Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/RF5dPxTM96p-xtfIX-Fn9xX0LXI.roa
File: RF5dPxTM96p-xtfIX-Fn9xX0LXI.roa (raw, json)
Hash identifier: uFNApEObqOe64ymLIxY/bRf7nMJIrp/ojcyZJCRVSsE=
Subject key identifier: 44:5E:5D:3F:14:CC:F7:AA:7E:C6:D7:C8:5F:E1:67:F7:15:F4:2D:72
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 01857182FF4D805EE27F5C4690CC3A4C6E1D
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/RF5dPxTM96p-xtfIX-Fn9xX0LXI.roa
Signing time: Mon 02 Jan 2023 08:04:48 +0000
ROA not before: Mon 02 Jan 2023 08:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30781
IP address blocks: 185.18.80.0/22 maxlen: 22
185.166.100.0/22 maxlen: 22
2a0c:d040::/32 maxlen: 32
2a03:f4c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:82:ff:4d:80:5e:e2:7f:5c:46:90:cc:3a:4c:6e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Jan 2 08:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=445e5d3f14ccf7aa7ec6d7c85fe167f715f42d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ca:20:72:1f:59:9a:01:d1:c5:a1:53:91:8e:
5d:57:32:60:ac:76:d1:e5:74:78:5e:8f:ee:1c:f6:
76:88:b0:8d:65:c4:cb:db:e0:dd:5c:13:92:88:5c:
9f:f2:5d:89:4f:6b:b6:01:62:cd:ad:94:90:a7:29:
cc:da:51:31:d5:e5:b8:e8:c0:de:8d:85:2c:ca:d1:
da:ab:bf:e4:20:14:e0:89:80:4a:d7:d7:f2:1a:29:
bd:b9:ba:88:91:31:f5:1d:16:76:30:00:ef:2f:94:
1b:fd:31:19:fa:5e:4d:46:1f:05:26:7f:5a:21:83:
ca:3b:6f:0b:09:8c:d3:01:4f:7f:53:4c:15:89:2f:
0f:39:b6:01:3e:f1:7c:92:d5:42:36:20:a9:9b:26:
6f:d8:b4:c9:d0:00:bf:b5:6f:77:d7:6b:e4:b7:e3:
6a:c7:a2:d9:8c:90:85:ff:d4:d5:5d:49:43:f0:b9:
02:71:bd:c4:82:e2:04:a2:f7:7c:dd:0f:d4:01:cd:
85:f5:64:de:5a:e1:e4:e1:c2:0e:3b:f7:00:d3:8e:
c8:ad:fd:e5:ca:10:ee:1d:94:87:c9:14:fb:52:37:
39:6e:2b:94:c3:9e:ed:a9:60:71:bc:34:45:99:64:
5a:48:d9:a2:cd:e6:c3:1c:01:51:fe:65:77:b2:52:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5E:5D:3F:14:CC:F7:AA:7E:C6:D7:C8:5F:E1:67:F7:15:F4:2D:72
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/RF5dPxTM96p-xtfIX-Fn9xX0LXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.80.0/22
185.166.100.0/22
IPv6:
2a03:f4c0::/32
2a0c:d040::/32
Signature Algorithm: sha256WithRSAEncryption
a4:4f:b3:1b:61:c4:9f:d2:87:dd:2a:04:3d:df:bc:87:01:cb:
25:87:ce:54:b0:34:73:6c:b5:56:8e:68:2f:14:30:06:57:e3:
17:07:5a:ad:69:a7:b4:9a:4c:1e:47:fd:55:72:d9:ba:39:71:
1e:d3:ef:49:60:7e:d9:55:d7:8f:4d:02:67:a4:0f:34:06:c0:
a7:51:7e:22:1e:8c:1d:be:49:bc:58:85:31:bd:17:a3:bf:51:
96:d9:3d:27:9c:df:24:be:27:9a:2f:10:53:d7:04:23:55:60:
eb:7c:de:12:b7:98:d0:65:f3:1c:58:25:c0:a2:0b:1b:83:3c:
02:14:77:9f:a1:a6:39:4c:db:c4:81:39:b5:db:43:62:8d:21:
32:ab:22:82:68:a1:d3:97:f0:58:06:e4:46:fa:32:a9:4c:7a:
5e:29:10:04:b5:37:79:d9:66:0e:e7:b9:2b:2f:4b:14:73:8b:
22:a5:69:8f:97:15:3c:aa:c1:ed:f2:5a:7f:48:8f:58:48:63:
d3:09:12:7e:67:25:6f:e9:3b:f4:35:c0:ae:63:1d:b4:b1:18:
8d:bd:16:fb:92:71:7c:5d:96:72:e0:31:3b:da:d0:1d:b1:3f:
d1:5c:6f:3f:11:a5:85:43:00:f0:8a:86:38:39:68:6e:61:3b:
41:ea:51:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-fra.rpki-client.org