Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/muWcC-emhHeeuOPBIxDE7IFSnow.roa
File: muWcC-emhHeeuOPBIxDE7IFSnow.roa (raw, json)
Hash identifier: jR+tPGtV0bhRg+FS03qPhrkyD2naLSXKHpsHJDdF+dc=
Subject key identifier: 9A:E5:9C:0B:E7:A6:84:77:9E:B8:E3:C1:23:10:C4:EC:81:52:9E:8C
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C53F89703BF4DBCB89E509DEFCE1CD1
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/muWcC-emhHeeuOPBIxDE7IFSnow.roa
Signing time: Sun 01 Jan 2023 07:55:20 +0000
ROA not before: Sun 01 Jan 2023 07:55:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49544
IP address blocks: 185.120.35.0/24 maxlen: 24
213.190.22.0/24 maxlen: 32
2a06:7a00::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f8:97:03:bf:4d:bc:b8:9e:50:9d:ef:ce:1c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ae59c0be7a684779eb8e3c12310c4ec81529e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:98:bf:75:a4:f6:68:d2:14:1a:c7:82:78:
1c:87:88:78:d2:1e:ee:4a:be:3e:fb:8d:73:13:8b:
e8:4c:e7:f6:23:35:da:79:08:b8:33:18:9b:8f:99:
b7:1d:28:9a:bb:af:52:9a:90:2d:f7:c3:ae:00:8f:
d1:0d:85:b9:e7:c8:21:fa:22:91:67:8d:de:76:77:
38:82:c5:68:2a:3e:10:04:f2:d7:af:51:73:92:c3:
3c:9d:f6:1d:56:aa:7d:2f:b7:79:7a:26:f9:b3:1b:
3f:9c:dc:f9:e7:7c:91:7b:ed:ba:99:24:98:7c:48:
cb:f3:8f:fe:3c:6e:84:48:84:a4:f6:7f:b0:73:b5:
f2:d7:86:af:04:f6:f0:fd:5a:cc:24:8a:75:2d:3d:
da:34:89:c9:ec:8f:72:3c:96:c4:4b:48:d6:cd:7f:
15:35:b3:98:ac:e4:48:40:5c:c7:30:39:1e:1d:7c:
37:ff:df:2a:b0:c5:b0:44:f2:5d:b0:f6:2a:9c:d2:
be:9a:2b:72:bf:4c:07:05:74:ee:30:6c:09:8f:4c:
dc:b0:f2:06:44:47:03:8d:b7:c0:19:94:69:de:3c:
14:c8:fc:90:d9:f1:d4:17:61:99:05:83:a4:da:49:
91:27:36:7b:a9:0a:70:9d:89:5a:7d:93:31:93:ee:
42:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E5:9C:0B:E7:A6:84:77:9E:B8:E3:C1:23:10:C4:EC:81:52:9E:8C
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/muWcC-emhHeeuOPBIxDE7IFSnow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.35.0/24
213.190.22.0/24
IPv6:
2a06:7a00::/48
Signature Algorithm: sha256WithRSAEncryption
be:c2:af:24:9f:c6:f1:d8:25:41:93:e7:46:1d:15:10:4a:ce:
d8:4e:3d:6b:ea:d7:73:a4:b4:6d:50:42:4e:8b:23:f1:3e:da:
c5:69:97:da:c3:a2:53:6d:c3:e9:cb:58:97:31:ac:5e:74:2d:
87:ed:38:3b:31:08:ee:da:80:41:cd:7f:82:ae:68:f7:25:3f:
c0:8b:55:4e:16:f4:aa:58:77:9e:ba:4a:fc:e3:e6:f8:c5:39:
00:cb:d3:8d:e5:0c:8d:77:ef:c4:dd:ff:5a:52:e1:7b:37:54:
24:65:ff:78:cd:be:b1:da:ec:c5:dd:88:32:99:80:8c:73:ff:
d5:ab:e0:a7:d8:99:ee:db:b7:42:79:a5:62:28:60:93:58:9a:
6e:57:c4:eb:da:e1:17:17:65:21:53:e5:6e:b5:33:51:22:c8:
68:88:95:47:54:9d:14:e4:af:d0:4a:1f:a7:11:4b:bb:60:88:
1e:71:96:c0:b3:b3:6c:c4:94:37:61:1e:c9:91:84:ea:48:41:
dc:e0:df:a3:bd:31:35:e7:3d:eb:74:95:e4:07:93:2a:f1:82:
47:de:07:07:3c:53:44:db:13:3f:e1:1b:c2:e2:9c:f8:8e:a3:
f9:e1:32:f2:c8:54:8c:c3:3c:11:10:d9:3a:0d:d1:f0:6b:de:
09:8c:e6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:33 2024 by rpki-client on console-ams.rpki-client.org