Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/3PF6QcjtQDzz2ak3kwrFSWxXHso.roa
File: 3PF6QcjtQDzz2ak3kwrFSWxXHso.roa (raw, json)
Hash identifier: CcrK8aolE4RTtJL0VUdxmWmLoQb/e2J5BUj5CwJMjEQ=
Subject key identifier: DC:F1:7A:41:C8:ED:40:3C:F3:D9:A9:37:93:0A:C5:49:6C:57:1E:CA
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01874D333689B83ABE183A345FD6BD129F28
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/3PF6QcjtQDzz2ak3kwrFSWxXHso.roa
Signing time: Tue 04 Apr 2023 16:56:54 +0000
ROA not before: Tue 04 Apr 2023 16:56:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 171.22.248.0/23 maxlen: 24
185.244.10.0/24 maxlen: 24
45.146.204.0/22 maxlen: 24
194.116.248.0/22 maxlen: 24
193.42.224.0/22 maxlen: 24
85.208.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Apr 2023 20:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4d:33:36:89:b8:3a:be:18:3a:34:5f:d6:bd:12:9f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Apr 4 16:56:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcf17a41c8ed403cf3d9a937930ac5496c571eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f5:03:a1:c0:63:11:1e:4b:ad:3a:e6:3d:a3:
fa:39:72:3a:fa:eb:5d:33:c9:0b:4c:52:54:a1:14:
5f:ff:72:92:95:1b:64:ad:e7:a2:43:fc:cb:f8:e9:
95:69:dc:d6:cc:e5:54:8c:9f:39:6a:09:ec:3e:cf:
c3:eb:89:5b:35:39:4b:0d:e4:6d:84:c9:8a:af:89:
74:3d:07:cb:c3:ce:c0:66:4a:ec:3a:44:16:c4:f0:
3a:df:94:6f:72:a8:84:fa:4e:46:ae:91:11:ad:8d:
4e:64:a1:65:33:74:39:a0:f0:ee:be:18:b2:d1:c7:
39:4b:50:95:4e:66:ed:7b:10:73:e0:5a:be:34:ac:
66:eb:d3:d1:8b:d8:e8:ea:55:8c:b3:1b:f5:0e:3d:
a5:cc:ab:ae:0f:28:e9:37:d9:ad:e3:5f:88:a6:e4:
16:d7:96:e3:f7:52:5d:e7:4d:c2:32:ac:86:8e:74:
d5:49:bd:bf:e9:32:c6:1e:2b:fa:2a:de:c7:56:c1:
1e:76:ef:06:9b:49:0a:38:c2:e4:ff:38:0b:bd:90:
c4:92:18:9a:7b:18:08:26:c3:a8:1c:c5:12:b4:d1:
db:89:ff:4d:79:1d:cb:8c:6e:e4:b0:de:e4:38:06:
0c:5f:93:84:c2:db:a9:f3:87:1f:11:9f:f2:56:d9:
49:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F1:7A:41:C8:ED:40:3C:F3:D9:A9:37:93:0A:C5:49:6C:57:1E:CA
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/3PF6QcjtQDzz2ak3kwrFSWxXHso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.204.0/22
85.208.32.0/22
171.22.248.0/23
185.244.10.0/24
193.42.224.0/22
194.116.248.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:01:f7:8d:96:9b:99:e4:03:7a:d8:e8:95:a2:ed:b7:89:f6:
53:06:61:af:45:10:c7:d0:63:18:a4:3f:2a:ce:c4:29:af:c1:
65:f8:52:5c:26:0b:21:0f:35:f5:4a:d8:6f:89:1f:83:2c:49:
c1:fe:db:ff:f7:7b:84:06:af:3d:19:e6:85:5a:a2:89:1b:4d:
81:dc:c1:59:c8:d2:33:7a:75:2d:f9:08:79:56:a5:4c:b0:da:
32:0a:b1:d4:17:78:65:4a:45:d8:4a:94:84:c9:5a:81:93:c1:
e8:8c:3c:50:54:eb:67:e0:a6:d4:12:ce:b3:03:0e:49:0c:33:
23:d1:9a:21:25:63:24:97:61:31:66:e2:4b:6a:09:f5:75:d6:
45:9a:68:ce:95:0b:40:65:04:41:f7:be:19:07:ba:ae:30:55:
56:f1:42:fb:b0:10:d1:a1:25:bf:4b:04:ec:03:2e:19:78:9c:
7d:ee:f8:1e:d8:ff:98:c2:5c:04:e4:38:e1:4b:ce:b7:aa:01:
bb:24:32:17:a8:8c:ed:49:01:92:05:10:50:26:74:e9:80:a4:
ae:d7:ab:77:22:36:b5:f4:aa:5b:3c:ea:1b:4f:20:cf:68:8b:
7b:ab:9c:91:74:09:75:6f:f8:7d:f1:cf:1b:38:6e:41:a7:bd:
d2:c6:7b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:36 2024 by rpki-client on console-ams.rpki-client.org