Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/1-rADDHs3_8sj4vwb4lELcdLFR4Y.roa
File: 1-rADDHs3_8sj4vwb4lELcdLFR4Y.roa (raw, json)
Hash identifier: /2KHN4cPiSQiTuCkuLZulxK8LPIah6FHTb7pavLlaE8=
Subject key identifier: FA:B0:03:0C:7B:37:FF:CB:23:E2:FC:1B:E2:51:0B:71:D2:C5:47:86
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 0186C5A8184DE31F6E7F6932398AC4E43D55
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/1-rADDHs3_8sj4vwb4lELcdLFR4Y.roa
Signing time: Thu 09 Mar 2023 09:16:13 +0000
ROA not before: Thu 09 Mar 2023 09:16:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43345
IP address blocks: 62.221.250.0/24 maxlen: 24
185.94.228.0/24 maxlen: 24
2a05:1500:500::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:a8:18:4d:e3:1f:6e:7f:69:32:39:8a:c4:e4:3d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Mar 9 09:16:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fab0030c7b37ffcb23e2fc1be2510b71d2c54786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:3c:db:d7:1e:f3:b0:6a:7e:3f:e7:1c:f1:
6f:c0:95:b8:24:80:37:c0:cb:62:f7:ef:e9:fb:38:
dc:5e:09:6c:40:e5:f7:6b:49:8e:dc:f9:8c:1d:f9:
fc:7b:96:1e:56:eb:e1:d1:49:91:2f:9a:e4:39:96:
d3:c0:80:a5:b6:a2:83:2b:d5:80:83:0d:cf:3a:b9:
fe:c5:de:41:45:cf:c2:ae:49:64:26:80:07:e8:37:
fc:00:27:77:b4:74:f4:49:81:2a:25:aa:a9:f2:3c:
58:11:07:ff:04:45:d7:09:50:ba:d1:71:d9:9e:62:
13:99:28:51:fc:d5:b1:e5:c3:f2:3a:cc:81:b8:2f:
bf:55:57:b1:2c:86:c2:51:ce:4d:c1:56:3a:40:82:
92:6f:3e:83:42:75:90:6d:76:07:d5:88:d6:f9:07:
b8:4a:e4:b2:a4:b1:ce:11:cf:3e:ec:7a:40:af:ff:
d2:a3:f1:05:94:a4:b1:f0:11:ea:51:73:8c:38:c5:
7c:5b:5a:57:e1:53:72:04:64:ab:1f:a9:48:34:65:
f5:70:3d:e0:ae:f5:21:1e:22:58:6d:fd:8f:29:39:
1c:65:14:e9:4d:11:d7:7f:c7:0a:92:9e:2c:9c:05:
e1:b6:e2:02:70:9a:d1:1c:5b:65:35:76:6b:70:2d:
11:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B0:03:0C:7B:37:FF:CB:23:E2:FC:1B:E2:51:0B:71:D2:C5:47:86
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/1-rADDHs3_8sj4vwb4lELcdLFR4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.221.250.0/24
185.94.228.0/24
IPv6:
2a05:1500:500::/40
Signature Algorithm: sha256WithRSAEncryption
7d:b7:fd:54:4c:5d:90:fe:54:50:95:80:61:75:11:7c:5e:02:
ea:be:da:55:1b:b8:d7:22:78:c0:09:fc:1e:3c:bd:66:47:8b:
33:89:79:47:c8:39:e9:8e:47:ac:09:49:6b:94:c6:a6:a9:7d:
7d:ce:d0:a6:e9:69:e7:d6:11:0a:0c:e4:9c:b4:b5:e4:59:b5:
2d:33:28:52:89:41:da:bc:e9:ef:aa:58:cb:45:d5:5d:20:ff:
83:04:0b:08:5a:53:1a:78:e2:34:69:bd:91:8b:0d:e4:ad:00:
ce:98:92:27:27:69:23:89:ba:9f:5f:db:a4:0f:bb:6d:8c:a1:
f1:f2:11:f4:05:16:ce:24:8b:a6:f7:36:af:e2:68:63:33:22:
17:40:47:71:dd:a7:b9:14:cf:6c:15:df:38:32:d5:aa:67:7f:
df:64:bc:1c:e3:97:e4:5e:8a:43:dd:a0:4c:49:55:0e:22:33:
b9:ae:3f:df:a6:a9:fd:2c:1e:ef:82:ad:d2:54:9d:75:45:45:
cb:43:cd:ff:55:64:55:89:9e:78:8e:61:b9:94:66:e9:9d:f1:
03:7f:6e:13:65:73:b3:90:a3:a0:f0:09:bb:5d:0f:7e:85:49:
a9:05:07:ed:3c:11:ef:e8:e8:d6:89:59:b2:65:9e:4f:2a:c3:
a9:88:b4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:15 2024 by rpki-client on console-fra.rpki-client.org