Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/fsamnMUuxJF_xTuhSm_qVtxOi8Y.roa
File: fsamnMUuxJF_xTuhSm_qVtxOi8Y.roa (raw, json)
Hash identifier: 3HSZ7SCSd/5EDy2GVQZy4K5xTFh9PrNvpAWfkNqc/Js=
Subject key identifier: 7E:C6:A6:9C:C5:2E:C4:91:7F:C5:3B:A1:4A:6F:EA:56:DC:4E:8B:C6
Certificate issuer: /CN=192fc85b01f21a0d685c03001df47ac460937bf1
Certificate serial: 018B81915CAE13EEFC5D67AAF9A5EF66B046
Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/fsamnMUuxJF_xTuhSm_qVtxOi8Y.roa
Signing time: Mon 30 Oct 2023 17:11:09 +0000
ROA not before: Mon 30 Oct 2023 17:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12812
IP address blocks: 185.190.29.0/24 maxlen: 24
185.190.28.0/22 maxlen: 24
185.190.28.0/24 maxlen: 24
193.188.131.0/24 maxlen: 24
193.188.128.0/24 maxlen: 24
193.188.128.0/22 maxlen: 24
193.188.129.0/24 maxlen: 24
193.188.130.0/24 maxlen: 24
2a02:f700::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:91:5c:ae:13:ee:fc:5d:67:aa:f9:a5:ef:66:b0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1
Validity
Not Before: Oct 30 17:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ec6a69cc52ec4917fc53ba14a6fea56dc4e8bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d7:13:0b:13:97:67:9c:a1:f3:16:a5:94:8d:
28:5f:f0:31:ea:49:b2:3f:80:ba:b2:cc:34:6c:de:
f7:02:55:90:6d:69:56:fe:01:f3:f5:9f:3d:47:b3:
b4:04:68:a0:bd:a8:fd:fb:8d:5d:40:3c:23:40:45:
4d:ef:68:e4:24:41:45:d5:ab:83:27:cb:48:3f:dd:
ef:52:f7:50:34:67:e6:71:32:e9:ab:8c:b7:6c:a3:
05:2f:5d:ac:aa:22:f6:db:b1:42:58:df:59:7e:f8:
ad:91:61:53:0a:c5:54:c4:5c:10:da:38:b6:fd:a9:
0d:17:74:9e:99:18:3e:e6:da:b7:3f:44:0f:8d:5e:
bb:ee:08:e6:be:62:bf:70:bf:f8:e6:d7:6c:ee:e0:
0e:aa:39:aa:85:74:90:91:84:3e:08:ff:c3:4f:21:
2c:37:7e:39:e9:4e:a7:78:09:1b:e8:52:a6:78:93:
10:69:4e:92:23:01:d8:d4:2b:37:8c:ec:14:66:12:
08:35:b1:6d:e7:15:f0:c8:2a:5f:44:dd:a3:74:0f:
3c:5f:63:24:d6:66:5c:f0:0c:c4:54:a0:9d:78:4d:
e8:97:a3:37:8c:dd:9b:c1:af:cb:54:08:6b:b2:2b:
d4:04:94:af:ef:38:f6:7c:b8:12:2f:f5:40:37:6f:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C6:A6:9C:C5:2E:C4:91:7F:C5:3B:A1:4A:6F:EA:56:DC:4E:8B:C6
X509v3 Authority Key Identifier:
keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/fsamnMUuxJF_xTuhSm_qVtxOi8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.28.0/22
193.188.128.0/22
IPv6:
2a02:f700::/29
Signature Algorithm: sha256WithRSAEncryption
49:f0:ae:b9:5d:d2:bc:27:c7:57:b0:ef:a6:0c:ec:63:d8:66:
a7:61:59:af:48:02:a2:6e:24:a7:ec:86:f7:71:ae:8a:87:5a:
a6:5c:e9:3e:91:20:23:58:8c:df:e1:e3:8c:8f:53:0f:ce:a7:
b4:7b:f2:ba:ad:a3:24:be:a5:6a:5b:25:53:c6:a6:19:6a:de:
5c:ff:c7:2b:02:fa:f1:f7:29:fe:33:90:c5:66:55:35:d5:28:
9f:12:40:d2:ef:b9:7c:01:3e:53:6f:e2:3b:2d:9b:1f:80:cb:
c0:a6:3d:43:ca:a6:1c:7a:7b:b7:35:ff:b8:4f:63:47:55:9c:
91:87:c3:ae:ec:8c:36:d7:9f:5d:65:6d:aa:e0:58:3a:d3:b9:
72:fb:36:8f:ed:07:c5:df:bf:56:19:6c:bb:c7:9c:0a:55:0c:
b5:47:88:76:68:67:1d:2f:80:2a:a4:81:7a:b2:90:14:bb:37:
72:9b:78:1b:e6:b9:cb:1a:a8:5d:8a:47:da:ad:34:a0:1a:41:
76:c5:55:e3:3c:4f:99:47:a8:c4:30:f8:06:99:4f:3a:b5:17:
93:61:0d:75:f2:a9:98:1b:ac:e8:2b:ac:99:0b:ab:e2:70:5c:
bc:87:f7:95:55:f6:f7:c8:c2:6f:7d:ba:fa:16:b7:ca:8c:f8:
9f:3d:e9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:10 2024 by rpki-client on console-ams.rpki-client.org