Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/244ZVgksshCGbRSeAmayVvVSgxE.roa
File: 244ZVgksshCGbRSeAmayVvVSgxE.roa (raw, json)
Hash identifier: E9PTz62t/HL/DMu8GYGRX2/t+w1jqG/mjgeQTJaCMA4=
Subject key identifier: DB:8E:19:56:09:2C:B2:10:86:6D:14:9E:02:66:B2:56:F5:52:83:11
Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial: 0191E170C2164FFE4E1BD3E004BB1F993268
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/244ZVgksshCGbRSeAmayVvVSgxE.roa
Signing time: Wed 11 Sep 2024 14:15:48 +0000
ROA not before: Wed 11 Sep 2024 14:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61414
IP address blocks: 185.243.40.0/24 maxlen: 24
185.243.41.0/24 maxlen: 24
193.3.191.0/24 maxlen: 24
2a0d:280::/29 maxlen: 29
2a0d:280::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 31 Oct 2024 17:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:70:c2:16:4f:fe:4e:1b:d3:e0:04:bb:1f:99:32:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Validity
Not Before: Sep 11 14:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db8e1956092cb210866d149e0266b256f5528311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:da:77:52:91:b0:87:dc:f3:49:10:7b:e6:
16:bd:3a:ce:79:7b:08:35:a1:d6:3d:17:f7:d9:b3:
8a:57:2e:a9:ac:1e:36:a5:88:db:7e:7d:e4:38:c3:
48:24:20:f2:31:e9:6f:6e:62:f3:55:68:3a:05:d1:
4e:49:f0:e2:e0:72:db:e3:10:52:eb:a9:bf:0f:6f:
ff:1e:b7:d9:62:68:7b:3f:d3:d2:7b:c6:be:eb:87:
46:31:d6:d6:1d:c6:62:27:e5:c9:b7:7d:f6:50:ec:
44:06:59:23:17:65:de:fc:0b:3b:d3:5c:79:fb:e6:
41:50:99:d9:de:7b:ac:ae:34:ab:5b:d4:53:be:4b:
11:1a:9f:42:57:91:c7:8b:18:76:b9:1f:8d:7d:01:
5f:5e:78:99:b4:5e:51:7e:28:16:75:82:c8:4e:50:
62:eb:33:88:46:95:b4:68:10:99:c0:8c:63:57:81:
91:e5:9d:89:b7:b4:c3:89:33:d6:1a:66:ed:4e:2d:
77:7c:60:5b:cd:f3:66:97:dd:29:2e:62:a6:79:64:
f7:33:9c:c2:2f:4c:c6:b7:fe:38:66:5d:11:0f:ce:
bd:82:09:c2:19:34:3d:39:84:a9:65:63:f8:b0:a5:
da:14:d7:8d:be:72:b2:25:7b:a6:e2:ed:73:76:51:
81:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8E:19:56:09:2C:B2:10:86:6D:14:9E:02:66:B2:56:F5:52:83:11
X509v3 Authority Key Identifier:
keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/244ZVgksshCGbRSeAmayVvVSgxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.40.0/23
193.3.191.0/24
IPv6:
2a0d:280::/29
Signature Algorithm: sha256WithRSAEncryption
5a:9e:1e:87:87:b8:f2:76:93:46:59:e0:98:a0:2b:d6:bc:e2:
67:39:37:28:b7:f7:0f:c3:49:28:e4:d1:48:02:d1:dc:d0:6c:
05:e1:33:9f:2f:e0:83:ea:ee:8e:17:d1:18:2d:8d:86:1e:c2:
bb:fe:f0:d3:cd:0f:de:95:2d:4b:c8:a1:ca:54:cc:01:70:e9:
b9:2b:48:a6:49:17:eb:d7:0f:c9:ac:5f:f6:57:8f:7e:2e:17:
d6:c4:3f:b3:a8:6d:91:78:40:05:10:e9:e0:f4:44:00:dd:ed:
6e:8c:4e:a7:4f:0f:65:f3:2b:25:99:97:d2:96:31:2b:b9:2f:
7e:8e:e5:aa:36:4d:dc:3c:22:d5:83:e8:ae:78:c5:42:42:54:
60:e6:90:bd:96:31:10:3c:49:86:6c:6c:e4:bd:08:81:72:2e:
80:a6:d5:31:a3:b5:0a:e4:58:59:b0:cc:69:09:bd:98:c0:ac:
7d:04:ac:d3:4a:c6:5b:d7:28:86:38:65:4d:3c:43:9d:7a:b1:
5b:b6:25:c9:ba:78:33:9a:d7:fd:7f:c1:5f:32:b7:dd:ad:d6:
ff:4d:05:1b:01:d4:80:64:2e:3c:87:13:ad:2f:fe:8c:cd:c2:
6e:00:10:0b:81:54:e6:e2:92:f3:06:23:f4:a9:af:5a:fb:8a:
18:5f:eb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 19:24:58 2024 by rpki-client on console-fra.rpki-client.org