Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/0F7byqz2bbcPnb1sU_d9WkAm1lM.roa
File: 0F7byqz2bbcPnb1sU_d9WkAm1lM.roa (raw, json)
Hash identifier: pPNw34JJ1fPEkr3Iq5cL1MDJP8V+v8FkwQxFJVSbhec=
Subject key identifier: D0:5E:DB:CA:AC:F6:6D:B7:0F:9D:BD:6C:53:F7:7D:5A:40:26:D6:53
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 018756D959E18C4A9017B2AD1E41AB8C2066
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/0F7byqz2bbcPnb1sU_d9WkAm1lM.roa
Signing time: Thu 06 Apr 2023 13:54:57 +0000
ROA not before: Thu 06 Apr 2023 13:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50875
IP address blocks: 185.86.245.0/24 maxlen: 24
185.86.246.0/24 maxlen: 24
185.86.244.0/22 maxlen: 22
185.86.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Apr 2023 02:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:d9:59:e1:8c:4a:90:17:b2:ad:1e:41:ab:8c:20:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Apr 6 13:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d05edbcaacf66db70f9dbd6c53f77d5a4026d653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:fe:e7:40:b5:e1:3c:b4:e5:05:00:a1:91:
5d:f8:2f:55:50:9c:f3:4b:57:f3:73:f4:63:4c:72:
fb:91:ab:e3:c5:68:64:99:b8:ff:ef:cf:7c:97:9c:
7c:3d:38:04:78:f7:6a:44:50:7e:7d:c9:63:8a:87:
06:6e:a3:82:3b:00:3e:3d:8a:29:28:c6:a9:cf:0d:
6c:a4:37:70:d4:9b:51:d8:47:bf:db:b2:6f:7c:f2:
50:c9:40:86:3a:f5:16:69:ed:4f:00:b5:54:c3:af:
ee:1f:db:14:78:8a:a2:cf:57:e7:4e:a4:44:13:4d:
0c:c4:61:34:38:2b:a4:c4:7d:df:f9:3f:1a:d3:b7:
b8:62:05:04:d5:88:2b:f9:9b:4f:c5:6b:ee:f6:5d:
a4:28:45:09:bb:5c:14:f3:c6:61:66:b5:9d:13:13:
08:0e:cc:e1:35:11:57:3b:36:2d:2b:22:94:12:01:
5b:26:93:0f:1e:f3:b3:d2:a2:71:ba:d8:16:9d:72:
75:34:92:3f:d6:2e:68:6e:da:c3:48:36:a4:1a:ca:
e7:3a:50:71:81:94:2d:8f:49:b2:c9:fb:fc:f3:ce:
f3:91:d9:6a:ff:1a:34:80:74:08:27:88:78:0b:44:
0b:71:d3:23:98:44:d3:1e:6a:f5:85:21:f2:4b:c6:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5E:DB:CA:AC:F6:6D:B7:0F:9D:BD:6C:53:F7:7D:5A:40:26:D6:53
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/0F7byqz2bbcPnb1sU_d9WkAm1lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.244.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:09:54:e6:ef:3a:20:9d:4e:62:bd:46:49:32:46:40:78:b7:
05:66:3d:40:99:76:64:10:6d:44:7c:92:9b:c5:6b:ed:62:02:
e2:83:79:4e:bf:bd:8f:67:8a:08:da:80:3e:7b:0b:b8:a2:e8:
12:9c:f7:9e:f7:aa:a2:3a:fc:e3:ee:cc:9d:2d:16:c3:29:2a:
c4:01:ac:1f:5c:62:e7:91:c9:3f:c3:eb:fb:2b:9b:ae:35:bb:
19:50:9c:ae:fe:22:2d:bd:21:05:21:ca:4a:bf:0c:8e:c4:6f:
57:bc:9d:21:e0:b8:25:a7:4b:ed:d9:5f:a6:70:44:74:c2:ab:
46:f8:e6:92:50:01:93:92:76:4e:d8:38:a9:e1:b6:4e:be:83:
21:94:f4:d3:b4:31:d3:6e:ce:fa:07:25:15:28:ae:81:2e:4d:
f8:74:7e:f0:00:f1:8a:eb:da:8f:a9:93:48:8c:5b:77:71:02:
38:bf:8e:28:25:65:1f:d1:70:5f:eb:8b:20:5b:ff:b3:5c:86:
54:97:f4:e6:73:99:4a:54:aa:41:53:7c:a3:42:33:cc:57:a0:
64:79:8c:68:ac:c5:a2:7c:64:93:88:96:16:1c:c8:0d:d6:1d:
b5:b2:e2:ae:78:b8:a1:cc:58:aa:f4:10:2d:ae:76:e7:cc:71:
0e:69:1d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:13 2024 by rpki-client on console-ams.rpki-client.org