Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/fxouCGLpiDPXRAU9W2zXnHqbWYw.roa
File: fxouCGLpiDPXRAU9W2zXnHqbWYw.roa (raw, json)
Hash identifier: ukmWxxCpMjYcrPy+ba9bt4h5F9nZXmHlVFke9s1QnqI=
Subject key identifier: 7F:1A:2E:08:62:E9:88:33:D7:44:05:3D:5B:6C:D7:9C:7A:9B:59:8C
Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial: 0186F3958249689EA91D8C908B07196C0D99
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/fxouCGLpiDPXRAU9W2zXnHqbWYw.roa
Signing time: Sat 18 Mar 2023 07:18:27 +0000
ROA not before: Sat 18 Mar 2023 07:18:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46844
IP address blocks: 185.141.192.0/24 maxlen: 24
185.141.195.0/24 maxlen: 24
2a04:ac0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f3:95:82:49:68:9e:a9:1d:8c:90:8b:07:19:6c:0d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
Validity
Not Before: Mar 18 07:18:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f1a2e0862e98833d744053d5b6cd79c7a9b598c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fe:e9:a8:15:20:f7:83:df:72:47:65:eb:fd:
68:d4:64:ef:dc:41:b2:38:b5:17:27:ea:86:d4:37:
d1:47:7e:27:6a:ea:fc:fd:52:73:52:b7:65:da:c0:
2a:43:12:84:39:31:6a:86:3a:98:73:fe:43:35:8c:
8c:52:9b:2d:6d:94:c7:a0:7a:92:6c:e3:84:18:a4:
53:9b:f4:ed:73:20:d2:28:2f:76:8d:de:21:25:5c:
01:1c:b1:c8:21:25:63:07:4f:24:e1:95:de:36:42:
06:9f:de:8c:98:4d:3a:64:ee:0b:98:c4:54:9a:41:
60:83:21:ed:c4:64:6d:57:0a:ce:50:df:98:71:c1:
da:06:6c:20:d5:ba:0a:2e:5d:d3:15:5b:bd:68:b0:
11:0f:b5:d9:bd:38:07:d0:2a:6f:2b:8a:29:02:00:
c8:ca:fa:c6:38:f6:5a:25:89:82:56:bf:a7:f1:6b:
d3:6e:7d:f5:38:85:15:23:4b:80:f9:91:d5:df:d9:
a3:e2:f8:2a:f6:f2:81:a4:95:09:55:a0:0f:19:b7:
44:fd:21:b0:6d:b9:4a:5c:b1:8e:e8:83:b2:97:60:
35:db:67:b0:ff:c2:2f:3a:81:47:68:9a:dc:25:4d:
13:32:bf:d6:49:26:ba:29:77:9d:c5:9a:4e:81:86:
80:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1A:2E:08:62:E9:88:33:D7:44:05:3D:5B:6C:D7:9C:7A:9B:59:8C
X509v3 Authority Key Identifier:
keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/fxouCGLpiDPXRAU9W2zXnHqbWYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.192.0/24
185.141.195.0/24
IPv6:
2a04:ac0:1::/48
Signature Algorithm: sha256WithRSAEncryption
63:d7:81:2e:42:a4:e3:db:66:62:48:98:f8:00:24:1d:cc:c0:
bf:2e:2d:75:2a:3e:c9:d9:fd:3f:ef:fc:d7:ff:ae:f6:08:30:
02:2f:26:14:0a:3a:d9:2d:e2:be:4f:af:c7:c0:6b:1d:52:04:
83:8c:d6:8b:48:36:98:d4:7a:ae:ac:ca:4d:96:56:73:2a:27:
16:a2:cf:86:f4:9e:e6:6f:2b:a1:4b:0d:cb:d5:67:04:c5:ee:
19:e0:ee:07:db:4a:1c:16:37:ca:fa:64:25:cd:a5:6b:3a:af:
0c:38:76:f1:5c:31:13:56:42:0f:5b:20:b1:bb:75:4b:0a:b2:
a7:da:3b:83:f4:a1:eb:3e:69:a0:d7:34:d2:33:21:92:f8:90:
a2:35:4f:ea:6b:63:64:d8:68:2b:2a:21:2e:b8:87:79:51:fb:
06:ec:5b:7c:8a:b0:d1:a0:3c:3e:cc:8c:12:20:e0:38:39:3c:
46:b7:78:ad:dd:da:8d:64:7e:97:9d:4f:79:c8:b5:32:22:de:
0e:b2:01:fc:c3:9c:5c:bd:53:e4:56:4b:6c:5b:c9:b2:59:18:
58:3f:62:8b:5e:5c:27:58:c3:11:94:2e:52:37:bd:aa:7a:1d:
9d:b9:0c:e8:29:c7:0b:2d:5e:78:0e:93:4a:3f:a6:e9:cd:ad:
b9:22:04:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:54 2024 by rpki-client on console-ams.rpki-client.org