:b3:6d:49:2c:f0:
0b:cf:f3:ef:29:9f:e0:7b:80:b4:a1:34:ca:81:23:
b9:ad:b7:28:92:85:c8:ac:1f:7c:9c:db:ed:e7:47:
98:77:5b:d1:d9:dd:d4:ec:ac:31:ed:3f:a5:84:3b:
0c:62:47:c0:6f:24:6e:e5:00:72:11:1b:19:3e:c4:
a1:72:82:79:2b:6e:7f:f5:87:b2:62:e0:51:de:45:
51:d5:49:35:17:57:34:f3:86:62:41:07:e8:c8:d0:
56:cd:48:4f:3c:84:4a:10:32:be:9d:e0:b0:5a:42:
28:52:98:4a:0e:ec:c8:d9:ea:a0:4d:14:fa:c8:74:
3d:7f:77:16:49:70:ef:0c:f9:b7:47:d3:31:18:37:
85:32:e2:44:8c:68:83:49:1e:3f:5f:fc:4c:1d:c6:
b9:2b:83:49:c2:b6:5f:41:bd:ec:c6:d5:16:0f:8b:
b4:65:75:ae:90:01:17:cd:60:73:97:d2:f8:5e:18:
30:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6F:7B:41:11:8D:EC:C7:4A:18:80:67:F0:53:8B:F5:45:0F:07:4A
X509v3 Authority Key Identifier:
keyid:F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/am97QRGN7MdKGIBn8FOL9UUPB0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.0.0/21
91.137.64.0/18
185.14.64.0/22
185.35.216.0/22
185.233.220.0/22
185.238.160.0/22
185.240.224.0/22
IPv6:
2a02:acc1::/32
Signature Algorithm: sha256WithRSAEncryption
c9:94:be:ff:2d:22:ed:15:2c:63:2b:fa:3a:1b:e4:78:2d:b4:
7f:7d:59:0c:a8:2f:99:33:82:68:00:e9:5c:4d:79:ab:fc:75:
2b:26:62:83:91:10:4c:8b:0d:90:96:83:13:38:6a:00:3a:7f:
7b:4d:37:fe:58:13:10:41:9e:ad:9d:78:84:5e:c8:d3:12:3a:
c8:e5:fb:93:3f:c7:b5:20:ba:a1:8b:ab:32:29:65:cd:73:de:
0d:3c:1d:77:2c:ce:f9:ef:f2:76:de:8c:f0:0d:8c:d1:ea:7b:
08:6d:4c:19:29:97:3f:6f:8a:88:d4:4a:d0:b9:af:bf:45:92:
c4:62:47:10:ce:37:d7:81:ec:b3:48:c7:5a:18:6e:7b:c5:64:
6c:54:c6:94:ae:78:04:95:2e:f7:a0:8e:36:a5:f8:77:cd:5f:
cf:ac:51:a8:1c:53:29:dc:7e:71:c7:38:7d:3c:f5:dd:28:2c:
aa:66:45:46:30:54:11:49:e4:68:12:b5:a1:49:af:eb:2e:36:
ea:ea:c8:4b:a3:94:4a:14:56:78:f4:f7:52:ec:ad:8a:a7:0d:
d5:3a:cf:d1:6b:ff:5f:08:24:9d:12:8b:55:fc:d8:23:1c:57:
af:03:71:65:d3:0d:c0:87:0f:ca:27:16:62:d1:0a:22:1c:f9:
30:1a:d4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:09 2024 by rpki-client on console-ams.rpki-client.org