Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/2qfJDorjn85-eDU_kLaVRqeMW2Q.roa
File: 2qfJDorjn85-eDU_kLaVRqeMW2Q.roa (raw, json)
Hash identifier: fXk3JtCNbSa8gpcond/95bXDBqYdVBAqcYAcx0Hu5hc=
Subject key identifier: DA:A7:C9:0E:8A:E3:9F:CE:7E:78:35:3F:90:B6:95:46:A7:8C:5B:64
Certificate issuer: /CN=4812ff485ffd794a6948078afe4e076afe617635
Certificate serial: 018CC26D0A01391A80DE56CD36C01025B5A2
Authority key identifier: 48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/2qfJDorjn85-eDU_kLaVRqeMW2Q.roa
Signing time: Mon 01 Jan 2024 00:29:35 +0000
ROA not before: Mon 01 Jan 2024 00:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3242
IP address blocks: 185.149.191.0/24 maxlen: 24
185.149.188.0/24 maxlen: 24
185.149.189.0/24 maxlen: 24
185.149.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 11:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0a:01:39:1a:80:de:56:cd:36:c0:10:25:b5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4812ff485ffd794a6948078afe4e076afe617635
Validity
Not Before: Jan 1 00:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=daa7c90e8ae39fce7e78353f90b69546a78c5b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:e5:cf:ed:1c:60:e2:3a:0b:32:9f:ed:d7:
b9:e2:62:be:90:ff:0b:86:4f:fc:24:62:9f:bd:09:
9b:e0:cc:00:c0:18:30:cc:32:4d:4e:19:b7:e7:a5:
51:76:fb:3e:cf:24:38:9d:65:6f:32:bc:75:1f:88:
aa:4f:5b:cf:78:5e:3b:11:93:6a:1c:b3:aa:fe:94:
75:de:60:50:27:64:41:4d:2c:96:a3:be:37:a2:47:
73:dd:6b:75:3c:60:ec:21:2a:0e:98:2b:bc:fc:63:
06:2e:d4:db:a6:cf:b3:98:c2:b3:0a:b9:66:6e:39:
eb:54:48:84:6d:05:4c:89:5a:23:8d:09:c7:2c:ac:
f1:a2:a0:ab:f8:72:c6:5d:4a:f2:70:88:a9:94:e3:
68:d9:16:09:3d:ac:aa:13:d3:1a:b9:db:56:c4:64:
14:fc:d1:c0:66:42:a1:dc:d9:4a:be:04:6f:26:0e:
57:96:da:fe:5f:70:fc:8d:d5:b9:cf:eb:9f:44:33:
d1:01:60:c7:49:f2:b2:77:ab:81:16:cb:e9:ac:19:
b8:75:c5:05:30:cb:62:41:32:d1:37:b1:09:aa:3a:
a0:48:b5:10:99:d2:9e:42:77:5b:6e:14:7b:df:e2:
c3:61:6c:b4:4d:72:d2:be:af:31:c5:c1:d6:60:fa:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A7:C9:0E:8A:E3:9F:CE:7E:78:35:3F:90:B6:95:46:A7:8C:5B:64
X509v3 Authority Key Identifier:
keyid:48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/2qfJDorjn85-eDU_kLaVRqeMW2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.188.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:57:9c:99:ae:67:5b:80:42:21:c3:b5:07:cb:e6:1d:c9:fc:
ea:db:6e:8d:b9:ac:7a:66:47:3d:40:f1:1c:13:65:ad:93:fb:
f5:38:1a:5e:aa:d4:66:0b:ae:b0:6f:fb:ed:a8:11:31:16:a4:
0c:9e:69:03:58:5c:05:35:5a:f8:70:09:fc:e0:10:88:50:f7:
14:13:22:32:df:39:e3:db:55:0e:f0:cb:a4:81:17:f4:f7:52:
6a:34:2a:db:f4:07:74:48:ff:c7:3c:e2:75:d4:96:e6:17:c3:
56:f0:b3:cc:34:bf:3b:c6:03:dd:b7:8a:df:23:04:d6:e6:2c:
b2:f6:fa:b5:46:2d:ca:68:35:37:e1:a8:9d:31:6d:f7:0c:49:
4f:4d:3e:cb:7c:c6:55:2a:47:78:48:b8:c2:3f:9d:30:37:0d:
27:ab:08:ff:5e:b8:b0:9e:ee:76:90:4f:de:da:36:6d:f3:d8:
59:84:c7:c5:d4:e3:e5:3a:45:93:a2:14:4d:72:b6:e3:ee:8d:
ec:01:7d:9b:f5:fa:6a:eb:d5:ed:23:1b:ee:fc:34:3b:17:42:
8a:84:fc:97:a1:97:95:0b:c4:6f:16:7a:43:a5:07:60:db:f0:
2f:14:5f:76:d7:4d:c1:68:03:97:99:68:11:f7:25:ae:87:e8:
fa:ba:94:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 14:06:38 2024 by rpki-client on console-fra.rpki-client.org