Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/bsj1GQKFcg9i2PiRCavK12wohfc.roa
File: bsj1GQKFcg9i2PiRCavK12wohfc.roa (raw, json)
Hash identifier: do8ey1K1KXk6KH/AFA+lg38gq1KdtaIluDupdIUtKYw=
Subject key identifier: 6E:C8:F5:19:02:85:72:0F:62:D8:F8:91:09:AB:CA:D7:6C:28:85:F7
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 0185EDFB0009C3E7468BD3E0A36134278F98
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/bsj1GQKFcg9i2PiRCavK12wohfc.roa
Signing time: Thu 26 Jan 2023 12:08:47 +0000
ROA not before: Thu 26 Jan 2023 12:08:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211541
IP address blocks: 185.244.226.0/24 maxlen: 24
2a10:c640:dead::/48 maxlen: 48
2a10:c640:6575::/48 maxlen: 48
2a10:c640::/48 maxlen: 48
2a10:c640:6170::/48 maxlen: 48
2a10:c640:7573::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:fb:00:09:c3:e7:46:8b:d3:e0:a3:61:34:27:8f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Jan 26 12:08:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ec8f5190285720f62d8f89109abcad76c2885f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:98:a7:bf:64:ee:e2:87:a5:45:c6:59:67:
e7:55:ac:46:84:2e:f3:98:d1:f1:0a:63:e0:ac:29:
47:04:4d:f9:b3:5b:6d:65:28:e8:cb:12:45:97:24:
90:bf:9c:5a:fc:14:9a:d2:66:04:ad:c8:1a:cb:a4:
04:12:2a:80:48:b0:f0:6f:c0:6d:81:68:4f:9c:8b:
7f:41:a9:8b:86:64:36:be:4e:53:8b:22:94:35:9f:
68:e0:2d:64:ac:e9:d7:4c:23:be:e2:23:5e:03:89:
71:35:99:d6:0f:a1:5d:6f:a0:12:23:0c:fb:4c:8c:
18:db:86:86:d2:b0:64:64:ad:f1:7c:2c:5b:1f:db:
dc:8e:0a:91:d8:4c:20:83:55:c0:1d:0c:42:2b:15:
af:7c:82:20:6a:5e:97:2e:50:bd:b7:17:9b:d7:e8:
48:6a:49:3c:c7:6c:69:7f:8a:43:76:7b:9e:f0:dd:
d9:10:72:d4:e0:71:f7:4d:aa:7a:f7:a3:0f:94:9b:
d5:7b:68:2d:40:9d:1e:c7:a2:2d:c6:8f:7a:f5:dc:
74:ce:24:66:87:55:cc:8b:fd:1e:b0:d7:09:8c:a8:
de:e8:38:2b:60:c8:46:4d:89:d5:d1:b6:7b:bf:c6:
96:7e:d5:3d:31:19:d0:d9:d6:92:77:78:15:b9:8d:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C8:F5:19:02:85:72:0F:62:D8:F8:91:09:AB:CA:D7:6C:28:85:F7
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/bsj1GQKFcg9i2PiRCavK12wohfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.226.0/24
IPv6:
2a10:c640::/48
2a10:c640:6170::/48
2a10:c640:6575::/48
2a10:c640:7573::/48
2a10:c640:dead::/48
Signature Algorithm: sha256WithRSAEncryption
ad:27:4b:e0:e6:91:98:09:1a:b2:08:cb:7f:a0:54:96:ed:46:
81:0f:84:e2:14:f1:3e:58:7a:f0:34:d6:b1:9c:4b:0b:dc:f8:
a8:b4:f8:08:b9:16:06:ed:12:ba:7b:ba:b3:23:ed:ab:af:f0:
a8:a7:95:44:fb:62:a2:c7:21:d1:6f:09:97:24:91:c9:dd:69:
1e:f2:ed:f3:4c:8d:eb:1e:02:99:aa:2c:28:62:cb:80:7f:20:
a3:e6:15:ec:33:29:f7:27:4c:ef:fa:2f:57:74:9d:d4:76:1d:
70:06:fa:61:2e:db:98:87:96:fb:46:9a:c8:de:ae:f3:a1:0f:
82:f3:35:38:bd:20:d0:3c:db:a6:e2:b9:93:24:3c:a5:60:9d:
19:1f:e4:c4:6f:b1:6c:be:d3:7b:a0:b2:a2:63:a9:90:22:81:
5a:00:b0:f6:95:47:85:8c:d8:f2:b0:79:c1:ea:b1:70:5a:98:
9e:3c:b6:f7:f1:84:ce:09:94:03:d1:82:2d:5f:82:4b:d0:dc:
99:6f:80:d7:18:ee:b6:89:17:cb:02:cb:39:ef:e1:e1:c4:80:
5a:59:61:05:c0:7e:c7:c7:f9:66:91:cb:16:66:06:b8:d9:5e:
91:2b:88:00:e7:0b:f4:b6:88:7f:8c:97:5d:21:6d:0e:10:bb:
4a:66:98:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:31 2024 by rpki-client on console-ams.rpki-client.org