Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/pk4FSe4qv3HYmdrgWie4PrMyEXg.roa
File: pk4FSe4qv3HYmdrgWie4PrMyEXg.roa (raw, json)
Hash identifier: QfS2UeAA/29mrdLoA/l9Ft4JB+q3yIs762W5GvZP65s=
Subject key identifier: A6:4E:05:49:EE:2A:BF:71:D8:99:DA:E0:5A:27:B8:3E:B3:32:11:78
Certificate issuer: /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial: 01868420EA993B870499A57495889AA6CA6E
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/pk4FSe4qv3HYmdrgWie4PrMyEXg.roa
Signing time: Fri 24 Feb 2023 15:53:14 +0000
ROA not before: Fri 24 Feb 2023 15:53:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30746
IP address blocks: 185.61.113.0/24 maxlen: 24
185.61.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:84:20:ea:99:3b:87:04:99:a5:74:95:88:9a:a6:ca:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
Validity
Not Before: Feb 24 15:53:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a64e0549ee2abf71d899dae05a27b83eb3321178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6d:64:9e:cd:6f:6d:7d:5a:17:38:7e:58:ba:
05:90:68:d8:52:f2:30:7a:fb:4d:d4:fa:de:e1:2b:
77:06:87:b9:5f:77:60:db:84:67:1c:28:84:db:9a:
95:b4:de:b1:a9:bf:77:f7:86:f9:8d:73:7c:d3:48:
af:1a:3d:27:cc:85:6e:75:04:48:f9:43:80:e1:2c:
97:60:f6:1b:59:ad:81:f6:62:11:a8:d2:50:ec:09:
72:bb:f3:35:4c:64:8f:da:5a:a0:86:79:26:80:b2:
48:2a:f9:72:3f:56:ad:cc:03:97:f0:79:80:f2:0d:
fe:92:c4:03:64:ed:2a:23:eb:fb:36:cc:cc:ae:21:
2f:ca:1b:61:fa:40:05:89:e2:69:ef:58:d7:84:91:
e5:33:4a:3d:74:fc:85:64:33:14:ce:5e:7d:94:d5:
80:29:82:5f:d7:03:70:6c:b2:61:23:91:9f:b6:ba:
60:c0:6d:d1:f8:7b:0a:6f:9d:8b:94:c5:c3:de:69:
ff:7a:1f:3d:99:1a:ed:12:ed:1d:d2:00:76:45:98:
04:1b:cc:51:2d:6c:8a:65:26:69:6f:a2:ea:24:d8:
69:b4:f5:6b:17:45:38:ca:bd:fc:61:02:cf:36:7a:
96:15:36:3f:b6:d9:66:12:b7:a2:d3:71:1d:aa:a7:
71:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4E:05:49:EE:2A:BF:71:D8:99:DA:E0:5A:27:B8:3E:B3:32:11:78
X509v3 Authority Key Identifier:
keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/pk4FSe4qv3HYmdrgWie4PrMyEXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.113.0-185.61.114.255
Signature Algorithm: sha256WithRSAEncryption
44:f4:9f:77:67:49:9d:b6:aa:1a:2b:8d:70:9f:ad:29:a8:20:
4e:ed:cb:48:e3:5d:b8:0f:d1:7e:69:61:a3:64:a3:5e:36:66:
c3:55:93:37:7e:38:80:7c:cf:40:bc:9c:71:69:64:fc:7b:a4:
d3:89:df:14:1a:39:4b:5d:07:a9:53:79:80:f7:da:dc:3f:fb:
6c:46:cc:ba:29:8f:a6:e2:93:08:57:e8:ea:25:f6:7f:94:4c:
7c:d7:c4:0f:84:18:48:a3:08:cc:23:b2:02:20:fb:2c:8a:3c:
eb:42:2e:a9:11:51:7e:bf:18:9c:88:8a:93:e1:2f:60:87:29:
01:e1:db:72:0a:8b:eb:da:8e:b6:44:ec:fb:af:cc:08:a4:50:
38:03:20:b8:56:9c:99:2f:f4:5a:4e:3f:9b:9b:2f:c0:bf:f2:
31:d5:ad:29:40:9d:84:76:ef:a8:07:01:00:1a:4d:ac:a3:57:
ee:75:d8:9e:4f:f3:a9:0c:87:9c:5e:95:15:64:50:cb:8e:8a:
63:96:92:c6:3d:55:a2:6e:e3:e8:1a:5d:72:d9:eb:8f:72:ed:
be:21:e0:ab:05:6f:4f:ca:5f:cc:e9:1f:74:b5:c3:08:3a:65:
62:61:85:4b:d6:25:3c:94:33:64:8e:40:34:a7:23:fc:43:ac:
fb:15:7a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:32 2024 by rpki-client on console-ams.rpki-client.org