Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/RskB3JRuNGkb1Ugel06OU00_O3Q.roa
File: RskB3JRuNGkb1Ugel06OU00_O3Q.roa (raw, json)
Hash identifier: UhukNPqmhxPu4kRpITY0nCgbWbGLcBVqdr5tSJmBAs8=
Subject key identifier: 46:C9:01:DC:94:6E:34:69:1B:D5:48:1E:97:4E:8E:53:4D:3F:3B:74
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 018CFE5CA2F207E274FEE840B678885A122B
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/RskB3JRuNGkb1Ugel06OU00_O3Q.roa
Signing time: Fri 12 Jan 2024 15:48:53 +0000
ROA not before: Fri 12 Jan 2024 15:48:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62651
IP address blocks: 185.147.214.0/24 maxlen: 24
2a03:efc0:1700::/40 maxlen: 40
2a03:efc0:3500::/40 maxlen: 40
2a03:efc0:3100::/40 maxlen: 40
2a03:efc0:2500::/40 maxlen: 40
2a03:efc0:900::/40 maxlen: 40
2a03:efc0:2300::/40 maxlen: 40
2a03:efc0:2700::/40 maxlen: 40
2a03:efc0:2900::/40 maxlen: 40
2a03:efc0:3700::/40 maxlen: 40
2a03:efc0:3300::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 05 Feb 2024 20:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fe:5c:a2:f2:07:e2:74:fe:e8:40:b6:78:88:5a:12:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Jan 12 15:48:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46c901dc946e34691bd5481e974e8e534d3f3b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fa:5a:e8:bd:24:2f:e1:3b:c7:1c:c9:00:8c:
47:0e:c2:25:8f:44:24:05:f9:83:99:31:ee:e1:1e:
8f:50:c2:b7:89:fb:8c:6f:52:06:1a:a9:47:7a:ce:
0a:75:4d:6d:b5:17:34:f1:65:b8:4b:4e:2c:02:92:
3c:57:19:fb:cb:7a:23:67:9b:6d:ba:12:b4:e3:6a:
f0:9b:e2:1a:9f:1c:5b:e8:1d:7f:f1:eb:80:13:91:
49:9b:e3:93:e2:52:42:ee:d2:ec:25:d8:5b:1f:f8:
fa:c2:e8:1b:15:ec:01:fb:9b:9b:6b:e4:b8:b4:fd:
09:2c:b3:ba:8e:1f:70:6b:ad:d0:cc:ca:9b:81:2c:
7f:b3:17:2a:e4:d9:53:b6:ff:e8:af:ba:9b:02:0f:
9b:69:16:d8:1a:06:ad:9b:97:17:3c:fb:bc:65:d0:
e9:3e:4c:c5:e0:f1:4d:6a:41:21:e5:5a:bb:24:00:
a3:af:f6:be:62:25:9c:78:c2:0f:28:db:89:b4:32:
30:28:7e:cb:5a:c4:04:45:4c:bf:df:03:f2:2b:04:
0a:75:bd:3a:52:dd:2f:81:87:02:42:84:82:ea:ac:
40:63:7d:da:c0:fa:50:fc:ae:c2:f0:95:28:6b:52:
2f:a1:68:18:80:6e:c7:a0:85:42:1e:d9:31:14:cd:
ef:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C9:01:DC:94:6E:34:69:1B:D5:48:1E:97:4E:8E:53:4D:3F:3B:74
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/RskB3JRuNGkb1Ugel06OU00_O3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.214.0/24
IPv6:
2a03:efc0:900::/40
2a03:efc0:1700::/40
2a03:efc0:2300::/40
2a03:efc0:2500::/40
2a03:efc0:2700::/40
2a03:efc0:2900::/40
2a03:efc0:3100::/40
2a03:efc0:3300::/40
2a03:efc0:3500::/40
2a03:efc0:3700::/40
Signature Algorithm: sha256WithRSAEncryption
8c:08:5e:44:21:51:b8:82:17:0b:84:aa:cf:18:a4:20:57:55:
c7:f4:17:ad:dc:5c:2b:f8:72:d5:28:ef:12:90:93:db:0b:40:
70:54:81:b0:60:af:6e:1d:19:cf:c9:73:dd:14:40:e6:1d:33:
9b:f9:b8:c2:aa:32:88:b4:05:8f:de:00:67:b9:80:35:a8:dc:
4b:38:88:f6:d4:bc:c1:20:6f:e3:b5:02:3f:57:bc:9b:dc:5f:
17:e4:b4:d0:91:21:6f:22:a1:b2:d5:67:76:8f:3a:11:25:74:
e1:09:45:b7:4c:1f:b5:18:b1:dd:50:56:93:af:eb:96:94:f8:
47:95:2c:60:e0:ff:a3:3c:61:79:7d:e4:b6:9b:6b:42:fd:e4:
93:17:ac:a8:9a:dc:9d:5d:e1:f2:a2:88:f3:ac:7a:69:be:6a:
7d:44:e0:34:ec:ba:f4:64:46:87:f1:d6:80:2c:84:40:8d:27:
59:b0:b9:25:ff:ee:c3:29:c8:98:41:b6:0a:bf:ff:ff:be:f5:
cf:8e:01:e6:e5:c5:6b:0d:b8:36:a6:7a:48:b0:05:ab:b6:86:
86:0a:15:84:37:b5:e6:97:6e:f2:61:a9:ab:0a:5a:a0:d9:db:
83:b3:10:02:00:d6:0a:1b:29:b5:f1:ec:55:e4:27:50:09:5c:
9e:1e:31:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:30 2024 by rpki-client on console-fra.rpki-client.org