Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/f5G7KXAHGyhEXgz-Tutrq-2CRe8.roa
File: f5G7KXAHGyhEXgz-Tutrq-2CRe8.roa (raw, json)
Hash identifier: MVJ3VB7HWRAPaHLh9Kf5SlAV+ENTWgtawU9ZPaZzlC4=
Subject key identifier: 7F:91:BB:29:70:07:1B:28:44:5E:0C:FE:4E:EB:6B:AB:ED:82:45:EF
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 0185707974260927313A5C1ACB9D2EDBAAE5
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/f5G7KXAHGyhEXgz-Tutrq-2CRe8.roa
Signing time: Mon 02 Jan 2023 03:14:45 +0000
ROA not before: Mon 02 Jan 2023 03:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60341
IP address blocks: 185.50.92.0/22 maxlen: 22
185.47.20.0/22 maxlen: 22
185.45.116.0/22 maxlen: 22
185.32.232.0/22 maxlen: 22
2a00:c660::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:74:26:09:27:31:3a:5c:1a:cb:9d:2e:db:aa:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Jan 2 03:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f91bb2970071b28445e0cfe4eeb6babed8245ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:06:25:ff:d8:28:50:71:90:9c:0f:3b:02:11:
ab:12:b4:c0:fa:b9:db:2b:47:4e:06:e3:fe:99:08:
42:dd:77:0e:1a:33:94:14:1c:2e:2a:c4:ac:16:e3:
f8:ab:c3:1d:8c:46:5f:d0:35:37:1c:3f:ce:d5:59:
e1:a1:8e:59:9b:22:8f:ac:89:8f:47:2d:a4:ec:ea:
16:fc:b7:48:ac:48:91:b6:66:1b:e9:bf:c6:bd:78:
44:34:09:3d:99:2a:ac:46:9f:b1:5d:5d:18:67:62:
49:de:16:c7:09:ca:0a:cd:20:06:3f:c1:03:e6:3f:
b3:09:9e:d0:88:7e:a9:cb:84:ea:7e:c5:d5:86:f5:
18:94:3e:03:5a:77:0b:c0:5f:af:8f:04:93:72:77:
7e:23:61:36:48:d5:cb:fc:fa:da:b9:74:e7:bc:e9:
4a:e6:ae:98:74:95:5c:77:e3:28:e4:87:1c:a6:c6:
15:cc:93:67:42:a7:6c:e9:c0:74:67:36:1f:1c:dd:
9c:3a:16:e5:f7:0b:8f:e3:31:1d:9a:68:1c:61:b6:
3a:3f:1f:24:62:18:9f:e8:5b:5a:3f:48:bd:ec:ef:
8d:29:18:0c:f6:62:43:2f:bd:88:34:1b:01:ca:18:
ae:76:27:b5:45:b2:25:47:72:d1:91:ed:06:5e:cd:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:91:BB:29:70:07:1B:28:44:5E:0C:FE:4E:EB:6B:AB:ED:82:45:EF
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/f5G7KXAHGyhEXgz-Tutrq-2CRe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.232.0/22
185.45.116.0/22
185.47.20.0/22
185.50.92.0/22
IPv6:
2a00:c660::/32
Signature Algorithm: sha256WithRSAEncryption
09:00:6a:dc:f8:54:12:15:07:9b:e4:2a:8d:4e:c0:d2:7b:e1:
85:da:2f:66:16:c3:9e:e3:1a:0a:9b:c0:b9:f0:d9:81:2d:62:
74:ee:be:d6:44:65:ff:95:21:ff:f2:3e:42:06:c5:21:ad:dc:
de:e7:ce:ee:17:25:e3:c3:61:ba:60:2b:de:fe:03:66:95:c8:
b6:6c:46:0a:18:62:ac:e5:5e:77:5f:b6:9a:bb:ee:09:4f:74:
38:2f:7d:88:28:7a:4f:45:ae:c0:1c:89:73:0a:87:46:64:3e:
f4:61:13:c0:26:90:ef:b4:b7:25:80:a9:b4:ec:19:21:e1:5b:
74:52:19:84:52:27:26:02:01:27:0d:10:1b:53:dd:3f:3f:27:
f1:84:7c:d0:ba:5c:79:93:6b:3f:6e:64:c0:da:52:24:f2:4f:
52:b1:ab:a7:ca:9b:1b:12:a7:07:fc:e6:be:52:73:1e:1b:03:
bf:23:d5:89:75:4b:8f:2a:5c:6c:1e:56:47:6d:05:19:a0:46:
b0:a1:39:7b:c7:18:88:66:5b:47:86:ed:10:30:f2:54:16:20:
1a:71:b6:55:6e:68:44:ed:d2:fd:06:8a:61:00:ae:2a:d2:77:
31:04:47:cb:77:1a:3f:39:1a:a4:43:69:f7:46:89:83:55:d5:
ae:75:d4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:49 2024 by rpki-client on console-fra.rpki-client.org