Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/f8c8cZkUXoJslqmBESg9yerdG5A.roa
File: f8c8cZkUXoJslqmBESg9yerdG5A.roa (raw, json)
Hash identifier: LDqkz6/6mA+JmJmcberhoibO7uGcOB2yRpNz8i1RxIs=
Subject key identifier: 7F:C7:3C:71:99:14:5E:82:6C:96:A9:81:11:28:3D:C9:EA:DD:1B:90
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0185C907572936781EF9858F146F4DDD59C0
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/f8c8cZkUXoJslqmBESg9yerdG5A.roa
Signing time: Thu 19 Jan 2023 07:56:19 +0000
ROA not before: Thu 19 Jan 2023 07:56:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204650
IP address blocks: 185.243.48.0/23 maxlen: 23
185.243.48.0/22 maxlen: 22
5.57.32.0/24 maxlen: 24
185.215.231.0/24 maxlen: 24
185.124.172.0/22 maxlen: 24
185.26.34.0/23 maxlen: 24
185.124.173.0/24 maxlen: 24
185.124.174.0/24 maxlen: 24
185.124.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Feb 2023 06:40:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c9:07:57:29:36:78:1e:f9:85:8f:14:6f:4d:dd:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 19 07:56:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fc73c7199145e826c96a98111283dc9eadd1b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:c8:ea:d8:55:6e:66:57:85:8a:94:98:f7:
55:41:17:b7:49:25:95:9c:78:bb:9f:a7:6d:cc:85:
4a:64:ab:66:11:94:e9:ed:7e:0d:a3:2f:33:6a:46:
cb:c8:64:9e:7f:6a:8b:47:30:60:80:d3:56:42:53:
01:d3:8f:84:a3:97:1c:34:b4:7f:26:f8:37:de:59:
96:0a:95:e0:cf:05:6b:75:0b:e4:94:19:8e:80:e0:
c1:c8:a5:3e:e2:56:64:45:9a:a3:eb:34:6f:95:28:
e9:bf:68:39:25:74:34:47:20:ed:8d:20:51:84:14:
96:52:be:b6:c1:24:aa:d2:2b:1a:08:54:6a:a6:61:
00:a3:aa:18:19:b5:47:b1:31:73:fb:67:57:2c:57:
94:cc:8f:4c:a9:2a:9e:04:35:42:9f:3d:16:ec:9e:
80:b3:4d:c3:35:db:a6:3b:55:2b:4c:97:35:36:c8:
0d:7f:fa:61:6b:c9:61:68:ca:c1:de:7a:62:c0:63:
25:67:91:d0:ae:e4:8f:40:25:55:f1:6a:16:c4:7d:
0d:3c:ef:04:a1:35:fa:2a:1c:a1:b5:6c:b1:e1:4d:
ea:60:07:1f:a5:93:e9:ba:54:14:71:ff:f9:a5:00:
46:e7:3f:83:6a:1e:c4:7a:6f:93:c2:59:b1:0b:94:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C7:3C:71:99:14:5E:82:6C:96:A9:81:11:28:3D:C9:EA:DD:1B:90
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/f8c8cZkUXoJslqmBESg9yerdG5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.32.0/24
185.26.34.0/23
185.124.172.0/22
185.215.231.0/24
185.243.48.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:83:38:b0:01:91:74:c2:72:17:a0:1a:21:31:dc:26:82:9e:
8a:af:da:a1:76:c3:e5:3d:ae:ed:25:62:cd:f8:b9:c4:62:1c:
ea:fc:c9:05:54:2e:91:b9:7a:83:37:d5:16:fc:ec:3c:f2:87:
e3:23:32:b0:3a:00:2d:8b:1f:b4:84:56:1f:29:7a:74:52:12:
72:a1:a5:15:01:56:33:16:0f:2b:94:d6:a3:8f:1a:11:63:f4:
44:0c:68:6f:f2:da:42:88:b7:49:0b:b2:21:df:83:88:c9:13:
2e:c6:81:38:8c:12:b3:16:cd:83:08:18:3f:b5:c0:d6:ff:a9:
59:ec:a9:b5:6e:84:41:aa:7a:eb:91:b9:c3:81:1e:8d:3f:83:
e3:90:3f:90:d7:ef:46:f2:1c:cc:0c:ac:31:aa:95:9a:c4:48:
ca:ce:1a:31:da:27:c5:fa:78:d0:bd:5f:7b:d7:4c:0b:59:7c:
3a:04:73:1c:02:ac:a8:b4:a6:eb:55:82:e8:50:b5:73:36:90:
7d:a2:af:e8:cd:b3:6c:ea:c4:8c:63:17:b5:2b:bd:89:92:ea:
e3:56:71:ab:b9:c5:56:9a:b3:07:5e:93:a1:1b:69:64:b2:94:
ec:1e:27:6f:e0:17:be:1b:19:0e:b8:62:a6:75:c7:4b:5a:86:
bd:38:51:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:09 2024 by rpki-client on console-ams.rpki-client.org