Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/8imn7sdmXfetc0HlFCcWq0gs5xs.roa
File: 8imn7sdmXfetc0HlFCcWq0gs5xs.roa (raw, json)
Hash identifier: kF2NMIqO8Js322AC6qhDRtPgQLY3VKqon5NgL/Jdz8k=
Subject key identifier: F2:29:A7:EE:C7:66:5D:F7:AD:73:41:E5:14:27:16:AB:48:2C:E7:1B
Certificate issuer: /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial: 01857139D6E22138C7ADCD4A1F3090B75814
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/8imn7sdmXfetc0HlFCcWq0gs5xs.roa
Signing time: Mon 02 Jan 2023 06:44:54 +0000
ROA not before: Mon 02 Jan 2023 06:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47692
IP address blocks: 185.190.48.0/24 maxlen: 24
185.190.49.0/24 maxlen: 24
2a0a:441:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 22 Aug 2023 15:11:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:d6:e2:21:38:c7:ad:cd:4a:1f:30:90:b7:58:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
Validity
Not Before: Jan 2 06:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f229a7eec7665df7ad7341e5142716ab482ce71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:9d:49:ac:f3:42:4e:32:f4:2d:45:4d:91:
6c:37:85:48:f3:89:61:6d:a8:41:c1:c4:1a:03:79:
aa:f4:f7:d1:54:bc:7e:6e:d9:48:0c:21:44:78:84:
e4:25:42:90:49:b0:9d:db:d6:3a:db:ae:a3:d9:12:
13:b5:7c:be:bc:8e:de:67:b7:98:8d:12:b2:e4:61:
56:5f:aa:5e:bd:70:aa:8e:7f:93:51:39:db:02:a1:
30:57:e4:7e:e4:e8:21:76:a1:5e:78:60:cc:ed:0f:
c7:42:c1:42:7a:dd:18:ab:bd:17:91:d7:ef:c9:d4:
b6:41:a7:28:7f:6c:cb:b3:dc:14:e5:9a:57:b9:60:
7e:3b:31:c1:73:8b:7a:68:1a:3c:2e:1f:7f:b8:b2:
56:f4:ac:62:05:25:45:fd:0a:b9:8a:28:3d:fc:86:
91:d7:4a:b6:1e:bd:bc:6a:84:fe:45:ba:78:cd:c4:
dd:0b:24:eb:75:d6:9a:ca:76:9b:ad:cb:d0:92:1e:
2b:04:1f:a1:be:29:1f:fc:9e:50:d4:a2:9e:8f:cf:
c5:fd:a1:cd:b8:4c:9d:6a:a1:91:53:2c:a4:9e:53:
21:ec:94:e5:0e:48:8b:bc:51:65:df:59:e3:59:0e:
ed:93:58:b1:a4:8f:e8:56:93:b5:c5:9b:1c:95:14:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:29:A7:EE:C7:66:5D:F7:AD:73:41:E5:14:27:16:AB:48:2C:E7:1B
X509v3 Authority Key Identifier:
keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/8imn7sdmXfetc0HlFCcWq0gs5xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.48.0/23
IPv6:
2a0a:441:1::/48
Signature Algorithm: sha256WithRSAEncryption
35:b2:56:9f:93:4a:3a:ab:59:7a:5d:0d:63:c3:b4:40:a1:74:
72:66:73:bb:dd:80:cf:b7:44:a2:ee:5e:cb:d8:cb:48:fd:17:
37:e4:60:85:8a:0e:02:ce:e6:98:e4:d1:a7:7a:6d:b7:4a:91:
b7:95:69:e7:fc:73:17:6a:03:ed:59:9d:4e:99:a2:b7:58:22:
aa:6c:95:81:fa:64:38:c8:c5:8a:b3:3e:cc:ca:fc:49:b0:46:
0f:6b:25:6a:c6:2f:10:2c:93:9b:d4:41:32:f7:23:03:43:97:
f9:7e:d0:ba:29:71:21:4f:2d:f5:14:b6:90:0f:2b:2a:d2:36:
54:14:b9:bd:9c:cf:19:74:f4:22:5e:36:9b:51:dc:7a:30:5a:
43:1a:d2:19:c5:b7:e9:60:9b:92:f0:6c:3a:3e:10:e7:6c:63:
60:e3:70:10:e5:17:22:af:95:15:8f:66:45:bb:0e:2d:cd:8f:
e2:42:1c:94:1c:a5:c4:06:6a:f5:36:de:80:40:bd:e3:7f:57:
bb:7c:1a:99:21:a1:62:60:fc:02:ea:e2:92:a1:93:f0:08:45:
06:5e:3b:f8:5c:f4:51:c0:70:80:ee:64:8a:20:66:5b:56:3f:
63:60:64:10:39:1c:50:7a:fb:3b:7c:e2:e2:a0:f5:e1:17:7c:
f1:f2:36:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:39 2024 by rpki-client on console-ams.rpki-client.org