Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/BrJNEu9thQr9n4PFyyj2M5iSc_I.roa
File: BrJNEu9thQr9n4PFyyj2M5iSc_I.roa (raw, json)
Hash identifier: M/bgB8rOTbpDaW6zAvNiqWYANSkm38hubnylTWlzB+k=
Subject key identifier: 06:B2:4D:12:EF:6D:85:0A:FD:9F:83:C5:CB:28:F6:33:98:92:73:F2
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 018BBE29E2160000CCCFB0E259B5A8761D4C
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/BrJNEu9thQr9n4PFyyj2M5iSc_I.roa
Signing time: Sat 11 Nov 2023 11:34:57 +0000
ROA not before: Sat 11 Nov 2023 11:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201642
IP address blocks: 185.249.103.0/24 maxlen: 24
185.249.100.0/23 maxlen: 23
185.249.100.0/24 maxlen: 24
185.249.100.0/22 maxlen: 22
185.249.101.0/24 maxlen: 24
185.249.102.0/24 maxlen: 24
185.249.102.0/23 maxlen: 23
2a14:3200::/32 maxlen: 32
2a14:3200:2a14::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 24 Nov 2023 00:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:be:29:e2:16:00:00:cc:cf:b0:e2:59:b5:a8:76:1d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Nov 11 11:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06b24d12ef6d850afd9f83c5cb28f633989273f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:87:5a:cf:e3:a5:0c:e8:b4:f7:7e:c6:79:
a9:ca:ba:90:d2:69:e8:4d:98:bb:58:81:f7:aa:c2:
f6:5a:b7:ae:f0:37:48:87:d7:17:f2:93:76:5e:61:
1b:aa:d7:fa:6c:1d:9b:2e:58:d4:ef:7c:7a:36:ee:
1b:33:f7:3e:8e:11:f4:1f:35:90:3b:8b:75:84:89:
d0:25:3c:6a:f0:96:3f:d9:c1:5f:18:54:30:11:c6:
2a:cb:ca:1a:68:a7:89:d5:ee:9a:fa:fe:38:13:1e:
98:37:5f:d4:a9:42:7a:b8:c0:c4:86:af:ad:fb:5e:
1b:1f:19:1b:a7:30:d9:d4:a0:c6:f7:19:a1:ef:2e:
b3:64:89:c1:6e:2f:77:ca:8c:69:b2:df:c3:2c:a8:
e5:c5:8b:06:64:66:cd:10:cd:f7:69:d1:74:0b:94:
f3:ef:ab:7a:b7:97:b4:72:bb:12:24:c0:95:8a:db:
ec:c2:07:f6:c0:2b:7f:be:8e:16:dd:cf:0e:2f:32:
5d:e0:07:ec:89:25:5a:c0:d7:7a:4a:3a:a9:b6:3d:
4f:21:8f:f0:ce:ff:e6:8f:ca:dc:6f:a8:88:13:30:
e1:e2:56:ca:f8:69:1c:c2:f9:70:a1:8d:c2:73:68:
5e:18:61:4f:dc:77:b3:01:6b:24:49:5e:0e:b4:8b:
a6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B2:4D:12:EF:6D:85:0A:FD:9F:83:C5:CB:28:F6:33:98:92:73:F2
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/BrJNEu9thQr9n4PFyyj2M5iSc_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.100.0/22
IPv6:
2a14:3200::/32
Signature Algorithm: sha256WithRSAEncryption
41:7c:c9:c4:a4:5d:df:07:dc:d0:de:df:12:0b:3e:9b:0e:3b:
ae:57:f4:41:f9:9d:96:72:41:fe:a8:fa:a9:85:aa:93:52:53:
e7:dc:4a:2b:65:41:53:04:d6:0f:04:ff:26:c7:72:3a:a8:7b:
16:3e:2c:27:40:92:bf:8f:39:1e:4d:e9:50:91:4c:4b:df:ef:
fc:33:22:96:f9:21:59:48:31:e9:e4:50:c7:8e:4c:f6:7e:f6:
13:e9:cc:07:d7:46:2f:2d:3c:41:89:27:47:04:34:91:40:06:
67:a4:31:09:d2:34:60:7c:ae:ee:eb:ba:37:85:5d:fe:88:58:
14:8d:8f:ef:a8:c3:81:77:fe:fa:df:e3:db:98:3a:35:cb:b8:
ae:4d:7c:92:64:48:22:3a:d1:a0:c7:4c:25:b7:7e:42:0b:f7:
09:99:1a:4c:96:45:00:61:41:9a:51:a7:79:5a:e9:7e:21:bd:
10:43:bc:6d:83:33:9e:11:c6:ce:3d:4c:74:05:2d:4b:80:f2:
3e:cf:8a:2c:e5:03:a2:8f:09:bc:82:c7:be:f8:aa:04:60:1f:
3c:c9:29:b1:a7:da:46:9b:7a:a4:e1:8f:4c:6b:a7:2f:61:85:
6e:04:82:fa:9d:e8:04:4c:7f:5f:76:a3:cc:09:e7:11:1f:89:
94:64:e2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:03 2024 by rpki-client on console-ams.rpki-client.org