Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/Y_6l2JISt_nX5_LfOiDbUELT3bk.roa
File: Y_6l2JISt_nX5_LfOiDbUELT3bk.roa (raw, json)
Hash identifier: y0RQzIyJPPi3zPpZvbC4/7kQpa3KIIo6acbTXR+S798=
Subject key identifier: 63:FE:A5:D8:92:12:B7:F9:D7:E7:F2:DF:3A:20:DB:50:42:D3:DD:B9
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 018570FBCE6E05B3CCFCEE44B555C62FFB73
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/Y_6l2JISt_nX5_LfOiDbUELT3bk.roa
Signing time: Mon 02 Jan 2023 05:37:08 +0000
ROA not before: Mon 02 Jan 2023 05:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64415
IP address blocks: 185.100.249.0/24 maxlen: 24
185.100.248.0/22 maxlen: 22
185.100.248.0/24 maxlen: 24
185.100.250.0/24 maxlen: 24
2a00:9da0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:ce:6e:05:b3:cc:fc:ee:44:b5:55:c6:2f:fb:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Jan 2 05:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63fea5d89212b7f9d7e7f2df3a20db5042d3ddb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6f:16:94:91:cb:1e:e6:c6:92:ec:4b:e5:79:
c0:2b:37:2b:90:0b:ab:f1:08:19:60:e8:7c:16:da:
85:2a:f2:4f:1f:a2:7c:e4:5c:97:0d:d9:2d:9f:7c:
71:db:55:d2:04:5d:81:4c:45:2f:73:00:c3:c6:20:
c6:ef:c4:09:a4:2a:5b:81:84:02:68:cb:ca:59:e9:
59:eb:f7:e8:ef:85:cb:16:91:85:3c:2b:98:5b:69:
31:35:64:51:08:06:b4:2f:a7:22:e3:c3:ef:86:89:
51:8d:1d:f2:9c:71:3e:1d:c5:3c:fc:36:d5:b0:92:
4c:88:37:d5:74:a8:99:f2:2d:79:87:e8:f9:0a:74:
7b:ee:d1:29:0e:db:41:df:cb:3f:6a:9c:52:65:6e:
dc:c5:be:3c:2d:3b:c7:44:0a:53:b5:9b:7c:44:5a:
e9:80:88:25:f3:6f:cf:24:fd:51:91:3e:ed:ca:7d:
9a:70:80:be:c1:f0:71:02:aa:32:cc:81:65:54:4c:
b6:93:f6:a9:a7:ba:e1:ea:d2:e2:4e:96:22:b3:47:
e9:71:9a:b9:ee:ff:58:67:c1:0b:4e:63:1b:1e:23:
3c:32:71:10:a3:20:01:77:e3:af:0e:b3:a0:a4:c2:
9a:26:c1:b5:2f:52:f5:5b:1b:b9:0f:18:5f:e6:c3:
04:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FE:A5:D8:92:12:B7:F9:D7:E7:F2:DF:3A:20:DB:50:42:D3:DD:B9
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/Y_6l2JISt_nX5_LfOiDbUELT3bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.248.0/22
IPv6:
2a00:9da0::/32
Signature Algorithm: sha256WithRSAEncryption
c0:e9:6d:ef:fd:e6:73:e9:79:02:e8:1d:27:21:a0:cc:3e:b6:
76:3c:62:f7:35:78:cd:6c:6f:73:cf:fb:4c:7b:91:ba:94:e0:
72:bd:73:ba:09:e8:7c:5b:d6:85:ce:77:0d:69:66:76:99:f8:
5a:a2:44:11:9d:93:d2:91:3c:42:e9:69:83:df:03:1e:c3:14:
bb:27:a4:18:4a:d0:42:04:c3:eb:7b:cb:99:96:46:45:3e:f2:
07:33:4f:84:c7:8e:e4:38:96:a2:c2:64:98:3f:ba:46:e5:f9:
bc:28:6e:53:a8:b5:1f:62:a6:95:b9:fb:3b:44:85:f9:09:f8:
cd:e5:7f:9f:56:45:c3:a1:d5:99:36:98:e1:1f:0b:6b:f3:38:
aa:19:52:f5:1e:40:6d:e5:8c:f5:14:10:9b:a2:c9:c6:05:06:
30:9b:0e:ea:37:1d:91:8a:d2:cd:5f:5c:89:18:5b:5e:a7:1c:
69:00:12:c9:8e:35:cf:3a:4a:1f:ee:6e:3c:61:9e:49:40:18:
52:37:2d:8b:14:75:84:48:87:e4:a9:3e:20:47:f0:9a:ac:63:
89:b6:83:f6:b6:82:f2:dc:88:19:22:0c:db:57:72:9b:a5:36:
46:41:ee:25:c8:c5:ac:a8:86:16:b9:2b:72:ca:f0:ed:3f:35:
d6:4f:ce:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:05 2024 by rpki-client on console-fra.rpki-client.org