Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/c4WGSlUtlp_VxkSdBvSAOfrWEGs.roa
File: c4WGSlUtlp_VxkSdBvSAOfrWEGs.roa (raw, json)
Hash identifier: tfKMYGEPb9XGJZjE3utwaNInT1GCesXOfECTjmEgVb8=
Subject key identifier: 73:85:86:4A:55:2D:96:9F:D5:C6:44:9D:06:F4:80:39:FA:D6:10:6B
Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial: 01856D6F622A35C77212F7EAF9A86B3F8AB9
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/c4WGSlUtlp_VxkSdBvSAOfrWEGs.roa
Signing time: Sun 01 Jan 2023 13:04:54 +0000
ROA not before: Sun 01 Jan 2023 13:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35179
IP address blocks: 185.49.31.0/24 maxlen: 24
185.49.29.0/24 maxlen: 24
79.110.192.0/20 maxlen: 24
193.239.56.0/22 maxlen: 24
2a01:96e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 03 Jun 2023 08:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:62:2a:35:c7:72:12:f7:ea:f9:a8:6b:3f:8a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
Validity
Not Before: Jan 1 13:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7385864a552d969fd5c6449d06f48039fad6106b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:5c:72:bd:4a:3e:17:61:3b:ee:d5:8c:5d:
ac:6a:56:cd:d1:30:b3:d3:ba:9c:9a:0d:1e:c8:73:
80:8e:90:67:99:a0:aa:4c:75:f8:6a:5a:7b:17:95:
2e:57:a9:da:ae:f5:69:d8:ed:fd:2d:87:74:e5:90:
44:96:50:d4:c1:58:47:88:79:c5:29:fb:66:8c:6a:
f4:e2:5d:b1:20:af:87:ae:5d:df:1a:84:98:8a:ae:
a0:b9:19:d8:3b:0b:37:a7:a4:91:1d:e7:45:14:f0:
bf:e0:5b:23:2a:70:5e:fb:e3:59:b0:7f:2b:59:5f:
b7:fc:c1:d2:42:4a:27:cb:67:b2:e6:e8:e6:5e:42:
0f:50:bf:5c:b4:18:e8:1a:2a:ff:7b:67:7c:7f:e3:
39:4f:88:03:03:a3:bd:e3:51:a0:87:75:cf:8e:73:
75:11:74:3d:c8:a1:67:99:1c:d4:48:ec:a2:e8:ce:
ea:a4:f2:0b:af:5d:bf:5e:d5:3b:f9:96:a3:f0:76:
50:1b:e6:9b:10:c1:b0:f1:3e:f7:44:44:7e:2e:2f:
b9:7e:a0:06:2a:7d:11:8a:37:6a:cf:81:d8:ed:46:
bd:f5:4a:bb:6a:94:74:9c:38:72:ea:d6:ca:1d:b3:
c6:94:87:42:62:3c:f5:df:90:8d:9b:35:bd:7c:17:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:85:86:4A:55:2D:96:9F:D5:C6:44:9D:06:F4:80:39:FA:D6:10:6B
X509v3 Authority Key Identifier:
keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/c4WGSlUtlp_VxkSdBvSAOfrWEGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.192.0/20
185.49.29.0/24
185.49.31.0/24
193.239.56.0/22
IPv6:
2a01:96e0::/32
Signature Algorithm: sha256WithRSAEncryption
57:7f:ba:9a:54:04:9b:19:ea:f5:b4:6c:80:bb:d8:f0:12:41:
2f:e0:d3:3f:18:fd:e5:d1:48:95:98:b0:9b:9e:ad:ae:82:f9:
87:49:2f:e8:ff:0d:0f:bc:10:84:c8:45:c8:8a:42:1d:e0:5a:
90:43:56:82:83:28:1f:97:f8:95:00:38:39:07:ec:7e:1a:d0:
ed:69:4e:d8:8c:5b:77:2a:c4:4e:e6:d8:dd:97:a4:f0:9b:48:
29:e7:36:b4:74:b3:46:fb:6f:5b:d4:ae:d0:e9:b0:51:c6:5b:
85:ba:46:86:83:01:18:93:3d:58:25:4b:c9:13:7a:69:2a:64:
51:2f:32:68:20:b8:4e:90:88:08:3d:f8:b9:c3:d3:cf:47:38:
e0:4f:87:61:61:63:de:41:4c:49:f0:f2:8a:ab:8d:7d:f5:0b:
02:26:bf:75:d2:3d:43:7c:cc:37:4e:de:48:8f:aa:55:c4:1c:
16:25:cf:a9:f5:16:9a:65:d8:28:ec:94:32:7e:db:aa:dd:ad:
f9:06:d6:99:ad:2b:96:ec:cc:87:9b:a4:43:c2:0a:1a:16:7e:
9e:ce:a8:0b:4e:55:30:d6:22:f5:b4:4d:ea:ee:26:f7:d9:bc:
52:cc:26:2b:dd:aa:3f:06:cc:6a:95:50:94:33:b8:8d:d6:bd:
b9:8a:4c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:01 2024 by rpki-client on console-ams.rpki-client.org