Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/1-Ye1pFvmSgprBeKWcP7ZoBAR-8o.roa
File: 1-Ye1pFvmSgprBeKWcP7ZoBAR-8o.roa (raw, json)
Hash identifier: tDNZ6lvPByLLsYW8z8yznimJwtNVh2KBux5FDa+x1Ro=
Subject key identifier: F9:87:B5:A4:5B:E6:4A:0A:6B:05:E2:96:70:FE:D9:A0:10:11:FB:CA
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 018C71CFB2415B8F0D3E657124B4FE48783C
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/1-Ye1pFvmSgprBeKWcP7ZoBAR-8o.roa
Signing time: Sat 16 Dec 2023 08:48:06 +0000
ROA not before: Sat 16 Dec 2023 08:48:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211664
IP address blocks: 185.226.242.0/24 maxlen: 24
185.226.241.0/24 maxlen: 24
91.232.23.0/24 maxlen: 24
91.232.22.0/24 maxlen: 24
2a12:84c0:2::/48 maxlen: 48
2a12:84c0:1::/48 maxlen: 48
2a0c:7680:1337::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:71:cf:b2:41:5b:8f:0d:3e:65:71:24:b4:fe:48:78:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Dec 16 08:48:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f987b5a45be64a0a6b05e29670fed9a01011fbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9a:ae:a0:11:ae:39:a6:5e:2f:97:49:9e:29:
9c:f6:7c:44:75:db:5a:b5:d5:fd:71:18:a3:4c:ed:
ce:94:44:c3:5d:23:26:d9:07:34:8f:e9:6f:cb:22:
1a:d4:f6:90:4f:a2:ef:19:d8:c7:1b:d7:5f:59:4c:
6d:a8:e6:2e:f7:10:68:13:fb:c1:ce:83:18:55:92:
22:82:04:4a:8c:b5:15:4f:3f:8d:4c:40:03:51:69:
ae:79:97:c4:a5:fc:6e:23:ad:e2:e7:5b:9e:f8:74:
d5:20:a2:cd:a8:0e:40:c3:5b:c2:20:32:11:14:27:
1a:10:49:1e:d0:c5:5b:ae:6b:6b:d2:6f:af:7c:4e:
2a:3f:c1:3a:9b:4c:7c:d7:0a:74:48:bf:f7:1a:74:
fc:a3:2a:26:e0:17:08:3b:6a:92:fd:d9:60:bf:fe:
17:5e:79:c1:4e:cc:2e:90:7f:a1:b8:00:fd:7a:48:
ba:c0:35:5f:4d:90:04:f5:b3:2d:85:b6:27:76:68:
5f:37:44:0d:d5:49:e1:dd:17:e7:65:3c:4d:08:ea:
a4:66:33:68:c5:55:99:ba:0e:65:34:eb:32:d6:cb:
eb:4c:44:88:63:ef:de:5b:fa:b3:be:5c:ac:08:76:
15:99:92:4e:c2:4e:4c:10:77:c1:f7:57:e0:43:b6:
4f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:87:B5:A4:5B:E6:4A:0A:6B:05:E2:96:70:FE:D9:A0:10:11:FB:CA
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/1-Ye1pFvmSgprBeKWcP7ZoBAR-8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.22.0/23
185.226.241.0-185.226.242.255
IPv6:
2a0c:7680:1337::/48
2a12:84c0:1::-2a12:84c0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
35:6e:70:d4:d7:7c:70:1e:e3:61:6a:f7:ec:12:f0:33:7a:a6:
6f:ef:1d:17:58:3b:4b:6d:b1:25:65:97:06:0a:96:08:63:ee:
e7:72:87:6f:9f:4c:97:ac:39:38:b3:7d:a9:be:f4:bd:4b:e7:
12:08:30:63:69:ec:32:97:21:fc:32:60:bd:50:71:4b:58:b9:
29:97:55:2b:cf:06:ce:87:2f:4c:72:8d:3e:98:32:e3:bc:07:
e2:e5:f1:a6:41:dc:68:59:b0:2f:d0:f0:5f:66:4c:ee:ba:7a:
9e:06:d1:2c:7e:d3:74:c1:cd:55:eb:3b:5f:0a:a0:3e:08:20:
32:6e:a5:c9:5a:db:b3:2a:f8:ba:07:f9:7c:d2:ee:20:59:9b:
48:d1:6d:23:69:6d:e5:2a:46:2d:87:8e:84:00:02:4a:a3:b5:
37:ce:83:ca:9d:90:c0:46:64:30:d1:a4:13:87:e9:49:05:c5:
5c:d3:ec:d1:ac:57:d7:7d:a4:b3:64:37:c7:23:36:31:42:fb:
eb:90:3d:78:87:b0:94:6e:41:59:4a:93:4f:73:b4:84:8a:c1:
a4:87:49:44:2a:10:d8:c2:32:9d:60:6f:d2:3b:fa:31:9f:73:
cc:aa:e6:29:cf:d2:ac:01:b7:62:39:2b:81:30:4d:e6:aa:01:
e7:c9:12:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:04 2024 by rpki-client on console-ams.rpki-client.org