Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/p_rMYCdmY2xYUosSwNK_l2XgVRY.roa
File: p_rMYCdmY2xYUosSwNK_l2XgVRY.roa (raw, json)
Hash identifier: HQJUEZklFgbAby6r7rhTZgNAmHpOMNSx0NAm0WkFIfM=
Subject key identifier: A7:FA:CC:60:27:66:63:6C:58:52:8B:12:C0:D2:BF:97:65:E0:55:16
Certificate issuer: /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Certificate serial: 01857002803CBCB7408BDF378196AEB18CFD
Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/p_rMYCdmY2xYUosSwNK_l2XgVRY.roa
Signing time: Mon 02 Jan 2023 01:04:50 +0000
ROA not before: Mon 02 Jan 2023 01:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202214
IP address blocks: 185.50.64.0/22 maxlen: 22
185.50.66.0/24 maxlen: 24
185.50.67.0/24 maxlen: 24
2a01:a6a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 29 Aug 2023 10:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:80:3c:bc:b7:40:8b:df:37:81:96:ae:b1:8c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Validity
Not Before: Jan 2 01:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7facc602766636c58528b12c0d2bf9765e05516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:50:6c:5b:d2:5a:31:76:58:b9:35:f5:e9:
cf:04:9d:75:b2:53:c6:e8:a8:95:37:1c:64:30:24:
12:4f:36:5c:ec:74:20:9c:30:82:6f:19:73:c1:2b:
54:54:ef:27:03:c6:13:2a:d7:8f:6a:53:4c:db:77:
4c:b4:4c:7e:5a:a1:55:33:e1:6e:72:44:3d:3d:8b:
1a:7e:57:3e:49:f2:3d:be:0d:2a:1b:22:df:ff:4d:
91:0a:02:24:ca:2f:e0:d4:fb:b3:9b:59:c5:d2:9c:
c3:b9:30:6e:66:2b:0d:26:1f:63:8a:99:92:37:0b:
74:72:26:64:76:46:08:79:7f:a6:fc:52:3d:2d:95:
4e:c4:8e:8e:d6:48:39:d6:35:2a:a5:b8:ef:73:63:
e3:5a:48:6f:9c:d5:e2:d7:ff:b3:7f:b9:58:27:2e:
ba:87:94:df:c9:6b:ad:54:cb:48:b4:bc:94:a7:3f:
71:2c:41:32:57:16:7c:0f:c4:d7:ad:60:0c:09:c1:
08:1d:de:1a:97:f9:44:37:fb:a1:ca:32:e0:21:e9:
29:00:98:ec:e6:07:d9:e9:00:6b:8e:bd:7c:69:56:
68:a5:6d:a4:5d:27:f7:7d:03:40:01:26:dc:1a:81:
7f:16:b1:1f:63:73:d7:36:36:31:69:ef:35:ad:1e:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FA:CC:60:27:66:63:6C:58:52:8B:12:C0:D2:BF:97:65:E0:55:16
X509v3 Authority Key Identifier:
keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/p_rMYCdmY2xYUosSwNK_l2XgVRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.64.0/22
IPv6:
2a01:a6a0::/32
Signature Algorithm: sha256WithRSAEncryption
61:53:cf:e2:52:e7:52:02:df:ab:da:69:04:0b:90:94:92:14:
0e:7b:02:87:20:b4:f9:96:9a:33:2d:f4:d5:6f:0b:3c:09:96:
9d:ac:bb:d4:c4:e8:05:25:2f:a7:c0:e7:71:ff:da:79:78:ae:
2d:9c:95:70:d3:b1:9b:0a:b9:b9:5f:64:17:18:8a:85:d8:6b:
f6:09:c7:55:4d:16:d5:14:b7:b4:9e:1c:38:ca:e1:af:13:71:
c0:59:6c:ac:73:3f:31:9f:55:64:ef:37:bf:35:fd:9b:c1:55:
e2:d9:29:3f:7e:13:0c:14:f8:13:b8:49:64:19:dc:ea:d1:29:
60:4c:7b:61:ad:e8:db:b6:96:2c:b9:2b:fb:7b:90:9d:3e:07:
39:0e:75:fa:fa:e0:b8:b1:4b:8b:b9:2a:f0:11:62:62:be:3b:
ef:f8:93:da:89:03:20:d3:1e:d1:71:fc:d4:24:3d:53:6d:cc:
9d:78:95:c1:ae:54:f3:5e:78:9a:ea:f0:13:1b:5f:e5:8b:38:
63:bb:39:a3:34:3c:c1:96:b2:5b:ce:77:14:6f:fd:48:27:64:
88:be:ff:69:8a:aa:36:26:d8:2c:e9:88:f7:71:4f:29:79:3c:
fa:a8:d4:b3:ab:3b:e5:b8:a3:ec:32:13:ec:80:82:11:6c:d3:
33:b5:4c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:16 2024 by rpki-client on console-fra.rpki-client.org