Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/TMKUfKc3JjhamAp0tpUcHOgP_kk.roa
File: TMKUfKc3JjhamAp0tpUcHOgP_kk.roa (raw, json)
Hash identifier: Pvx7s9DK22duSZDwLy6YLvhhZBfdDTVKfMmyGDscEbQ=
Subject key identifier: 4C:C2:94:7C:A7:37:26:38:5A:98:0A:74:B6:95:1C:1C:E8:0F:FE:49
Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial: 018A1C812436935FD3A93C69DA09E05F2392
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/TMKUfKc3JjhamAp0tpUcHOgP_kk.roa
Signing time: Tue 22 Aug 2023 09:08:59 +0000
ROA not before: Tue 22 Aug 2023 09:08:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34465
IP address blocks: 185.188.28.0/24 maxlen: 24
2a12:8fc6:ace2::/48 maxlen: 48
2a12:8fc6:cd02::/48 maxlen: 48
2a12:8fc6:bdee::/48 maxlen: 48
2a12:8fc6:efdf::/48 maxlen: 48
2a12:8fc6:cd04::/48 maxlen: 48
2a12:8fc6:ae44::/48 maxlen: 48
2a12:8fc6:bab0::/48 maxlen: 48
2a12:8fc6:cae1::/48 maxlen: 48
2a12:8fc6:cd01::/48 maxlen: 48
2a12:8fc6:ace1::/48 maxlen: 48
2a12:8fc6:ee01::/48 maxlen: 48
2a12:8fc6:be01::/48 maxlen: 48
2a12:8fc6:ace3::/48 maxlen: 48
2a12:8fc6:eaca::/48 maxlen: 48
2a12:8fc6:dbaa::/48 maxlen: 48
2a12:8fc6::/32 maxlen: 32
2a12:8fc6:dae0::/48 maxlen: 48
2a12:8fc6:ca00::/48 maxlen: 48
2a12:8fc6:cd00::/48 maxlen: 48
2a12:8fc6:cc00::/48 maxlen: 48
2a12:8fc6:aa00::/48 maxlen: 48
2a12:8fc6:faa0::/48 maxlen: 48
2a12:8fc6:ae00::/48 maxlen: 48
2a12:8fc6:caa0::/48 maxlen: 48
2a12:8fc6:db00::/48 maxlen: 48
2a12:8fc6:fae0::/48 maxlen: 48
2a12:8fc6:ce00::/48 maxlen: 48
2a12:8fc6:daa0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 01 Dec 2023 11:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:81:24:36:93:5f:d3:a9:3c:69:da:09:e0:5f:23:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Validity
Not Before: Aug 22 09:08:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cc2947ca73726385a980a74b6951c1ce80ffe49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:98:50:ae:2e:09:42:07:a3:c6:c2:a8:b0:0b:
91:89:51:e6:cc:56:1b:0f:5b:16:41:68:c7:54:4b:
74:7f:0a:c6:df:3c:24:2c:30:3c:62:e5:1a:b8:8b:
12:e2:af:bc:1e:64:1f:ed:cc:34:0b:9b:e2:3a:06:
f2:69:5e:f8:cd:29:68:cc:35:54:94:e7:69:93:34:
0c:69:46:8b:21:8f:4d:e9:d4:ed:d8:fe:31:93:f6:
3d:04:6c:a7:cc:d9:e0:ec:1a:ba:e7:8f:4d:fc:60:
c0:00:2a:11:ae:34:06:e1:cc:5a:24:18:74:b9:af:
fe:89:04:91:08:30:c6:e0:9b:3c:86:3e:67:91:52:
0c:97:e3:3b:19:39:4c:82:05:7e:ad:02:e1:47:52:
6d:d2:8a:6a:23:2d:8a:05:2a:62:73:fa:0d:25:75:
fc:c9:78:a4:7d:da:d8:1f:c3:72:44:43:71:92:4a:
1d:8f:e4:0e:96:84:ab:d0:6b:a6:8b:b8:e4:f2:c7:
69:a8:30:a4:61:07:b4:84:67:19:a8:9b:3e:21:4b:
18:0e:c4:9e:8c:c7:1a:d1:e9:c2:0b:52:53:43:80:
53:16:17:f3:85:5c:eb:0c:23:38:20:b9:7e:dd:fc:
8c:cb:69:ef:b1:da:a8:ad:f6:0a:5b:ee:d9:9e:49:
d3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C2:94:7C:A7:37:26:38:5A:98:0A:74:B6:95:1C:1C:E8:0F:FE:49
X509v3 Authority Key Identifier:
keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/TMKUfKc3JjhamAp0tpUcHOgP_kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.28.0/24
IPv6:
2a12:8fc6::/32
Signature Algorithm: sha256WithRSAEncryption
5b:aa:7d:d8:d7:84:74:e7:e5:3c:33:b7:ad:48:54:47:28:49:
54:ed:41:5a:a6:c5:22:3c:25:1f:84:e0:53:5b:3e:b4:e8:0b:
ea:a2:1f:06:b4:99:ec:dc:6a:bf:29:9f:e5:4e:67:c3:13:c6:
a3:3d:58:90:b6:ce:ef:61:19:c2:62:af:c4:f6:23:2a:b3:fa:
d2:5e:70:59:b9:e3:a2:53:e5:26:6a:eb:d3:9e:ee:3b:85:dc:
54:20:a0:2b:b9:53:e4:22:91:1a:d3:be:fd:b5:84:f2:59:5e:
8b:ac:f0:a1:5b:87:a9:b2:85:a4:bf:03:b0:32:dc:8c:d5:be:
0f:79:c4:30:95:58:5b:34:aa:eb:1a:e4:ee:a4:18:8f:d7:59:
ed:e6:2f:7f:67:76:11:0d:af:63:a3:72:74:77:3d:75:a7:46:
75:53:79:9e:95:82:b0:3f:42:91:11:e0:63:03:49:ae:38:76:
e1:d6:b6:f2:5b:c6:22:76:a5:37:b3:0a:a8:0d:61:22:71:8e:
28:97:40:a5:69:41:c9:d3:3d:39:02:91:16:ce:13:8b:10:2d:
6f:88:b1:5e:e3:92:5c:2b:ec:9b:ee:de:bc:4d:0f:11:16:27:
73:69:06:fe:af:73:e3:a6:af:8c:da:bb:22:cc:09:fd:28:40:
ff:07:b4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:13 2024 by rpki-client on console-fra.rpki-client.org