Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/76jvzNqohaqbkM8Soi9HzBILPZ0.roa
File: 76jvzNqohaqbkM8Soi9HzBILPZ0.roa (raw, json)
Hash identifier: 6gE4wjmc9yZAOFpwvgKfkhwPVj4Sjcz+kAqjwY5SeUI=
Subject key identifier: EF:A8:EF:CC:DA:A8:85:AA:9B:90:CF:12:A2:2F:47:CC:12:0B:3D:9D
Certificate issuer: /CN=46ffa79440c517eddbaced3aa60e5fbcbdc6502e
Certificate serial: 018A6F86F122EC2479C92CAEF13E71569722
Authority key identifier: 46:FF:A7:94:40:C5:17:ED:DB:AC:ED:3A:A6:0E:5F:BC:BD:C6:50:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rv-nlEDFF-3brO06pg5fvL3GUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/76jvzNqohaqbkM8Soi9HzBILPZ0.roa
Signing time: Thu 07 Sep 2023 12:03:49 +0000
ROA not before: Thu 07 Sep 2023 12:03:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62248
IP address blocks: 185.73.132.0/23 maxlen: 24
185.73.135.0/24 maxlen: 24
185.73.134.0/24 maxlen: 24
2a05:4280::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:86:f1:22:ec:24:79:c9:2c:ae:f1:3e:71:56:97:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ffa79440c517eddbaced3aa60e5fbcbdc6502e
Validity
Not Before: Sep 7 12:03:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efa8efccdaa885aa9b90cf12a22f47cc120b3d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b5:4d:15:e1:1c:b7:ba:a6:5f:a6:a0:5b:af:
53:17:73:96:aa:00:d9:83:f8:99:d2:67:01:fc:d9:
e8:cc:d8:73:18:4f:4f:0c:95:0f:1a:17:a7:ce:d8:
2f:02:a0:1d:ac:fa:a1:31:e6:60:7e:7e:15:1f:0c:
10:f6:ed:f4:bf:1b:2c:5d:48:91:f9:8d:b9:c2:cc:
fa:4c:e1:af:fd:0f:11:41:5d:1c:a9:76:02:d5:e0:
2e:86:bd:35:38:77:92:bf:47:7b:bc:81:e9:7d:f4:
b9:6c:c1:1e:1c:bf:c2:38:f5:75:08:0c:00:f0:e7:
7e:db:8b:77:0e:09:ef:61:00:14:b6:a2:5f:de:60:
04:a4:2c:c2:04:1c:ee:47:f9:6f:8b:03:1e:35:9d:
15:12:e9:b5:23:5c:01:c4:e8:e7:b8:c2:6e:e2:31:
5f:3f:15:34:13:a8:7b:b8:17:b6:6f:eb:6b:b9:70:
8c:83:e5:ea:20:6c:52:ec:7e:c2:6b:11:b0:4e:61:
33:75:3d:e7:61:46:ca:d2:ee:d9:68:ad:19:77:4a:
84:e0:9f:d1:e7:2e:22:41:c2:de:b1:3d:86:2e:52:
6c:8f:18:d2:21:49:dc:c4:b9:f2:2b:b2:c3:f5:dc:
f7:51:f8:83:b2:fe:4f:fd:72:3a:30:ff:be:1d:e5:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A8:EF:CC:DA:A8:85:AA:9B:90:CF:12:A2:2F:47:CC:12:0B:3D:9D
X509v3 Authority Key Identifier:
keyid:46:FF:A7:94:40:C5:17:ED:DB:AC:ED:3A:A6:0E:5F:BC:BD:C6:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv-nlEDFF-3brO06pg5fvL3GUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/76jvzNqohaqbkM8Soi9HzBILPZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/Rv-nlEDFF-3brO06pg5fvL3GUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.132.0/22
IPv6:
2a05:4280::/29
Signature Algorithm: sha256WithRSAEncryption
8f:ba:3c:6b:e3:34:63:98:2f:fd:f7:07:1f:38:80:93:b0:69:
97:3e:ed:da:4b:6b:0b:92:59:9e:69:2f:60:47:cd:d2:a5:6e:
02:44:ea:d7:aa:05:9c:ba:27:b1:24:f3:7c:a3:85:4e:7c:b3:
3e:46:5f:49:b5:e2:d1:98:bb:21:b9:6f:4a:9b:c3:38:4c:d3:
7f:4c:70:42:f1:f2:58:81:8a:fa:aa:de:a9:79:07:9c:f9:ac:
c4:3b:77:17:83:8b:11:0f:1e:38:a8:7f:05:3e:e1:94:b7:c7:
d3:f9:b6:23:44:45:24:a2:5e:e7:6b:97:62:be:a6:91:d8:8a:
b2:e0:63:ef:60:dd:5b:47:c8:1c:5c:d9:64:f6:cd:98:9b:14:
fc:db:91:d6:31:46:07:29:f1:c4:8c:e3:ad:5f:df:b1:a2:49:
13:8b:8e:5c:27:75:c3:d1:c6:5c:a7:d2:99:48:0a:8d:8a:f8:
5f:ce:c1:da:2c:37:da:b3:2b:6b:87:36:fc:4d:71:ec:c0:f0:
47:0f:93:b2:0e:4e:14:46:ce:01:16:d2:3b:8b:d9:60:53:8d:
1d:dc:6a:b8:7c:61:00:a7:69:91:af:3d:0e:4a:84:43:24:bf:
77:5a:56:6f:32:5b:ab:d2:d5:18:9e:10:83:72:6d:08:6b:1f:
31:03:09:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:41 2024 by rpki-client on console-ams.rpki-client.org