Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/_EvtTs6NSJ6QFHTmRk9PQ1jEy9o.roa
File: _EvtTs6NSJ6QFHTmRk9PQ1jEy9o.roa (raw, json)
Hash identifier: Z/8u/kMG+a6KjH1m4B/11B6wnXmxk/w+eY8eErZzQyk=
Subject key identifier: FC:4B:ED:4E:CE:8D:48:9E:90:14:74:E6:46:4F:4F:43:58:C4:CB:DA
Certificate issuer: /CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Certificate serial: 018571BA1DD6855D3A2FE16DF6F7F5ED4FB0
Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/_EvtTs6NSJ6QFHTmRk9PQ1jEy9o.roa
Signing time: Mon 02 Jan 2023 09:05:00 +0000
ROA not before: Mon 02 Jan 2023 09:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62179
IP address blocks: 185.44.73.0/24 maxlen: 24
185.44.74.0/24 maxlen: 24
185.44.72.0/24 maxlen: 24
185.44.75.0/24 maxlen: 24
185.44.72.0/22 maxlen: 22
2a01:7220::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:1d:d6:85:5d:3a:2f:e1:6d:f6:f7:f5:ed:4f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Validity
Not Before: Jan 2 09:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc4bed4ece8d489e901474e6464f4f4358c4cbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2e:48:15:05:aa:f2:67:9a:70:3d:82:51:e8:
8e:d6:f8:eb:9a:aa:65:47:43:72:7c:d6:c0:ba:d5:
2e:68:10:e6:71:d7:39:fd:ea:e3:12:2a:6b:16:83:
27:f6:57:3c:8c:2b:a2:41:f4:34:ee:9e:72:81:79:
ca:f0:78:87:7c:d9:29:a9:00:dc:c1:8c:22:8b:07:
e3:d1:f8:fb:72:e7:40:d9:26:82:08:ab:5f:e7:d6:
51:71:1e:f8:a5:65:56:61:9f:fe:bd:38:8e:92:76:
1f:50:b0:c8:d2:6b:35:46:4f:51:55:88:69:40:f9:
0a:db:0e:4e:50:d9:15:86:52:a1:db:1e:1f:9e:fc:
fd:fc:e3:25:ba:02:a9:e7:14:dc:7b:b8:f2:76:6d:
43:9b:11:fc:13:30:ac:e4:fa:0a:7d:d4:19:56:dc:
b7:ed:34:3f:19:64:38:70:95:2f:5e:9a:72:2c:31:
41:e9:d6:4f:f6:25:c5:10:11:82:f7:af:58:7d:b5:
b8:20:ef:1e:be:31:00:d0:f0:3a:16:75:58:5a:36:
14:ea:8a:31:f3:c0:7c:89:6e:b8:54:59:dd:1d:8c:
a8:c4:c4:3a:c2:f2:ec:36:64:77:f7:3b:dc:43:33:
f0:b4:8f:53:86:62:ff:50:31:de:c0:a1:b3:d1:e3:
2c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4B:ED:4E:CE:8D:48:9E:90:14:74:E6:46:4F:4F:43:58:C4:CB:DA
X509v3 Authority Key Identifier:
keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/_EvtTs6NSJ6QFHTmRk9PQ1jEy9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.72.0/22
IPv6:
2a01:7220::/32
Signature Algorithm: sha256WithRSAEncryption
3f:0b:a3:b3:ca:4a:24:43:aa:8f:da:17:f0:47:a7:00:86:e8:
9a:11:85:d6:68:c0:51:86:b1:2d:b8:a1:de:6a:e3:1b:5b:86:
6d:73:2e:1d:95:c6:db:3e:6d:53:02:25:0b:c2:16:f2:62:2e:
d4:b4:22:b9:37:3c:e7:fd:4c:c2:eb:76:f2:f6:14:6e:7e:96:
35:ba:e0:11:ca:8c:81:ec:0d:bc:34:c1:91:b4:a2:5b:3b:25:
ea:a2:9f:22:67:f7:e6:0b:34:8f:dd:b3:f5:eb:74:b5:59:9d:
4f:90:40:a4:57:3f:90:cb:0e:50:ec:f6:b2:19:a7:b2:a2:9f:
d5:fd:27:a4:b5:cf:7c:f8:7a:f6:aa:af:32:3f:53:c0:9c:36:
fe:18:96:a6:1a:ba:ac:50:bd:23:ac:ef:aa:94:6b:cf:0b:2d:
a2:2a:2f:c7:ff:3c:51:b6:31:a0:03:44:91:44:9d:ef:48:d8:
db:ff:fa:37:20:65:49:14:d9:6e:ca:02:41:ff:d2:10:de:fc:
34:af:ef:74:a2:36:ef:0b:1a:69:27:36:63:56:3e:d0:64:95:
93:39:0b:5e:54:0c:2e:0d:bd:84:a8:37:20:0a:e0:09:44:0c:
49:0f:5f:91:e0:56:cf:90:cb:bf:f1:62:3f:ed:e1:ef:ea:d1:
0a:53:b0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:09 2024 by rpki-client on console-fra.rpki-client.org