Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/KOwTRHTQc0pDdsHf0KeqOp7VgOQ.roa
File: KOwTRHTQc0pDdsHf0KeqOp7VgOQ.roa (raw, json)
Hash identifier: dPnIUdKkdbxDw0eeTM5jg1CM1eqPg1Sy9I5K6ZRHUpc=
Subject key identifier: 28:EC:13:44:74:D0:73:4A:43:76:C1:DF:D0:A7:AA:3A:9E:D5:80:E4
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 018F34F75BD8D9C2A0154FA58E9A1806D208
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/KOwTRHTQc0pDdsHf0KeqOp7VgOQ.roa
Signing time: Wed 01 May 2024 16:22:57 +0000
ROA not before: Wed 01 May 2024 16:22:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54203
IP address blocks: 185.147.212.0/24 maxlen: 24
185.147.213.0/24 maxlen: 24
185.147.215.0/24 maxlen: 24
2a03:efc0:200::/40 maxlen: 40
2a03:efc0:500::/40 maxlen: 40
2a03:efc0:700::/40 maxlen: 40
2a03:efc0:1100::/40 maxlen: 40
2a03:efc0:1300::/40 maxlen: 40
2a03:efc0:1500::/40 maxlen: 40
2a03:efc0:1900::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 03 Jul 2024 02:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:34:f7:5b:d8:d9:c2:a0:15:4f:a5:8e:9a:18:06:d2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: May 1 16:22:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28ec134474d0734a4376c1dfd0a7aa3a9ed580e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:81:06:2f:72:6c:df:fb:44:7e:93:d4:cb:
bd:2c:61:c6:21:b9:9f:40:ce:55:72:c9:e6:0a:b3:
e9:36:57:a5:05:10:18:48:2d:26:09:71:bc:50:5f:
59:46:2b:78:bf:93:46:10:cb:90:ae:91:e9:77:c1:
1f:20:d5:da:ea:4a:49:8f:cd:f3:f4:53:f7:56:b5:
ee:a2:9f:67:3f:26:a1:e0:b4:60:4f:1b:b7:42:f6:
0b:d9:2d:45:2a:5b:69:41:ee:e6:24:ae:a8:c9:48:
a7:f4:66:06:87:07:2a:5a:cb:a7:e7:59:0b:5f:c3:
ba:82:e7:cb:f8:1b:74:1e:5b:e2:6b:10:3b:a9:74:
ed:b9:7c:b2:14:6f:bf:25:65:20:9c:87:53:cb:cd:
55:c9:ac:f0:1b:93:59:76:cc:17:73:26:4c:f9:09:
d9:e5:cf:34:2d:30:9e:24:1c:1b:6e:50:34:2f:27:
e9:4e:d8:ae:a9:17:e5:a5:2e:e3:d3:df:81:e4:f8:
f5:fe:6e:f7:36:98:b1:30:00:6a:57:6f:4d:61:8b:
58:98:1c:f6:4e:fd:98:91:9b:c0:9b:b6:3c:a3:0f:
10:e9:ad:f0:a3:8c:e6:ae:29:fc:18:3c:56:77:70:
f4:31:de:1a:e4:39:0d:37:f2:e5:a9:c4:63:79:3c:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EC:13:44:74:D0:73:4A:43:76:C1:DF:D0:A7:AA:3A:9E:D5:80:E4
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/KOwTRHTQc0pDdsHf0KeqOp7VgOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.212.0/23
185.147.215.0/24
IPv6:
2a03:efc0:200::/40
2a03:efc0:500::/40
2a03:efc0:700::/40
2a03:efc0:1100::/40
2a03:efc0:1300::/40
2a03:efc0:1500::/40
2a03:efc0:1900::/40
Signature Algorithm: sha256WithRSAEncryption
a9:34:83:1c:a1:b8:e2:99:fc:f4:b0:e1:84:60:46:23:4d:a4:
9e:59:97:62:0d:ca:a8:fa:31:bf:f6:d0:b5:96:24:a1:64:cf:
87:4b:1e:0b:14:2a:e2:53:5c:5f:1c:93:fe:db:e8:10:f8:37:
b1:6c:10:78:d5:00:8b:e6:6f:ae:00:90:2e:9c:02:4a:4f:8d:
2b:0f:fb:9f:79:df:d0:d0:48:8c:c4:60:4a:f0:ad:96:45:1a:
17:a9:86:3d:16:08:fe:3d:0f:e6:5d:6d:2f:51:39:78:16:d6:
67:61:60:e0:42:5f:2a:a7:55:45:a1:a9:64:ee:3f:74:f9:48:
6a:b9:3f:dd:4f:43:0d:54:4f:b4:e1:24:ee:22:4c:24:97:4f:
97:ce:83:17:9c:53:68:fa:21:a3:08:e1:2e:01:8e:e1:dd:07:
52:34:d9:15:1c:32:de:d9:d0:b1:6f:e3:01:de:b9:69:72:30:
fd:98:ec:e5:6f:5b:52:be:13:8b:f5:b3:a0:17:24:18:dc:b1:
c8:87:e2:d1:84:62:20:83:ad:15:a8:e0:eb:c2:b2:ce:f9:33:
bf:5e:8c:eb:d7:f0:84:32:12:86:c1:b9:09:3b:47:8c:e7:c7:
1c:11:7d:c5:d4:c6:a9:2b:97:f2:c6:1d:d1:f6:da:86:5a:65:
51:7c:77:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 03:45:46 2024 by rpki-client on console-fra.rpki-client.org