Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/3feig8zoGJ8qfWwvZSeP2tzofRc.roa
File: 3feig8zoGJ8qfWwvZSeP2tzofRc.roa (raw, json)
Hash identifier: oAoH8E2ijPYqmlhd7OG2hl2o2ftX6viafoo29EfRsyM=
Subject key identifier: DD:F7:A2:83:CC:E8:18:9F:2A:7D:6C:2F:65:27:8F:DA:DC:E8:7D:17
Certificate issuer: /CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Certificate serial: 0185711E6EA3476C6FAD67CC8F83406381E4
Authority key identifier: F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/3feig8zoGJ8qfWwvZSeP2tzofRc.roa
Signing time: Mon 02 Jan 2023 06:14:57 +0000
ROA not before: Mon 02 Jan 2023 06:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61145
IP address blocks: 185.8.112.0/22 maxlen: 24
194.38.12.0/22 maxlen: 22
2a03:38c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:6e:a3:47:6c:6f:ad:67:cc:8f:83:40:63:81:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Validity
Not Before: Jan 2 06:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddf7a283cce8189f2a7d6c2f65278fdadce87d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:38:64:a9:cc:41:b3:c6:9f:4c:b1:b0:9c:
10:b7:8d:7f:20:7b:9f:cf:df:eb:a3:73:c3:2a:2b:
8f:e0:1d:87:ba:ac:53:d7:3e:8f:db:2c:16:d9:64:
a6:a3:d7:50:e7:71:10:ff:df:86:02:52:13:3f:db:
38:09:fa:33:05:da:26:ec:33:93:dd:76:b2:af:67:
65:bd:c4:e5:f1:0d:bc:38:bd:30:92:69:8a:87:bb:
8c:f2:00:eb:0d:76:af:02:7c:72:ca:ca:e5:6f:4e:
5d:62:42:13:dd:5c:4e:ca:87:3b:bd:f2:25:d0:49:
27:a3:9a:7b:d5:18:fc:74:04:21:84:fd:9c:9e:40:
10:2c:6f:f8:0f:b2:ed:85:9f:0f:75:50:96:c8:d7:
9e:97:80:00:ad:1d:06:7e:9d:7f:0b:54:28:1b:a1:
73:13:d9:c6:5e:14:94:a4:e2:de:d7:b4:9a:ca:ad:
f8:1d:fc:f5:7a:ad:8b:ef:e2:db:20:26:dd:93:53:
95:76:89:f2:f7:84:09:a4:62:5a:1c:69:00:94:41:
29:7d:d4:54:a0:56:27:db:8c:98:7c:89:d9:e1:8c:
99:ff:39:00:e9:19:9b:35:42:6f:e7:c1:b2:c1:61:
93:10:60:11:8c:35:2d:e1:ad:f6:61:e1:e3:33:74:
7d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F7:A2:83:CC:E8:18:9F:2A:7D:6C:2F:65:27:8F:DA:DC:E8:7D:17
X509v3 Authority Key Identifier:
keyid:F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/3feig8zoGJ8qfWwvZSeP2tzofRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.112.0/22
194.38.12.0/22
IPv6:
2a03:38c0::/32
Signature Algorithm: sha256WithRSAEncryption
9d:20:ac:15:3b:fb:54:82:63:34:18:50:ef:98:10:9f:49:f1:
21:ba:61:9a:52:69:7d:50:f8:62:5d:d2:4c:4f:20:54:5e:f7:
e5:40:92:90:38:33:b9:28:e3:0b:54:5f:82:42:f0:eb:91:07:
21:da:ce:b9:b2:7d:78:35:ca:61:14:72:72:8a:b4:29:fc:da:
82:5a:7b:1e:d5:c8:ef:29:d2:6a:e8:32:5b:6f:28:e5:2d:d7:
7b:ca:c5:63:80:62:0b:27:af:25:9a:30:28:99:56:2b:dd:6b:
be:60:90:5f:83:96:51:05:db:bc:a2:dd:d5:ae:a6:c1:d4:38:
4d:e8:aa:79:42:fb:78:db:31:16:b8:ca:c4:40:ed:25:77:6b:
74:c6:eb:e3:20:09:9f:62:06:b7:3f:20:f2:6a:42:f4:40:9b:
30:45:69:cf:01:0f:70:75:cf:7f:3e:6b:cc:b4:8c:9b:72:dd:
43:48:60:a2:7d:4b:91:94:54:86:b4:28:1a:36:e5:36:c9:09:
2c:d9:55:c9:01:0a:50:88:8d:b7:7d:ef:b5:8d:ea:fe:18:96:
5b:17:49:6c:3c:f1:37:01:ae:6e:63:74:79:26:ca:64:a7:b8:
e6:fc:78:0f:9a:48:8d:f1:f7:06:dc:21:43:ec:d2:c0:23:f2:
f6:09:81:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:07 2024 by rpki-client on console-ams.rpki-client.org