Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/e_KBiMCGqzFhlMFclvOG4lAACpg.roa
File: e_KBiMCGqzFhlMFclvOG4lAACpg.roa (raw, json)
Hash identifier: Aima6/rPnz4KwvJBiKSMmfEkf7VK93quHnARVmNiYV4=
Subject key identifier: 7B:F2:81:88:C0:86:AB:31:61:94:C1:5C:96:F3:86:E2:50:00:0A:98
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 01856F549A387FCD71F903A5DD41E2069F92
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/e_KBiMCGqzFhlMFclvOG4lAACpg.roa
Signing time: Sun 01 Jan 2023 21:54:53 +0000
ROA not before: Sun 01 Jan 2023 21:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59779
IP address blocks: 185.57.50.0/24 maxlen: 24
185.57.48.0/23 maxlen: 23
185.12.182.0/24 maxlen: 24
185.12.180.0/23 maxlen: 23
2a02:57e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:9a:38:7f:cd:71:f9:03:a5:dd:41:e2:06:9f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Jan 1 21:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bf28188c086ab316194c15c96f386e250000a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fc:89:df:01:bb:26:c7:0d:b5:a9:18:da:49:
b4:65:2b:07:d6:ea:8a:0b:4d:d7:89:fc:18:58:ff:
4f:71:0a:62:a5:fd:e2:bc:4e:67:38:69:b8:90:84:
12:6b:24:53:db:c5:b6:e9:e8:60:e3:8d:62:cd:fc:
3a:a5:c9:e9:c8:99:37:68:7a:b9:16:18:c6:74:3d:
c9:13:f1:3d:10:2c:be:98:61:59:72:bb:95:65:58:
6a:90:d6:1b:1f:71:6c:aa:0f:ba:90:27:d8:32:61:
1d:9f:c2:4c:4d:12:d7:c0:ec:12:e4:ab:5e:5b:e9:
a1:fb:79:13:3b:d6:49:88:2c:f7:49:5f:2e:e9:89:
67:4e:a4:04:84:be:0d:73:28:a0:05:44:4e:f9:d8:
ff:35:f6:86:53:6e:07:0d:83:40:ef:c9:06:cb:0d:
d6:3c:73:d8:8a:c1:2e:e5:33:24:64:31:ce:8c:02:
20:33:25:98:10:51:2b:81:47:c1:f3:87:aa:2e:5f:
03:b5:1a:a9:2a:23:d3:68:26:d8:31:21:9f:19:0a:
25:51:f3:f2:63:0d:33:c1:f7:4d:3b:a2:89:e8:a6:
28:9c:c4:2a:f4:58:6e:74:bb:21:0d:8e:38:c1:f5:
60:b8:d8:61:5b:05:36:28:d7:b6:26:93:71:6a:8f:
6f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F2:81:88:C0:86:AB:31:61:94:C1:5C:96:F3:86:E2:50:00:0A:98
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/e_KBiMCGqzFhlMFclvOG4lAACpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.180.0-185.12.182.255
185.57.48.0-185.57.50.255
IPv6:
2a02:57e0::/32
Signature Algorithm: sha256WithRSAEncryption
5e:1b:21:99:c2:8f:15:e8:c8:1b:f2:98:b7:6e:e0:b9:e1:83:
e1:ac:22:e4:34:0b:b9:5f:75:51:b4:75:c4:5e:a2:1b:27:73:
45:ac:36:a2:b7:fa:29:ab:75:fb:1c:aa:6e:13:f1:8d:d3:f8:
1d:16:b6:bd:8d:15:85:a5:43:86:4b:68:2d:41:73:35:cd:7c:
ce:0b:c3:91:31:c4:c5:64:69:68:54:2e:e0:da:3e:85:4c:83:
72:90:e9:f9:14:f8:76:10:88:5d:39:0b:cc:fa:e1:43:43:79:
49:f7:4a:f3:8a:37:4d:0b:06:93:a6:aa:ff:a8:ba:94:02:cc:
46:f4:e1:17:20:5d:96:8d:96:c5:53:91:bc:bb:c9:68:5f:fe:
56:f5:78:67:1c:4b:bf:e9:01:bc:2e:0a:31:a0:f2:09:0e:78:
d5:1d:32:75:2a:d4:9b:48:9b:05:fd:2a:61:be:85:a9:67:c6:
7f:75:24:07:b8:a2:a4:36:16:2b:e6:df:43:6d:bd:63:85:75:
6c:c9:f0:63:8e:c5:dc:f8:5c:68:14:db:0a:01:f5:14:38:eb:
eb:5b:20:24:e3:c8:7b:bc:8b:04:4f:7f:d3:04:a3:26:b3:90:
67:5c:74:15:dc:ed:2e:af:0d:b6:a6:dd:f0:cf:67:ac:c2:90:
2b:b4:07:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:36 2024 by rpki-client on console-fra.rpki-client.org