Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/1-1CxwbfJa8DaKxGhY8_AQyONuHU.roa
File: 1-1CxwbfJa8DaKxGhY8_AQyONuHU.roa (raw, json)
Hash identifier: JYxrW8Yp+KaL1SJ8SoBTvUnwFv5UYM+oY9FnRpcLPaM=
Subject key identifier: FB:50:B1:C1:B7:C9:6B:C0:DA:2B:11:A1:63:CF:C0:43:23:8D:B8:75
Certificate issuer: /CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Certificate serial: 018CC49238210AB271DE93FC62BAC8C3CC41
Authority key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/1-1CxwbfJa8DaKxGhY8_AQyONuHU.roa
Signing time: Mon 01 Jan 2024 10:29:26 +0000
ROA not before: Mon 01 Jan 2024 10:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205394
IP address blocks: 185.201.164.0/22 maxlen: 24
185.180.172.0/23 maxlen: 24
185.176.124.0/22 maxlen: 24
46.226.72.0/21 maxlen: 24
2a0a:c840::/29 maxlen: 32
2a00:5a00::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 May 2024 14:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:38:21:0a:b2:71:de:93:fc:62:ba:c8:c3:cc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Validity
Not Before: Jan 1 10:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb50b1c1b7c96bc0da2b11a163cfc043238db875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:e7:28:e2:18:16:bf:94:ec:04:04:5f:ea:
15:f9:34:e7:e0:3e:cd:e3:d9:4a:16:de:48:52:74:
c2:cd:10:ec:42:7c:9b:8a:99:de:23:c0:23:ef:3e:
0a:8a:50:1a:8c:d7:3e:a8:1e:74:b9:59:da:fb:5e:
d7:10:3c:aa:3b:f4:53:0d:95:10:d2:0e:e7:29:57:
26:c8:7f:93:a4:72:a4:6d:65:1e:f8:a9:73:49:4b:
88:13:1c:aa:3d:47:3e:c9:d7:5d:e2:ea:55:34:81:
b3:d9:e6:78:a1:8d:b3:b8:19:6c:e9:bb:ea:94:91:
72:2f:57:a4:a8:2d:42:25:2d:d5:72:41:cf:a9:27:
09:3d:b3:a2:7a:32:b1:92:ff:4a:10:ee:2a:fb:29:
03:e1:31:b1:a3:f3:23:55:79:d8:ff:65:a9:41:a6:
29:8d:d5:69:e5:53:60:f5:c5:60:e1:e4:20:c1:dd:
40:f4:b8:05:71:f4:6a:62:23:8d:3b:54:6b:04:b7:
68:94:39:5e:a0:ac:8f:96:9c:c5:ce:54:35:a6:d7:
25:85:c6:8c:d1:11:70:b4:f7:c4:c0:2d:56:99:f1:
76:55:48:f1:76:81:d5:7a:84:43:21:2a:40:6d:d5:
a1:21:31:f8:a5:ed:d7:48:cd:34:58:4d:65:7b:41:
89:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:50:B1:C1:B7:C9:6B:C0:DA:2B:11:A1:63:CF:C0:43:23:8D:B8:75
X509v3 Authority Key Identifier:
keyid:1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/1-1CxwbfJa8DaKxGhY8_AQyONuHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.72.0/21
185.176.124.0/22
185.180.172.0/23
185.201.164.0/22
IPv6:
2a00:5a00::/32
2a0a:c840::/29
Signature Algorithm: sha256WithRSAEncryption
2e:39:ae:bc:c6:11:ec:cc:74:fa:26:ce:dc:37:ba:18:f1:76:
99:49:1a:cf:70:40:9b:0f:31:9f:dd:86:c5:9b:e2:1c:bb:eb:
19:32:1b:f2:3b:d5:e2:a9:d0:31:42:b7:f1:a6:bf:19:cd:e8:
73:a7:d3:55:9d:cd:7c:4b:32:43:ee:f7:14:12:2e:84:5c:01:
2a:a3:dd:84:c4:f4:36:ac:e9:a1:50:fc:76:77:0e:c8:b5:63:
4c:3b:c0:68:f7:86:47:97:89:99:30:86:82:78:43:1a:7b:72:
93:8f:40:f8:50:50:90:2d:91:2e:1d:ab:e2:4b:45:5a:f2:bf:
28:23:57:a2:d2:3c:06:5e:b9:d5:f9:df:47:8c:9b:8a:73:54:
12:a0:41:dd:c3:0c:6f:46:1c:87:14:9b:b5:31:4d:82:6a:96:
d2:4a:ca:98:07:40:98:4b:6e:1c:48:d5:cf:e4:bf:20:d9:dc:
8c:d3:70:d3:c7:77:95:69:5d:06:c3:40:da:2f:46:17:a5:28:
45:dd:5d:4c:86:d3:d3:12:97:f4:01:2a:40:cc:58:f2:9b:1f:
33:ee:91:3a:fb:e8:a7:08:75:9a:78:21:32:0c:29:18:4c:15:
f2:0a:5b:f4:6a:bd:e4:1f:6b:0a:35:c6:90:4b:09:88:91:ad:
c0:a7:94:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 19:20:38 2024 by rpki-client on console-ams.rpki-client.org