Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/guyQUMllLrfjDdVEHjXPeGUiefs.roa
File: guyQUMllLrfjDdVEHjXPeGUiefs.roa (raw, json)
Hash identifier: mK0vVGgEH/SU30Ph2kUZOx7hh/xQtiB77FGkfNDtXuE=
Subject key identifier: 82:EC:90:50:C9:65:2E:B7:E3:0D:D5:44:1E:35:CF:78:65:22:79:FB
Certificate issuer: /CN=c7485e29f118c01be86c19e668facfa485de718c
Certificate serial: 01856C938FBB302EE5C82DB1AD7E55D2BF21
Authority key identifier: C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/guyQUMllLrfjDdVEHjXPeGUiefs.roa
Signing time: Sun 01 Jan 2023 09:04:47 +0000
ROA not before: Sun 01 Jan 2023 09:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44472
IP address blocks: 86.111.52.0/23 maxlen: 24
2a12:c440::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Apr 2023 20:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:93:8f:bb:30:2e:e5:c8:2d:b1:ad:7e:55:d2:bf:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7485e29f118c01be86c19e668facfa485de718c
Validity
Not Before: Jan 1 09:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82ec9050c9652eb7e30dd5441e35cf78652279fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:33:82:cb:71:2b:e0:3f:87:a0:f0:68:5a:5d:
e4:d1:6d:78:92:ff:a9:13:ee:2f:35:25:f5:9e:66:
cc:e0:e2:43:2a:7c:77:2e:27:1f:44:a1:0b:47:23:
db:2a:6c:0a:26:f6:79:3a:7b:b0:ef:dd:49:f7:23:
27:b9:02:a9:e3:f2:e6:1f:5e:5a:07:00:bb:5f:ba:
0c:e9:68:e0:1a:59:4c:38:65:71:f9:35:97:a0:06:
5c:93:27:04:b3:a8:12:1b:2e:52:ed:73:1c:3d:0d:
26:d3:99:b2:92:4e:12:05:b2:40:f6:74:58:fb:66:
86:73:a0:00:11:3c:04:59:3b:88:a9:31:49:6f:f3:
46:5d:b4:a7:53:ef:6f:c1:23:ce:e0:99:ec:9c:56:
f8:ad:aa:f1:11:cd:cd:ca:0a:fb:ef:61:cb:dd:4e:
ad:a3:99:1c:e6:63:a1:ee:91:cc:57:fc:b5:18:a0:
6b:86:2e:db:06:32:a4:a6:c5:41:57:8c:61:d3:60:
d3:8e:6a:86:69:38:d7:9d:8b:1e:f5:81:94:91:3d:
ab:21:83:f0:26:df:23:f3:85:6c:7c:e7:f0:47:b4:
ce:22:cf:61:e6:9e:4d:0f:89:f8:86:55:78:39:8d:
75:f3:83:0f:8f:06:d5:08:1e:c9:fa:ba:e1:f0:d8:
74:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EC:90:50:C9:65:2E:B7:E3:0D:D5:44:1E:35:CF:78:65:22:79:FB
X509v3 Authority Key Identifier:
keyid:C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/guyQUMllLrfjDdVEHjXPeGUiefs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.52.0/23
IPv6:
2a12:c440::/29
Signature Algorithm: sha256WithRSAEncryption
a3:c8:b4:da:ac:a8:f4:6f:c7:6b:73:4f:3a:7f:0b:50:01:a8:
e9:6c:17:5d:d4:5e:ad:d8:ed:6b:e7:3f:9a:d5:d4:51:77:22:
aa:4d:d7:43:00:95:b2:b7:fe:1f:fe:27:d2:48:d5:91:8c:11:
d0:29:29:49:39:4d:02:37:0b:75:23:ec:64:f5:3e:5c:ed:1c:
5f:1e:45:81:b2:1e:e8:68:d2:aa:cc:f3:b5:42:d6:a4:7a:5d:
0a:7f:bc:df:2a:79:eb:1b:2b:42:d1:7e:50:1a:77:5a:3d:27:
8f:21:58:64:1f:4b:87:a3:a9:f4:6f:59:e5:93:ac:81:3a:da:
36:d1:76:94:52:90:69:ab:ce:7f:28:c7:01:1d:d7:fc:78:18:
26:37:01:a1:3b:1a:cc:7c:04:c3:31:f8:04:6b:0c:cd:9c:70:
4d:13:14:b6:4f:10:0c:c4:4d:6f:ae:20:6e:c5:48:14:58:f6:
ce:45:b6:94:7b:65:81:17:b3:8e:71:e4:53:a1:9f:fe:ca:3a:
19:e0:f2:d9:74:e7:d5:04:e8:d1:7f:07:71:89:be:1c:79:19:
1b:fd:62:4c:4c:71:d8:33:2b:33:5c:53:c2:fa:d5:a0:f1:73:
9a:af:6e:30:4e:fe:a1:31:18:90:16:74:41:3d:95:af:89:74:
93:21:8f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:45 2024 by rpki-client on console-fra.rpki-client.org