Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/4SBC1JdWh0ydVA4pd-Z-PZ-gBqw.roa
File: 4SBC1JdWh0ydVA4pd-Z-PZ-gBqw.roa (raw, json)
Hash identifier: 4M8qlXPyZ+iwzxGSlDbLiGvaTOtyIg9Ii7fSOMG078o=
Subject key identifier: E1:20:42:D4:97:56:87:4C:9D:54:0E:29:77:E6:7E:3D:9F:A0:06:AC
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 0190765C4C56AEE9F63B0EC417DD71522AA6
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/4SBC1JdWh0ydVA4pd-Z-PZ-gBqw.roa
Signing time: Wed 03 Jul 2024 02:11:18 +0000
ROA not before: Wed 03 Jul 2024 02:11:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54203
IP address blocks: 185.147.212.0/24 maxlen: 24
185.147.213.0/24 maxlen: 24
185.147.215.0/24 maxlen: 24
2a03:efc0:200::/40 maxlen: 40
2a03:efc0:500::/40 maxlen: 40
2a03:efc0:700::/40 maxlen: 40
2a03:efc0:1100::/40 maxlen: 40
2a03:efc0:1300::/40 maxlen: 40
2a03:efc0:1900::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 03 Jul 2024 23:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:76:5c:4c:56:ae:e9:f6:3b:0e:c4:17:dd:71:52:2a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Jul 3 02:11:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e12042d49756874c9d540e2977e67e3d9fa006ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:61:4a:8c:80:52:c3:91:6b:e3:91:68:c7:89:
9d:60:75:fa:61:7a:a7:07:7f:02:63:85:5e:30:44:
88:6b:23:18:f1:fb:cd:6b:03:be:31:d0:40:d7:78:
10:69:7f:86:31:25:b8:a0:b4:9d:48:a5:0d:51:67:
26:34:51:2e:5c:12:71:40:07:33:39:39:85:26:a5:
c7:e6:2e:21:bd:fb:a3:e0:b0:cf:67:98:40:54:af:
1b:7b:e1:48:90:0e:9c:d9:b7:34:2d:92:fc:10:f0:
be:5c:31:a5:1b:f8:42:db:4c:b7:b7:e1:55:4b:7c:
15:97:e5:46:ba:81:64:60:28:f5:42:70:55:56:dd:
dd:83:ba:6c:ca:e4:b0:c8:78:f3:3b:0c:07:2f:87:
20:4e:ac:0d:3f:eb:af:91:75:74:da:a3:79:03:71:
8d:2d:65:cf:2d:7a:87:ab:5d:b4:3a:ad:8d:18:fb:
04:ff:20:b6:0c:85:b6:6f:9b:01:b4:70:d2:1b:ca:
ca:7d:d0:f7:d8:18:04:03:b2:97:b1:6c:5f:88:4a:
1a:6b:a3:5b:60:ee:3e:d9:04:ac:92:3d:00:8c:80:
25:a1:a0:18:a5:2a:01:e8:bf:99:c7:c5:67:fd:f7:
3e:26:60:9c:11:a9:ea:ab:27:68:4f:95:e8:d3:70:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:20:42:D4:97:56:87:4C:9D:54:0E:29:77:E6:7E:3D:9F:A0:06:AC
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/4SBC1JdWh0ydVA4pd-Z-PZ-gBqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.212.0/23
185.147.215.0/24
IPv6:
2a03:efc0:200::/40
2a03:efc0:500::/40
2a03:efc0:700::/40
2a03:efc0:1100::/40
2a03:efc0:1300::/40
2a03:efc0:1900::/40
Signature Algorithm: sha256WithRSAEncryption
46:56:a5:64:f8:62:a5:d1:dc:b3:b5:ad:b9:be:c8:f7:ac:48:
ca:6a:5d:0a:8c:2d:6a:30:31:0e:84:5a:07:46:e2:b9:a5:27:
57:92:8f:88:76:fc:8c:cc:ee:33:93:91:d1:81:43:12:d5:02:
a3:7b:a4:3f:cf:fc:65:55:b4:27:c3:02:3f:7c:19:e8:f6:92:
57:44:a5:c8:e2:85:68:c6:91:84:1b:55:52:8c:1a:63:1e:cc:
a8:89:03:96:43:df:56:42:0c:b3:a6:dc:aa:45:48:f1:0a:23:
ff:7b:80:f6:f5:cb:47:aa:67:b2:1d:2c:79:f1:ab:f8:b4:f8:
55:48:02:b6:f4:8e:ea:90:ac:79:17:25:ba:71:11:be:8e:fa:
c9:bf:d4:d1:fc:16:02:95:d6:79:16:2e:f7:80:43:10:b3:0d:
3d:22:61:6f:b5:f9:01:9f:5e:3c:d4:2e:b8:92:6c:d1:ab:e7:
01:af:89:33:96:16:74:d3:5b:93:f8:02:97:e2:33:19:70:9c:
8b:bf:c0:c2:14:6e:08:3f:7c:0e:b5:6a:0f:b2:d7:4e:9a:09:
62:22:cf:45:0a:01:ac:65:55:12:40:07:a1:19:1e:e8:37:0a:
24:79:c8:e9:88:3b:af:8b:47:61:b5:89:0e:fb:94:db:9d:97:
a9:d8:5c:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 4 01:00:23 2024 by rpki-client on console-ams.rpki-client.org