Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/GO7y6YoIL8Trm6F928SnpKXoyAM.roa
File: GO7y6YoIL8Trm6F928SnpKXoyAM.roa (raw, json)
Hash identifier: hcDlEbwYC3OJKAkWy+tQdp+pDNGA4XHJEW7KN6k7oYQ=
Subject key identifier: 18:EE:F2:E9:8A:08:2F:C4:EB:9B:A1:7D:DB:C4:A7:A4:A5:E8:C8:03
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 018D128616FD9B19CA0561842411B08875E3
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/GO7y6YoIL8Trm6F928SnpKXoyAM.roa
Signing time: Tue 16 Jan 2024 13:46:34 +0000
ROA not before: Tue 16 Jan 2024 13:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50875
IP address blocks: 185.86.244.0/22 maxlen: 22
185.86.244.0/24 maxlen: 24
185.86.245.0/24 maxlen: 24
185.86.246.0/24 maxlen: 24
185.86.247.0/24 maxlen: 24
185.251.66.0/24 maxlen: 24
185.251.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 06:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:86:16:fd:9b:19:ca:05:61:84:24:11:b0:88:75:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Jan 16 13:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18eef2e98a082fc4eb9ba17ddbc4a7a4a5e8c803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:34:54:b4:c4:1d:97:96:f3:c7:89:61:28:1f:
e9:08:38:5a:c9:ec:d3:1e:fa:2f:36:02:b8:7d:44:
4f:7b:d2:56:5a:32:18:b3:69:52:cc:1a:b9:e0:c7:
97:96:71:b4:f6:12:eb:46:0f:b8:75:f5:d3:ad:c9:
54:27:3f:40:32:2d:c9:1e:84:fe:30:6f:3a:48:8d:
22:cc:80:4f:5a:35:1e:6e:e2:06:70:86:79:5b:e5:
8a:02:5a:b8:83:f5:c9:44:4f:0c:b8:7f:4f:e9:ef:
4e:eb:94:dd:e3:4b:58:8b:96:76:98:0c:ec:0d:89:
43:38:77:53:e8:de:17:23:d1:84:ba:f0:08:2d:c3:
66:2e:57:f3:ce:57:90:61:f5:a9:e9:d1:80:ad:d1:
51:31:fc:30:00:a2:51:7c:c0:86:62:e0:5d:3a:c5:
d9:92:6f:70:9a:cd:39:05:dd:65:fb:fc:55:c5:dd:
2f:59:85:97:84:e4:e1:b3:06:10:17:d0:a0:bf:62:
ab:36:81:17:8f:0b:6f:99:cb:a5:a1:e3:eb:64:c7:
1f:66:ec:ab:45:b1:2a:b5:6b:00:68:79:02:b9:cc:
de:39:92:9e:b1:49:0c:6e:2f:2b:0c:83:59:c5:2d:
79:c7:cc:00:b5:06:5d:9e:52:04:f3:dd:89:7e:10:
30:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EE:F2:E9:8A:08:2F:C4:EB:9B:A1:7D:DB:C4:A7:A4:A5:E8:C8:03
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/GO7y6YoIL8Trm6F928SnpKXoyAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.244.0/22
185.251.66.0/23
Signature Algorithm: sha256WithRSAEncryption
63:29:e3:c7:9e:2c:50:ba:cf:e9:fe:e9:2d:75:37:29:5b:02:
c8:c5:54:b7:18:7c:b3:7b:d4:db:ff:40:60:63:e0:1e:8b:06:
63:ca:f4:9f:02:0e:65:c3:a9:b3:43:d3:e8:04:c0:e6:10:fe:
0e:63:69:6f:a4:0d:89:ec:9e:32:c7:ba:f4:08:ae:c7:df:16:
16:c7:93:b1:53:9d:af:30:d1:96:cd:7e:0e:08:09:2b:df:09:
39:94:fd:76:14:8a:4a:4a:db:5f:58:82:b8:24:55:45:b8:50:
37:e9:48:5e:f6:de:fa:12:1f:f2:89:57:b7:1e:8d:73:73:fb:
69:04:f5:97:fe:76:6c:53:24:06:b4:98:02:94:8c:3c:5c:8a:
5d:0a:a1:67:c2:96:fb:fd:c5:cf:df:fa:ff:e7:e9:ef:9b:16:
78:2b:8c:75:0c:4e:2d:fd:fd:4c:3f:06:f7:4d:35:62:03:96:
e1:05:ab:64:5f:e6:89:90:36:61:53:ee:65:8c:fc:91:af:e4:
29:b8:c8:ca:24:b6:e1:ab:c3:ae:16:1d:8e:9a:7b:bb:9a:f4:
c4:25:48:94:91:7f:c6:51:cf:b7:5a:9c:c5:c5:3d:ba:9b:4f:
89:d4:57:47:cc:8d:be:1a:d7:8d:a4:b2:da:cd:38:86:a4:e5:
0a:ec:e2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:13 2024 by rpki-client on console-ams.rpki-client.org