Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/1-pYmGL0Dzg_8WqczqwD3nazsMYU.roa
File: 1-pYmGL0Dzg_8WqczqwD3nazsMYU.roa (raw, json)
Hash identifier: /vhjr1B2NXrbsx0VnzSXl16n7DCmLaCYJaJHBJ1URk8=
Subject key identifier: FA:96:26:18:BD:03:CE:0F:FC:5A:A7:33:AB:00:F7:9D:AC:EC:31:85
Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial: 01856D4ADACFFC6126675D3EBF2A2480BD7B
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/1-pYmGL0Dzg_8WqczqwD3nazsMYU.roa
Signing time: Sun 01 Jan 2023 12:25:00 +0000
ROA not before: Sun 01 Jan 2023 12:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203352
IP address blocks: 185.131.80.0/23 maxlen: 23
185.131.80.0/22 maxlen: 22
185.131.82.0/23 maxlen: 23
2a06:97c0::/29 maxlen: 29
2a06:97c4::/30 maxlen: 30
2a06:97c0::/30 maxlen: 30
Validation: Failed, certificate revoked on Tue 18 Apr 2023 13:44:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:da:cf:fc:61:26:67:5d:3e:bf:2a:24:80:bd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
Validity
Not Before: Jan 1 12:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa962618bd03ce0ffc5aa733ab00f79dacec3185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:8d:7a:67:4f:1f:26:db:e2:03:2e:e9:c5:
e4:27:47:e4:7a:7e:09:eb:3c:c4:db:d5:7b:1f:92:
38:5f:13:3a:15:b4:40:ff:e1:29:ed:87:e5:4e:e4:
f0:1b:99:85:a7:2e:1d:be:25:ca:67:c3:b5:00:4d:
42:89:4c:78:02:29:06:98:40:bf:9e:fd:17:42:6a:
f3:e3:a3:a5:db:3d:9c:66:d9:06:48:78:61:82:17:
4e:d7:a9:07:57:56:bb:ec:9f:84:ea:47:83:b5:5a:
4a:0f:37:7c:46:f0:cb:cd:b0:5e:8c:5e:d8:5a:00:
b0:9b:8a:e6:74:29:f3:8f:cb:ad:e8:94:38:16:f2:
3d:33:02:bf:b8:ab:86:6c:a8:6f:a8:9d:83:5d:03:
54:d8:47:7a:c2:6c:66:76:40:c1:9f:3f:fe:c3:86:
55:64:b0:fb:78:af:02:0b:09:8b:7d:1d:ce:5b:d0:
77:70:cb:b4:6b:0b:44:a6:3c:03:c5:33:df:8a:56:
0f:53:f6:55:9b:b0:5c:97:e3:36:86:59:20:34:37:
13:e4:78:c8:1e:ee:2d:87:99:7a:94:d8:3b:ac:bd:
42:99:c9:01:5b:49:58:8b:4f:92:45:97:50:3a:a8:
fe:f1:e5:34:a3:ef:69:e1:0a:73:d6:7f:f6:cf:a7:
69:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:96:26:18:BD:03:CE:0F:FC:5A:A7:33:AB:00:F7:9D:AC:EC:31:85
X509v3 Authority Key Identifier:
keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/1-pYmGL0Dzg_8WqczqwD3nazsMYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.80.0/22
IPv6:
2a06:97c0::/29
Signature Algorithm: sha256WithRSAEncryption
9b:4f:5a:b9:05:07:81:29:5e:dc:ca:7e:0d:ad:c7:36:eb:cf:
54:0b:f4:71:b1:e8:fb:83:37:ce:11:33:b5:f7:16:de:54:68:
97:54:6d:ee:1a:69:a0:4a:d0:ab:32:56:0f:da:9a:72:87:ae:
da:09:a2:ae:bf:28:36:1f:c6:56:3d:ac:5c:be:9c:cc:a8:74:
49:c0:87:99:35:e7:c4:8a:01:82:9e:26:6b:71:a9:c4:e7:7a:
b3:09:0b:2d:bb:d0:2e:f8:47:ab:98:35:a8:87:b9:4f:ee:7c:
56:69:ff:9a:eb:1f:2e:a4:8a:9f:e1:bd:95:f4:76:5e:f9:ae:
48:39:b7:a3:39:21:60:e6:cc:b8:a9:ae:21:41:b2:57:f9:37:
62:21:97:ad:a3:ae:65:ef:d5:f0:ad:00:f0:cc:e3:31:3b:7e:
53:48:10:30:fc:d3:e8:b9:89:d1:44:cd:1f:43:6e:b6:d9:d0:
e2:9d:f1:ca:0a:33:a0:bb:f5:13:99:6f:39:2b:2b:4b:e8:05:
56:89:7d:ae:8e:7a:e5:2a:46:4d:63:0c:8d:e8:9b:e6:6a:f6:
3c:42:17:9d:7b:fa:b4:d6:24:30:80:d8:12:66:0f:29:55:36:
88:a7:f8:f4:e0:85:d0:e5:05:60:b4:0d:9c:42:99:75:a8:d0:
0a:b0:33:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:00 2024 by rpki-client on console-ams.rpki-client.org