Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/8WRTvfuYSOBp5pSqIHdC7uJk05k.roa
File: 8WRTvfuYSOBp5pSqIHdC7uJk05k.roa (raw, json)
Hash identifier: fnVvVQQZqyUhoYbtrXl2YEAYG0SHsLr/eVG/CK4mCJM=
Subject key identifier: F1:64:53:BD:FB:98:48:E0:69:E6:94:AA:20:77:42:EE:E2:64:D3:99
Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial: 018571FA366603E18B6EEA4377E9DA17EF87
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/8WRTvfuYSOBp5pSqIHdC7uJk05k.roa
Signing time: Mon 02 Jan 2023 10:15:01 +0000
ROA not before: Mon 02 Jan 2023 10:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31117
IP address blocks: 217.119.112.0/20 maxlen: 20
87.244.192.0/18 maxlen: 18
212.37.64.0/19 maxlen: 19
185.171.140.0/22 maxlen: 22
2a01:328::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:36:66:03:e1:8b:6e:ea:43:77:e9:da:17:ef:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Validity
Not Before: Jan 2 10:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f16453bdfb9848e069e694aa207742eee264d399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:95:e6:27:df:0c:11:88:14:60:2c:be:92:
93:51:e6:69:28:af:0a:79:00:e5:97:cf:f8:47:e5:
9e:82:9c:59:e0:ef:83:43:a5:59:a7:c4:8c:cb:3a:
fd:7f:24:1b:ba:e8:37:c9:4f:95:d2:e7:3b:24:7e:
07:6f:34:30:0b:34:1c:51:71:04:78:b2:f7:ca:5e:
33:8f:2e:6c:a1:f5:99:37:a3:cd:b0:f0:c1:c8:ee:
48:28:a4:77:4d:92:40:4a:e5:38:2b:36:98:82:85:
a2:93:8a:5e:cf:7d:ae:f3:ca:5f:cd:3d:be:69:f9:
a5:d9:78:88:4c:1d:87:44:5e:9d:16:48:bb:94:58:
0c:84:af:6c:b1:f4:ca:ce:92:5d:ce:70:44:ee:74:
db:53:a6:cc:6b:a3:8b:22:04:89:6a:98:64:71:5f:
19:68:8b:69:7d:dd:79:9f:7a:be:d9:ae:f5:18:e4:
c0:a8:c3:6a:bb:e7:d8:5c:00:d2:6d:a0:4d:fe:fd:
fb:96:6b:66:9a:0f:b3:1d:26:11:c8:f1:88:67:88:
b4:7f:ad:37:29:40:08:87:eb:8d:4d:64:e1:95:38:
bc:bc:12:92:c2:1b:c8:fa:63:a3:ac:54:5a:bd:4d:
81:8a:2e:85:54:95:1e:22:6d:57:5f:bf:5b:2e:34:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:64:53:BD:FB:98:48:E0:69:E6:94:AA:20:77:42:EE:E2:64:D3:99
X509v3 Authority Key Identifier:
keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/8WRTvfuYSOBp5pSqIHdC7uJk05k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.244.192.0/18
185.171.140.0/22
212.37.64.0/19
217.119.112.0/20
IPv6:
2a01:328::/32
Signature Algorithm: sha256WithRSAEncryption
5f:10:2f:2a:0a:ba:cf:af:7a:67:95:75:eb:5b:bc:b7:38:b0:
2e:89:32:c0:0a:0f:8b:32:70:ce:a9:2c:4d:07:0e:b9:c8:1f:
35:5f:5b:2e:f2:29:c7:a3:9f:b0:64:96:ef:6b:e7:e5:3e:e1:
6e:b8:8d:f3:e5:3e:ee:ea:85:cd:35:d7:42:90:a8:ed:c2:d4:
60:8f:af:2b:fe:2a:b0:10:e7:c2:5e:ff:f2:a6:9b:53:77:48:
ca:de:61:bb:61:f6:e5:de:2c:0c:36:f0:52:67:b9:5e:6d:6f:
0a:34:2a:56:9e:00:28:a1:bf:e3:ad:57:09:6d:5e:21:b6:b7:
63:bd:87:da:76:1a:23:af:64:2c:8c:5f:77:23:51:43:fb:dd:
e0:5d:29:46:95:78:0e:d8:a6:a1:2e:72:be:9e:9a:b2:76:c4:
eb:be:3b:d8:3b:20:15:70:4c:53:8a:ed:b0:10:75:26:79:ad:
cb:c6:99:66:93:a7:bb:88:6c:08:61:76:f1:bb:a0:b6:03:aa:
3d:d1:fd:1d:41:ee:6a:32:bf:99:25:88:fd:0c:a4:b7:9e:b3:
73:12:7b:72:c7:b6:da:e2:54:68:c1:6c:15:af:07:fb:1e:4e:
4b:77:b9:de:5d:23:63:cf:d3:74:f1:e8:e6:38:49:58:a1:83:
8a:d6:82:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:51 2024 by rpki-client on console-ams.rpki-client.org