Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/sK6RgiAukvcdo-G0Aw7BtPPHckY.roa
File: sK6RgiAukvcdo-G0Aw7BtPPHckY.roa (raw, json)
Hash identifier: GmXjwLWYu6MytZrhbsTQpwvLNNqH2SD946ZLmqa8tho=
Subject key identifier: B0:AE:91:82:20:2E:92:F7:1D:A3:E1:B4:03:0E:C1:B4:F3:C7:72:46
Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial: 018CCA2B9D2424A2B1D90727E12A46BD83C5
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/sK6RgiAukvcdo-G0Aw7BtPPHckY.roa
Signing time: Tue 02 Jan 2024 12:35:05 +0000
ROA not before: Tue 02 Jan 2024 12:35:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62094
IP address blocks: 185.48.80.0/22 maxlen: 24
5.154.244.0/22 maxlen: 24
2a01:9560::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 16 Oct 2024 07:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:9d:24:24:a2:b1:d9:07:27:e1:2a:46:bd:83:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Validity
Not Before: Jan 2 12:35:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0ae9182202e92f71da3e1b4030ec1b4f3c77246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:e3:01:32:d8:85:01:e8:a9:a0:e0:19:4c:
79:18:40:88:e7:2d:b6:08:c1:49:98:44:64:3b:af:
f4:b7:2a:f0:49:37:ad:4e:8b:30:2c:2d:60:69:0f:
60:3c:c4:dc:44:7f:9f:ab:cc:1c:df:27:c0:ad:63:
e3:1b:70:2f:7a:dd:31:0d:a7:30:dd:c8:e3:10:9e:
49:b4:b1:1d:93:c2:ff:1f:08:85:d6:86:d7:7c:d2:
11:28:fe:fa:70:80:e6:8f:47:97:58:ed:0e:3f:42:
d4:b4:3c:5e:b9:6c:dd:7f:c6:b4:5a:56:e2:d7:9e:
8c:d0:83:28:6a:e2:c0:b7:f4:ef:a6:a0:7e:1c:6f:
7b:0a:62:8f:d5:61:0d:fb:79:6d:f8:0c:c5:1c:9c:
7f:f9:eb:e8:9d:21:0c:b6:8d:0b:ef:46:0b:34:f3:
04:9a:af:10:ab:c6:4b:d8:df:24:1d:7d:e8:b5:ce:
64:73:cc:f6:8a:16:5f:ee:3d:f1:8c:99:33:76:81:
e3:64:95:72:3a:c7:a6:c9:c7:2d:f6:00:5e:b0:bc:
61:c3:89:8c:6b:58:d6:42:64:55:87:87:ed:32:ea:
69:72:8a:bf:d2:15:00:15:ea:11:56:de:10:86:f5:
42:20:7d:c4:fb:10:35:ed:9d:2b:43:7f:68:81:72:
e4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AE:91:82:20:2E:92:F7:1D:A3:E1:B4:03:0E:C1:B4:F3:C7:72:46
X509v3 Authority Key Identifier:
keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/sK6RgiAukvcdo-G0Aw7BtPPHckY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.244.0/22
185.48.80.0/22
IPv6:
2a01:9560::/32
Signature Algorithm: sha256WithRSAEncryption
17:e8:8e:9e:bf:54:cb:0c:5a:50:57:ca:5d:b5:a7:d3:48:bf:
91:b4:8f:0f:3a:77:2c:42:bf:9b:e6:9d:aa:ff:fe:01:04:bd:
b3:f1:bd:29:ed:28:c8:23:2d:ee:93:9f:d3:e5:2a:d1:f5:34:
e0:2d:97:67:2f:61:e7:17:02:a1:44:49:e5:04:7c:03:f1:f5:
79:1b:de:12:aa:a2:77:f9:4f:ea:50:ea:88:ad:4b:13:f1:0a:
12:5a:2a:de:c4:31:99:97:2c:d5:1f:8d:05:95:7f:0f:36:20:
dc:9c:86:29:52:c4:30:16:19:4e:35:c8:09:49:2e:fb:82:ba:
13:e4:a6:11:43:d2:ae:df:bb:bc:b1:2a:43:68:59:bf:f0:ef:
6d:a1:fb:4f:c0:0a:16:d3:2c:83:5e:48:be:ad:98:cc:35:8a:
62:dd:74:c2:27:70:39:7f:6d:9b:bb:c8:91:9f:e1:2f:f2:a5:
51:df:c5:3f:c6:17:12:f6:70:37:22:c5:b4:6a:ca:4d:96:4c:
bf:ec:ee:a9:02:c3:7f:2e:5c:ca:67:7d:4a:ea:54:b0:9b:04:
fe:21:9f:c6:d5:93:55:cc:04:39:49:44:27:8a:f7:a1:ac:e9:
45:01:bd:4f:19:e7:42:1a:32:5c:64:b3:1b:97:fd:bf:ff:49:
a4:9f:10:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 10:45:14 2024 by rpki-client on console-ams.rpki-client.org