Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/uE-RFEt9o6jNeZlsWUKnoLdii8c.roa
File: uE-RFEt9o6jNeZlsWUKnoLdii8c.roa (raw, json)
Hash identifier: /sNxFKAcalaldn6g1/XHUBaypsVlWp6kDTWfcThlARY=
Subject key identifier: B8:4F:91:14:4B:7D:A3:A8:CD:79:99:6C:59:42:A7:A0:B7:62:8B:C7
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 018892E9F0D42B4A4FBB73CAF0A096C37C43
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/uE-RFEt9o6jNeZlsWUKnoLdii8c.roa
Signing time: Tue 06 Jun 2023 22:53:05 +0000
ROA not before: Tue 06 Jun 2023 22:53:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 185.213.22.0/24 maxlen: 24
185.126.236.0/24 maxlen: 24
185.126.237.0/24 maxlen: 24
2a11:840:2::/48 maxlen: 48
2a11:840:5::/48 maxlen: 48
2a11:840:3::/48 maxlen: 48
2a11:840:1::/48 maxlen: 48
2a11:840:9::/48 maxlen: 48
2a11:840:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:92:e9:f0:d4:2b:4a:4f:bb:73:ca:f0:a0:96:c3:7c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jun 6 22:53:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b84f91144b7da3a8cd79996c5942a7a0b7628bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:1d:67:13:00:30:65:41:08:78:c2:da:ad:
cc:9f:6b:82:dd:1e:34:5c:66:79:91:6f:60:f8:e9:
57:75:0a:4c:21:f5:4c:bb:6f:62:b0:32:42:90:97:
1f:fd:a2:bf:14:29:79:87:31:fc:19:83:d9:fa:6b:
57:fb:13:ad:43:7e:0f:58:01:43:de:ea:0f:76:2b:
e9:29:7c:e8:60:a6:d9:79:50:81:f1:74:c2:6b:cf:
d7:85:78:45:96:88:02:b9:48:f2:a0:e9:70:b1:9f:
76:c3:73:16:58:4d:d2:90:e0:21:1f:7e:bd:d2:f7:
1a:14:88:4c:01:f2:03:2b:68:3a:0e:d0:c7:91:9e:
b3:f1:8d:64:9e:23:b9:7f:38:c0:62:36:50:42:4c:
d9:25:de:67:bf:31:42:76:b4:4b:5a:7a:2a:64:e8:
bc:27:44:d8:13:92:25:5b:6a:4f:b8:39:4d:ec:48:
ae:2c:4f:23:b6:fb:4f:9e:e5:d8:16:27:5d:6a:50:
14:1a:4c:bb:84:86:f0:58:65:f1:3c:53:d8:b1:8a:
45:92:be:cc:a4:cb:9e:79:16:d6:42:e5:c6:d5:eb:
86:78:75:6a:93:a7:51:a9:71:e3:7e:c3:17:b4:78:
68:7c:aa:75:84:56:f5:d3:9a:84:6a:4e:f7:0f:58:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4F:91:14:4B:7D:A3:A8:CD:79:99:6C:59:42:A7:A0:B7:62:8B:C7
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/uE-RFEt9o6jNeZlsWUKnoLdii8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.236.0/23
185.213.22.0/24
IPv6:
2a11:840:1::-2a11:840:5:ffff:ffff:ffff:ffff:ffff
2a11:840:9::/48
Signature Algorithm: sha256WithRSAEncryption
75:f2:63:38:b6:09:45:68:2d:61:cd:a9:10:fb:15:33:b3:3b:
41:da:95:a3:84:b2:10:07:0d:b2:e9:ab:50:8b:bb:ba:70:24:
a1:f8:90:5a:ab:76:5b:a7:98:87:a7:48:7c:4e:3a:99:df:02:
63:2e:13:00:8a:11:2d:88:b8:d4:ce:86:d9:9d:e4:fc:36:c8:
7e:15:41:65:9d:38:42:8f:93:0a:31:df:57:3d:87:f8:12:8c:
7b:7e:1a:c3:d2:b9:11:0e:12:3d:12:ca:1c:5f:c5:13:98:99:
eb:6c:68:0e:cc:20:9f:15:95:f4:64:72:2d:6e:d1:b6:55:2d:
83:20:60:5c:6c:fd:55:c2:03:c5:9c:22:87:71:37:b3:44:26:
4b:ad:21:da:bc:09:2c:81:99:b5:f6:f3:00:08:4d:cc:ac:a3:
2c:aa:1a:f9:42:a9:7e:9d:f6:8d:69:86:fc:17:42:9b:64:29:
ae:bf:3f:a5:cf:14:02:0d:77:5d:10:a7:45:01:dc:ce:d4:0e:
d0:da:8a:9a:e9:4a:58:ec:11:5e:b1:1d:e8:a5:87:b5:92:3f:
2f:aa:5e:f7:56:46:74:bc:25:cf:45:57:8b:b3:6a:d9:51:a6:
6e:d9:e4:66:1a:9a:2f:4b:ad:0a:ab:27:b7:e3:8c:b4:99:8d:
10:24:85:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:51 2024 by rpki-client on console-ams.rpki-client.org