Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/ksI6Rw6WUkfWi7gK-OGZt9FcwPY.roa
File: ksI6Rw6WUkfWi7gK-OGZt9FcwPY.roa (raw, json)
Hash identifier: tNQY4hzAija1Rboc5bnq1i6h1/5+wD2dY8IIDIploaQ=
Subject key identifier: 92:C2:3A:47:0E:96:52:47:D6:8B:B8:0A:F8:E1:99:B7:D1:5C:C0:F6
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 019082E27912FA37CA457CFB3AE58B901660
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/ksI6Rw6WUkfWi7gK-OGZt9FcwPY.roa
Signing time: Fri 05 Jul 2024 12:33:18 +0000
ROA not before: Fri 05 Jul 2024 12:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54203
IP address blocks: 185.147.212.0/24 maxlen: 24
185.147.213.0/24 maxlen: 24
185.147.215.0/24 maxlen: 24
2a03:efc0:200::/40 maxlen: 40
2a03:efc0:500::/40 maxlen: 40
2a03:efc0:700::/40 maxlen: 40
2a03:efc0:1100::/40 maxlen: 40
2a03:efc0:1300::/40 maxlen: 40
2a03:efc0:1900::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 19 Jul 2024 19:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:82:e2:79:12:fa:37:ca:45:7c:fb:3a:e5:8b:90:16:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Jul 5 12:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92c23a470e965247d68bb80af8e199b7d15cc0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:c7:39:62:da:c0:93:af:08:fb:b2:6b:79:
37:5c:0f:ce:23:1e:43:0a:13:56:6b:99:91:c3:3d:
37:d6:bc:01:da:a9:b6:1d:1f:9d:24:b2:00:ef:7e:
01:28:30:3e:96:f6:f6:d0:7c:26:10:0f:d2:fc:20:
bc:7d:b6:06:c4:00:8b:42:03:84:c7:97:36:78:b7:
5f:44:58:86:e2:6e:9f:0f:39:b5:29:5b:10:4e:3e:
50:e0:0f:f3:55:29:88:73:49:05:0b:77:29:7e:f1:
48:ca:87:6a:5a:db:fe:25:b4:81:29:ca:ed:3b:a9:
02:b6:e1:cb:f9:eb:7b:e7:99:66:11:af:6e:4f:2c:
62:58:14:dc:9c:31:fc:ad:d3:84:e2:e4:ec:f3:98:
46:f8:8f:3e:c3:65:ed:2a:4d:98:38:d8:a5:8a:32:
bb:8f:5f:b1:be:1c:d8:ca:88:43:1a:52:dd:2c:79:
af:f8:d9:c6:5d:db:5b:eb:e7:81:9c:24:dd:e6:11:
26:db:88:97:c4:48:a5:64:d2:c0:b9:b1:3b:3a:37:
33:ce:2b:2f:8c:3b:9f:3c:a7:d1:9a:fb:87:e1:90:
81:77:57:de:d4:24:a3:8f:3a:b5:89:ba:e7:5b:2c:
b8:7b:20:2e:a3:6a:bb:35:ff:1f:41:72:34:1f:e1:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C2:3A:47:0E:96:52:47:D6:8B:B8:0A:F8:E1:99:B7:D1:5C:C0:F6
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/ksI6Rw6WUkfWi7gK-OGZt9FcwPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.212.0/23
185.147.215.0/24
IPv6:
2a03:efc0:200::/40
2a03:efc0:500::/40
2a03:efc0:700::/40
2a03:efc0:1100::/40
2a03:efc0:1300::/40
2a03:efc0:1900::/40
Signature Algorithm: sha256WithRSAEncryption
aa:1b:e8:44:6f:8b:36:c7:86:e2:92:13:41:eb:a8:c9:ca:40:
b9:e4:13:2b:e2:a1:fd:78:a3:8e:fa:73:77:bb:63:f1:97:08:
e7:8c:7e:88:6a:88:6e:1a:dc:4a:e4:b7:89:61:7f:82:df:09:
94:5c:81:45:a7:61:7f:b6:52:65:60:db:92:f3:63:a9:79:d7:
30:11:e4:c1:93:02:5a:25:e5:54:e7:89:7e:53:19:9f:df:f9:
29:a3:3f:f5:48:68:b3:f0:78:1f:e9:63:d4:c3:54:b0:6c:21:
4d:2d:7d:5f:20:a6:36:3b:34:fa:c3:31:79:f7:cd:20:f5:14:
a0:f2:cb:7a:15:e0:ad:fc:29:b0:6c:92:d0:a8:18:7f:0c:0c:
b1:c4:e4:d3:fb:50:67:3b:ba:b8:cd:99:22:de:bb:72:32:90:
dc:ab:2d:33:36:4b:ea:4e:4e:9e:cb:75:6b:94:04:cf:9c:52:
10:5c:3f:27:9f:15:62:ad:ac:b5:d6:2c:0e:f0:05:ae:a5:a0:
d3:2e:7d:07:0b:ee:fc:0e:43:6d:09:ea:37:38:82:e1:45:7f:
cd:07:88:03:62:7c:b0:f6:9a:c3:00:fc:79:a0:70:a9:a4:a1:
da:b4:52:62:7c:a1:07:9d:63:94:12:43:eb:f0:64:dd:8b:62:
ed:d8:76:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 19 21:04:13 2024 by rpki-client on console-ams.rpki-client.org