Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/F8JJpuuZwZfkAlX3wyc9tSc_A8I.roa
File: F8JJpuuZwZfkAlX3wyc9tSc_A8I.roa (raw, json)
Hash identifier: uki/WcSYG7rmXNR8m0ds0szpHHSoDypKhTscNvkCzlQ=
Subject key identifier: 17:C2:49:A6:EB:99:C1:97:E4:02:55:F7:C3:27:3D:B5:27:3F:03:C2
Certificate issuer: /CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Certificate serial: 018571699CB06ED4A3508FAC323FB3D53FD4
Authority key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/F8JJpuuZwZfkAlX3wyc9tSc_A8I.roa
Signing time: Mon 02 Jan 2023 07:37:04 +0000
ROA not before: Mon 02 Jan 2023 07:37:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30848
IP address blocks: 185.116.62.0/29 maxlen: 29
185.116.62.0/32 maxlen: 32
185.116.62.0/24 maxlen: 24
185.116.62.0/30 maxlen: 30
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:9c:b0:6e:d4:a3:50:8f:ac:32:3f:b3:d5:3f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Validity
Not Before: Jan 2 07:37:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17c249a6eb99c197e40255f7c3273db5273f03c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:43:d8:bb:dc:ef:29:2d:61:19:96:dd:85:
ee:92:c4:f7:30:c3:fd:08:9e:4c:cc:64:3f:a0:61:
61:79:53:c2:33:a0:8b:ad:35:cd:7d:4d:d1:05:80:
53:65:aa:1a:71:a8:1a:3c:1b:18:63:09:14:50:61:
9f:bb:10:cf:1e:a8:19:32:af:32:01:ff:08:33:46:
6e:6b:cd:47:17:20:3b:9a:fd:1a:97:48:88:c3:13:
2a:60:d9:bf:0b:f1:19:86:3e:18:71:16:84:f5:f7:
4d:dc:e6:6f:fe:ca:ff:04:72:85:5a:f2:86:43:f7:
04:1a:d1:ba:45:da:b6:8d:19:1b:a3:a0:fb:8a:b3:
56:de:14:90:6b:80:77:73:78:07:52:bf:ce:d0:fa:
02:ce:53:c3:81:1e:2f:b6:db:9a:eb:e9:ed:79:74:
3a:99:fa:d1:8a:68:c5:0e:6e:3d:b0:fa:64:ef:3e:
3a:6b:19:ad:50:9d:e3:f4:b0:fb:76:f0:46:94:dc:
17:73:89:c5:db:c0:54:a4:03:b4:57:ae:bd:78:7e:
6f:ff:7f:4b:77:2d:fb:48:50:03:1e:9a:98:31:b6:
f5:13:4c:16:53:e9:4b:eb:9a:e5:f5:c1:82:75:38:
0f:15:9a:7c:60:3b:53:0a:5a:8a:43:53:2b:e6:61:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C2:49:A6:EB:99:C1:97:E4:02:55:F7:C3:27:3D:B5:27:3F:03:C2
X509v3 Authority Key Identifier:
keyid:36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/F8JJpuuZwZfkAlX3wyc9tSc_A8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.62.0/24
Signature Algorithm: sha256WithRSAEncryption
40:32:3a:68:ec:d2:f9:fa:7c:b3:9d:96:97:12:53:e9:15:9a:
f9:d0:76:34:07:0a:e4:93:9a:0a:d1:0c:2d:17:0a:17:84:aa:
c5:09:07:c1:b3:92:32:44:86:8b:d0:86:a3:25:89:67:c3:25:
8c:17:65:a7:5a:78:73:27:7e:26:47:ef:89:19:29:55:2c:aa:
40:ae:cd:52:f4:26:48:41:9b:64:10:af:55:d6:1d:1f:95:40:
c8:49:ba:2d:1b:4f:d2:62:17:d5:df:c6:24:48:ca:48:8e:dc:
c0:3e:d5:0e:48:b9:b0:11:ef:e6:fb:2b:41:12:fd:66:b8:4d:
71:08:a5:7a:50:6a:f6:73:c1:c8:8e:e8:15:4b:71:f5:fc:71:
36:ef:66:a3:d6:54:2b:9c:1c:6d:7b:04:d1:a2:e1:da:13:76:
89:50:87:f7:9d:7b:23:97:d4:53:b6:63:f3:08:d7:af:b8:0d:
cc:bd:8d:80:da:ab:41:0d:c9:23:54:ea:76:2a:b8:e9:2b:16:
f2:31:89:40:3b:50:14:2b:25:88:5c:cc:b9:24:2f:48:3b:4b:
be:1a:8e:fa:7d:79:43:d9:26:e9:97:fa:7b:f0:69:82:7f:c2:
50:45:69:c9:f3:3d:b2:85:c3:a8:23:cc:07:1f:37:78:b8:40:
9e:1e:be:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:00 2024 by rpki-client on console-fra.rpki-client.org