Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/erkUYGOOeZ6fBEbHUtVjGOycH7I.roa
File: erkUYGOOeZ6fBEbHUtVjGOycH7I.roa (raw, json)
Hash identifier: 4bPSPjt8y57nXPKQX9ydsUn+4dZsPTTpVm1h5DrY3lk=
Subject key identifier: 7A:B9:14:60:63:8E:79:9E:9F:04:46:C7:52:D5:63:18:EC:9C:1F:B2
Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial: 018570F08203EB6003350611692A2C328DAE
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/erkUYGOOeZ6fBEbHUtVjGOycH7I.roa
Signing time: Mon 02 Jan 2023 05:24:48 +0000
ROA not before: Mon 02 Jan 2023 05:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47719
IP address blocks: 185.61.48.0/24 maxlen: 24
185.61.51.0/24 maxlen: 24
185.61.50.0/24 maxlen: 24
185.61.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:82:03:eb:60:03:35:06:11:69:2a:2c:32:8d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Validity
Not Before: Jan 2 05:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ab91460638e799e9f0446c752d56318ec9c1fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:a1:0e:34:01:7b:80:6e:d1:5e:3a:b2:fa:
46:8f:2a:4e:8e:ed:52:51:bf:86:cd:22:54:4f:ee:
6d:ec:af:b8:84:77:52:63:db:c9:97:92:b6:12:b6:
72:9c:f5:bf:b9:c2:33:d2:e7:cd:03:4d:fa:30:68:
fa:45:f6:f3:07:84:ee:a6:5c:e2:0d:e3:4d:a6:be:
04:bc:03:bc:5c:f2:95:ad:a4:ac:be:94:3a:a7:0e:
3f:92:59:7b:af:a3:b5:3e:d0:9f:d0:a1:82:a4:f1:
70:b0:4a:ae:6f:71:f5:1b:53:aa:d2:62:f0:fa:bc:
63:8b:79:45:63:e8:95:bf:75:55:69:8f:cd:6a:90:
34:94:4d:27:cc:48:b8:d6:ea:7a:f0:40:9f:18:6f:
23:d6:28:c1:7a:e8:00:d3:dc:17:2e:f4:b9:8d:8d:
de:82:03:9e:f9:85:58:13:31:b9:2e:68:f2:a2:51:
02:dc:80:99:5a:93:e7:43:b9:6d:b9:20:0d:a5:c7:
6a:7b:bd:55:35:d3:17:d4:dd:8c:d5:9c:d5:47:18:
ba:22:55:18:8e:c7:5a:c1:0a:53:e6:bb:5c:c1:a2:
f6:f1:cc:cb:7a:43:4c:e0:be:81:bb:e7:36:8e:5b:
6c:84:c3:b5:b2:37:33:1e:0d:06:e4:34:28:93:e5:
60:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B9:14:60:63:8E:79:9E:9F:04:46:C7:52:D5:63:18:EC:9C:1F:B2
X509v3 Authority Key Identifier:
keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/erkUYGOOeZ6fBEbHUtVjGOycH7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.48.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:69:7d:63:85:72:77:db:fd:29:e0:fb:95:47:d0:3b:c6:a1:
3f:69:19:0b:65:69:0d:ca:2e:18:d6:bb:d6:b7:b4:86:44:37:
55:a8:d1:3c:40:6f:53:49:31:a7:3e:83:b9:41:79:da:a0:2d:
47:4c:72:88:94:58:26:a6:51:d3:60:24:91:ad:37:a5:68:4e:
ac:d4:c4:46:f6:0d:14:df:60:17:98:71:e8:ac:da:3d:f8:a7:
2a:51:e7:f0:f8:94:96:50:43:28:d0:ac:ff:58:09:e6:38:65:
c3:61:ea:d4:9d:49:df:c6:f9:63:70:7a:c3:21:27:5f:59:92:
4e:44:77:af:0b:ae:79:c0:8a:8c:58:7a:f8:cd:f4:73:a6:df:
7d:8b:9d:34:94:52:f4:43:b8:20:54:f1:25:05:b5:e3:c7:8c:
0d:ac:d9:6c:dc:83:83:e1:b1:f2:2c:6f:64:44:52:82:e6:cc:
14:b1:b1:a8:9a:2d:50:fb:92:1b:50:bb:ab:12:96:99:c0:ad:
ef:81:0a:d3:40:55:27:e9:8e:df:a8:9b:49:87:40:76:46:f0:
8f:df:9d:90:3e:8f:75:80:78:02:63:dd:32:82:e9:a5:93:b9:
d1:5a:b7:ed:f4:c8:8c:21:5d:34:70:2b:85:69:ee:05:25:af:
c3:cc:10:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:15 2024 by rpki-client on console-fra.rpki-client.org