Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/_J501PX8-yrWre-e-siqimWgBas.roa
File: _J501PX8-yrWre-e-siqimWgBas.roa (raw, json)
Hash identifier: YLg4FvWgJEghfe5GtTJpYtoFuXHFCnHX4oFavmO2vqE=
Subject key identifier: FC:9E:74:D4:F5:FC:FB:2A:D6:AD:EF:9E:FA:C8:AA:8A:65:A0:05:AB
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018653CD90B508CC9FE113DCEF6E17B154E1
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/_J501PX8-yrWre-e-siqimWgBas.roa
Signing time: Wed 15 Feb 2023 06:40:26 +0000
ROA not before: Wed 15 Feb 2023 06:40:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204650
IP address blocks: 185.243.48.0/23 maxlen: 23
185.243.48.0/22 maxlen: 22
5.57.38.0/24 maxlen: 24
5.57.32.0/24 maxlen: 24
185.215.231.0/24 maxlen: 24
185.124.172.0/22 maxlen: 24
185.26.34.0/23 maxlen: 24
185.124.173.0/24 maxlen: 24
185.124.174.0/24 maxlen: 24
185.124.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Feb 2023 10:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:53:cd:90:b5:08:cc:9f:e1:13:dc:ef:6e:17:b1:54:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Feb 15 06:40:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc9e74d4f5fcfb2ad6adef9efac8aa8a65a005ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:3f:20:64:fa:97:58:a5:51:15:8b:70:6a:
ff:9c:75:d8:9c:85:1d:01:9d:9d:d4:d5:15:55:be:
84:01:1b:97:7e:39:6b:2d:57:d4:62:47:4e:ae:18:
ce:f6:95:1c:e2:46:73:d7:b1:5c:ea:33:e6:b5:d9:
a8:89:3f:d9:6f:71:6c:af:74:02:18:63:af:08:c8:
de:24:af:39:c0:34:0a:11:fc:57:ab:fb:5a:78:83:
36:f8:5d:b5:65:4b:6b:bf:b8:39:9d:80:53:34:26:
b5:b6:c7:4c:0f:46:ba:f7:53:82:4c:60:11:ef:dc:
c6:60:44:d1:33:27:17:5a:f4:50:4c:14:35:1e:7c:
f0:88:48:83:a8:26:50:29:f5:64:66:da:3d:88:eb:
62:a0:20:47:e7:94:ae:87:74:df:9b:de:15:53:96:
67:41:d9:46:1d:46:40:0d:38:85:68:eb:1c:11:f9:
47:91:57:51:b8:14:b8:e4:28:97:69:20:65:97:53:
f0:d3:c3:66:2d:88:6f:fb:b5:15:bb:33:7b:11:f6:
9a:7d:49:86:ef:47:4a:31:54:ca:55:f2:77:87:e6:
06:a8:8e:d8:3e:42:c1:22:d4:f6:97:ed:3e:22:ae:
71:f4:7f:8d:66:c3:51:22:92:5b:2f:54:28:51:2b:
e9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9E:74:D4:F5:FC:FB:2A:D6:AD:EF:9E:FA:C8:AA:8A:65:A0:05:AB
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/_J501PX8-yrWre-e-siqimWgBas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.32.0/24
5.57.38.0/24
185.26.34.0/23
185.124.172.0/22
185.215.231.0/24
185.243.48.0/22
Signature Algorithm: sha256WithRSAEncryption
44:bd:78:9e:8a:fe:68:02:15:4e:5f:a9:9f:98:83:71:a2:f1:
90:0f:06:53:aa:3b:e7:a6:8c:94:e0:37:b9:57:54:1f:ba:1f:
99:4b:44:d8:ca:e1:5d:4a:33:c0:9a:95:30:3e:0c:40:99:09:
bb:e8:20:78:10:cc:53:d5:25:26:8a:4f:9e:8b:87:3d:ac:69:
04:73:62:cc:39:2f:28:e6:47:f2:d5:92:b5:28:c7:d5:bd:68:
93:d3:e1:c2:0e:ab:7b:56:c2:1b:9f:9c:19:f4:c8:28:0b:e5:
5f:2f:d9:02:f9:f3:a1:20:6f:f0:0a:9b:cd:8b:9c:87:0f:09:
55:56:58:22:15:14:89:ef:51:88:ec:8f:8c:f3:a9:29:39:de:
ab:3b:cb:07:96:44:61:f9:ea:cc:15:c0:f3:db:37:84:e0:81:
98:2a:6d:86:50:1f:5b:a4:30:ad:7c:80:37:1e:d5:88:ef:78:
f4:a5:bd:77:12:07:e0:a0:b0:63:9d:a4:3d:2f:6c:19:ff:4d:
75:a3:ae:66:eb:cc:3a:38:c1:eb:2f:41:f7:25:2f:ff:03:cf:
fc:88:18:4c:c8:7a:6e:b0:d1:96:71:35:8c:e4:ca:7f:dd:ce:
ca:d7:f7:16:e6:46:8e:3d:f3:85:58:5f:31:de:57:ac:d0:d6:
52:04:48:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:09 2024 by rpki-client on console-ams.rpki-client.org