Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/icZIp2Z667pfecIkAsaSi-qQVxY.roa
File: icZIp2Z667pfecIkAsaSi-qQVxY.roa (raw, json)
Hash identifier: prQ1UABqWO/2+oIKgU8vJDnQO2f0M8P5G97a08rVteI=
Subject key identifier: 89:C6:48:A7:66:7A:EB:BA:5F:79:C2:24:02:C6:92:8B:EA:90:57:16
Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial: 01856F14A3B3CF149742053EE016727E8767
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/icZIp2Z667pfecIkAsaSi-qQVxY.roa
Signing time: Sun 01 Jan 2023 20:45:01 +0000
ROA not before: Sun 01 Jan 2023 20:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47692
IP address blocks: 185.205.80.0/24 maxlen: 24
185.205.81.0/24 maxlen: 24
185.205.82.0/24 maxlen: 24
185.205.83.0/24 maxlen: 24
185.46.186.0/24 maxlen: 24
185.46.184.0/24 maxlen: 24
185.46.185.0/24 maxlen: 24
185.46.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:a3:b3:cf:14:97:42:05:3e:e0:16:72:7e:87:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Validity
Not Before: Jan 1 20:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89c648a7667aebba5f79c22402c6928bea905716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:41:32:5e:e8:4a:2f:46:cf:12:1f:bc:1e:bf:
d1:65:6a:8b:4f:7a:6b:ff:a0:bc:35:81:12:18:06:
f5:91:46:fb:26:9c:34:19:3e:05:20:9c:82:31:c6:
09:41:00:fb:e9:76:26:a0:7f:a6:0e:83:d4:06:ea:
96:7a:90:e6:46:75:3b:b3:13:ca:71:d6:90:04:08:
45:e9:71:31:38:0c:d4:a8:30:10:f7:86:7e:8e:7c:
05:83:5e:ac:c9:80:bc:82:9d:35:3d:04:fe:f1:8c:
9c:59:a0:08:fe:bc:c1:32:b9:d7:6c:e2:2b:90:04:
80:c9:ff:08:ea:35:26:2c:a2:d6:da:e7:4c:bd:cb:
8a:87:c8:92:d5:69:b9:28:bc:4a:e6:ca:c2:f4:c2:
f8:b4:27:38:b0:c5:63:8a:c9:00:69:1f:6e:78:da:
8e:ad:84:0e:3f:26:5e:50:8c:52:d9:a9:c5:a8:a1:
82:7d:9d:ea:3d:51:fa:e2:dc:7c:db:65:e4:f0:34:
a3:af:88:07:2a:7c:ac:96:67:a5:a6:90:c5:24:45:
1a:fe:f5:e7:ac:96:48:6b:7f:25:3a:c4:03:9a:de:
2d:2c:d0:10:41:f1:69:2b:79:0e:84:e4:b3:f9:0f:
8e:09:e5:26:90:51:1f:ba:95:c9:eb:2d:64:99:f8:
cf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C6:48:A7:66:7A:EB:BA:5F:79:C2:24:02:C6:92:8B:EA:90:57:16
X509v3 Authority Key Identifier:
keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/icZIp2Z667pfecIkAsaSi-qQVxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.184.0/22
185.205.80.0/22
Signature Algorithm: sha256WithRSAEncryption
92:51:0a:82:7c:f8:e1:91:e9:bd:cc:8e:18:9f:32:e9:72:74:
eb:e7:44:f6:a6:05:bf:ec:7a:f0:a9:e6:86:b7:30:e4:18:37:
0e:e1:d9:0c:e6:46:6f:2d:de:e4:94:7c:84:9d:fa:9f:bf:26:
ed:db:a1:6b:98:49:d6:0a:5c:2f:6e:30:ff:fa:05:ab:14:e3:
7e:4c:66:bd:01:b1:ea:f4:ae:91:50:ce:bd:86:14:91:78:b0:
00:58:93:1a:42:02:33:e6:dd:70:09:32:56:5d:17:05:b9:85:
6c:14:9a:3e:43:61:20:4b:90:4f:8e:15:14:81:c7:8f:0a:be:
7e:3e:6c:3d:66:d0:11:88:28:52:9a:97:64:31:05:2d:cf:45:
5c:f4:4c:bb:33:c6:a0:c3:92:72:16:50:b7:20:84:3e:82:a9:
61:02:cd:6d:88:31:63:45:c3:c4:ed:16:a5:a5:da:80:70:9a:
c3:ea:49:69:43:38:ac:8f:4a:7d:17:e7:20:d3:bc:ab:59:67:
da:4e:21:47:5e:fc:d7:02:c2:5c:ca:96:71:2c:e2:e1:fd:ab:
f5:e3:88:ab:0b:86:7d:33:de:ae:cc:94:36:ab:09:1c:4e:cc:
27:49:3a:e7:7a:75:ac:ea:f3:16:8f:a5:70:31:47:28:0d:19:
d2:7e:0b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:25 2024 by rpki-client on console-ams.rpki-client.org