Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/fmE2S2KfH3KKlUlc5tVHTFMgO-o.roa
File: fmE2S2KfH3KKlUlc5tVHTFMgO-o.roa (raw, json)
Hash identifier: DI8/wHtgUMCrNHSEA7avK+GhT7Rp+UXr4ppgB48mmuc=
Subject key identifier: 7E:61:36:4B:62:9F:1F:72:8A:95:49:5C:E6:D5:47:4C:53:20:3B:EA
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 018673B21A4D4D5C446B56F6A35B56B11DE2
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/fmE2S2KfH3KKlUlc5tVHTFMgO-o.roa
Signing time: Tue 21 Feb 2023 11:18:17 +0000
ROA not before: Tue 21 Feb 2023 11:18:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61423
IP address blocks: 185.202.132.0/24 maxlen: 24
2a0a:d6c0:9::/48 maxlen: 48
2a0a:d6c0:208::/45 maxlen: 45
2a0a:d6c0:4::/48 maxlen: 48
2a0a:d6c0:efef::/48 maxlen: 48
2a0a:d6c0:efff::/48 maxlen: 48
2a0a:d6c0:208::/48 maxlen: 48
2a0a:d6c0:8::/48 maxlen: 48
2a0a:d6c0:3::/48 maxlen: 48
2a0a:d6c0:eff3::/48 maxlen: 48
2a0a:d6c0:13::/48 maxlen: 48
2a0a:d6c0:11::/48 maxlen: 48
2a0a:d6c0:eff1::/48 maxlen: 48
2a0a:d6c0:7::/48 maxlen: 48
2a0a:d6c0:eff2::/48 maxlen: 48
2a0a:d6c0:2::/48 maxlen: 48
2a0a:d6c0:5::/48 maxlen: 48
2a0a:d6c0::/48 maxlen: 48
2a0a:d6c0:10::/48 maxlen: 48
2a0a:d6c0:eff0::/48 maxlen: 48
2a0a:d6c0:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:b2:1a:4d:4d:5c:44:6b:56:f6:a3:5b:56:b1:1d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Feb 21 11:18:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e61364b629f1f728a95495ce6d5474c53203bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:1c:11:da:ee:16:e3:2d:d1:0b:d9:1b:1f:
e6:35:03:13:19:34:9d:75:cd:ef:d3:11:4c:b8:99:
4c:ed:59:72:91:27:ae:63:30:0f:c0:c0:17:1a:a6:
80:2c:ab:0b:99:02:b7:74:4e:38:97:7a:7c:f5:d4:
5b:a1:33:35:c7:29:43:e3:a3:65:29:2c:3a:93:35:
1c:e2:76:f3:fe:b2:33:5c:82:0d:25:5b:8e:1a:23:
79:b5:03:e4:d4:cf:79:0d:da:a8:da:af:52:d7:11:
fe:a8:14:d5:ce:09:14:75:36:5a:5e:eb:dd:fa:94:
ba:95:d7:b9:91:ee:92:76:d6:6a:4c:8c:3a:41:02:
50:34:7e:8d:b0:7f:e0:10:a6:59:85:57:85:c1:18:
a5:2a:8f:83:3f:58:24:27:46:01:0b:a4:64:a7:9f:
e6:5b:22:62:27:30:34:14:45:af:3f:bd:d5:31:ed:
a1:ac:46:04:e1:e0:57:19:9a:58:cb:3a:17:02:60:
1a:fe:34:e2:92:af:d6:01:1b:bc:33:6d:d4:20:78:
d9:44:10:77:79:ab:68:f1:19:a0:11:eb:42:73:e2:
8b:37:73:61:01:38:0b:fa:1a:7d:00:ec:13:bd:af:
36:c8:5d:24:45:cc:5b:a9:26:d6:71:2a:d0:bd:53:
9e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:61:36:4B:62:9F:1F:72:8A:95:49:5C:E6:D5:47:4C:53:20:3B:EA
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/fmE2S2KfH3KKlUlc5tVHTFMgO-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.132.0/24
IPv6:
2a0a:d6c0::/48
2a0a:d6c0:2::-2a0a:d6c0:9:ffff:ffff:ffff:ffff:ffff
2a0a:d6c0:10::/47
2a0a:d6c0:13::/48
2a0a:d6c0:208::/45
2a0a:d6c0:efef::-2a0a:d6c0:eff3:ffff:ffff:ffff:ffff:ffff
2a0a:d6c0:efff::/48
Signature Algorithm: sha256WithRSAEncryption
8e:1d:97:93:10:60:88:9d:3e:94:75:d8:01:02:44:58:b3:81:
00:06:9d:4e:23:b6:e5:7f:94:b7:23:1d:b9:f1:0a:27:e6:b2:
7c:f7:26:25:be:64:d6:a8:78:6c:29:a0:af:14:bf:86:54:d7:
10:f1:0a:48:ec:af:3c:36:6c:0f:bf:cc:21:9a:de:74:83:f6:
e5:22:2c:d7:26:c2:4a:44:3c:6f:b5:8c:11:6b:de:d5:c7:19:
8f:78:c2:60:1b:6c:18:19:1e:aa:93:c7:33:5d:1e:bc:dc:df:
51:3b:26:e4:ee:a2:eb:af:45:94:0d:b5:c3:97:eb:08:d4:30:
29:3f:d8:91:35:0d:20:9d:21:5b:ae:c6:18:76:69:1f:91:40:
ea:05:b6:64:63:e6:c1:f2:f8:2a:27:df:15:4c:6c:36:71:30:
f4:ba:95:17:70:42:d1:c1:89:33:4d:6d:d2:df:06:b2:82:96:
bd:2f:15:ef:09:ab:70:4c:55:73:aa:2c:ba:24:a4:15:3d:b2:
9e:be:d8:07:ff:e6:00:8c:4e:54:3b:5b:20:c7:1f:6a:00:9d:
6f:d5:e7:0e:91:28:da:79:4d:2b:b6:06:58:b8:c0:88:9e:fc:
4e:7d:bf:35:b7:f8:eb:3a:21:a0:f4:cc:a1:f7:ad:a4:8a:04:
0a:bb:c0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:53 2024 by rpki-client on console-ams.rpki-client.org