Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/K0g8n4rS2aRA6EgWJEZhXNNH1eE.roa
File: K0g8n4rS2aRA6EgWJEZhXNNH1eE.roa (raw, json)
Hash identifier: jADAV6I1Q0buK7sc2t69Q6ZdbpdH1TRDZjMxCT407nE=
Subject key identifier: 2B:48:3C:9F:8A:D2:D9:A4:40:E8:48:16:24:46:61:5C:D3:47:D5:E1
Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial: 01856E2FB98F95DC02C6DAD983D415CEF374
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/K0g8n4rS2aRA6EgWJEZhXNNH1eE.roa
Signing time: Sun 01 Jan 2023 16:34:59 +0000
ROA not before: Sun 01 Jan 2023 16:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50533
IP address blocks: 145.14.224.0/23 maxlen: 23
185.160.248.0/22 maxlen: 22
145.14.224.0/20 maxlen: 20
2a00:17f1::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 09 Jan 2023 11:07:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:b9:8f:95:dc:02:c6:da:d9:83:d4:15:ce:f3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
Validity
Not Before: Jan 1 16:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b483c9f8ad2d9a440e848162446615cd347d5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:62:b2:78:ee:b0:87:79:f6:fe:59:bd:1d:60:
af:1e:e9:db:92:a7:a8:df:c4:16:01:ac:a0:07:e8:
52:a3:22:ed:26:25:36:98:0d:b4:ed:a1:cb:8a:a2:
a1:e5:23:70:2f:87:e5:97:b1:77:5e:3e:8f:ec:c8:
75:e2:62:b5:0d:9c:ea:3e:4e:34:48:ac:5b:c4:6f:
27:35:63:1f:bc:0d:b7:17:01:ba:d8:cd:f5:36:e9:
68:6f:c0:7f:f2:37:c6:67:5e:23:12:3b:af:e2:70:
3e:f4:b7:7f:0c:c7:28:46:47:7a:60:52:16:a5:a2:
d3:71:33:8e:ac:c3:4f:c0:e4:8e:d4:d0:92:63:53:
d4:3e:ac:a9:f7:08:fb:9f:08:dc:56:25:27:39:57:
3c:3d:22:24:a8:b0:93:32:71:8f:aa:a8:cf:c1:db:
69:d5:27:3f:14:44:54:dc:e0:1a:5a:88:73:26:85:
4d:43:22:9e:ff:f1:20:ec:c2:08:58:7b:43:90:89:
29:c6:75:36:55:2d:99:6f:84:d4:1c:9f:1e:0b:56:
69:c5:e7:02:db:e4:7f:af:74:3f:f6:b2:23:93:ae:
db:73:cd:39:14:51:78:a8:5d:58:69:db:5b:24:8f:
6a:82:5b:ff:58:0c:ef:ad:1e:49:60:71:81:90:0d:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:48:3C:9F:8A:D2:D9:A4:40:E8:48:16:24:46:61:5C:D3:47:D5:E1
X509v3 Authority Key Identifier:
keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/K0g8n4rS2aRA6EgWJEZhXNNH1eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.14.224.0/20
185.160.248.0/22
IPv6:
2a00:17f1::/32
Signature Algorithm: sha256WithRSAEncryption
8e:c7:cd:1f:7e:aa:b6:38:2f:c8:1b:98:b4:1d:2b:ca:2c:c1:
3b:75:16:62:97:0e:ba:4e:51:68:f1:78:90:b9:42:12:40:e8:
22:62:9f:7c:0d:98:34:d4:0c:81:1a:28:3b:d2:9b:d5:52:5b:
dc:27:bd:58:5b:7d:d8:28:ea:db:23:18:93:c9:ad:2a:17:17:
77:33:53:32:24:e6:ec:93:75:2b:48:83:c0:c5:e2:5a:00:44:
65:52:cf:f1:a8:fd:9e:d4:2a:ce:5b:b8:e7:0b:a4:ba:d1:6d:
4b:c9:6b:48:26:de:60:16:05:05:aa:92:58:25:dc:27:50:63:
54:0d:e3:d0:53:6e:4c:ca:73:b8:db:2b:5a:0a:84:83:d8:4f:
71:21:88:04:b2:42:69:86:08:07:e9:1d:ca:f5:ad:a2:5f:1d:
51:5c:88:86:88:0c:df:b0:df:29:e2:9f:74:cd:0d:8f:53:d5:
d9:b1:fc:14:22:58:f0:62:80:05:a0:c4:99:2d:db:a4:df:a0:
98:61:56:ab:ec:c8:97:a0:cb:16:3b:e8:db:de:c6:54:d8:11:
f5:d5:68:8d:f2:b3:4a:dc:43:91:12:76:55:1d:68:08:2a:34:
2c:6b:76:79:b1:e5:13:7f:de:81:d9:c0:28:aa:37:f5:5e:81:
1e:27:c8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:45 2024 by rpki-client on console-ams.rpki-client.org