Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/UoPsSoe5EH4CnzZ_3viEyikTzI0.roa
File: UoPsSoe5EH4CnzZ_3viEyikTzI0.roa (raw, json)
Hash identifier: i/cah6j2FyCggWJJ/Qjwe/r+M82yOW7FNiw30dABSl8=
Subject key identifier: 52:83:EC:4A:87:B9:10:7E:02:9F:36:7F:DE:F8:84:CA:29:13:CC:8D
Certificate issuer: /CN=9334a82fdc08f0e8de5d848d377e0cc5d97799bf
Certificate serial: 01856E6FAE87BBA4D37B5D09ADE680388E78
Authority key identifier: 93:34:A8:2F:DC:08:F0:E8:DE:5D:84:8D:37:7E:0C:C5:D9:77:99:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzSoL9wI8OjeXYSNN34Mxdl3mb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/UoPsSoe5EH4CnzZ_3viEyikTzI0.roa
Signing time: Sun 01 Jan 2023 17:44:50 +0000
ROA not before: Sun 01 Jan 2023 17:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57928
IP address blocks: 185.49.120.0/22 maxlen: 22
185.49.123.0/24 maxlen: 24
2a01:4fe0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:ae:87:bb:a4:d3:7b:5d:09:ad:e6:80:38:8e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9334a82fdc08f0e8de5d848d377e0cc5d97799bf
Validity
Not Before: Jan 1 17:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5283ec4a87b9107e029f367fdef884ca2913cc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:9d:f1:1a:37:68:4c:b0:9e:e3:39:0f:8c:
b2:7f:7a:b8:56:cd:2b:6b:c1:58:c2:cf:03:5f:48:
ec:c7:32:80:ec:df:87:40:4e:c4:9b:c2:ff:5b:66:
0e:9b:c0:d6:f9:42:78:e8:d9:f3:3e:5d:0c:44:9d:
6b:58:19:2e:05:d1:8a:a7:09:90:d0:c9:b0:8c:9f:
a6:4c:90:52:0b:79:fd:7a:ec:3d:d4:7b:28:50:56:
56:26:c9:d2:4c:f5:d9:29:95:1d:f6:31:13:07:b8:
6d:38:d9:69:94:9e:d1:00:48:c3:91:b6:2c:81:60:
b7:6d:88:25:a5:61:f3:a8:62:4a:cf:ac:94:84:56:
b9:bd:76:6d:25:3f:47:a0:17:26:5d:ce:15:ea:5d:
05:b7:df:87:b0:b1:04:07:f8:0e:15:f7:23:1d:63:
d3:f8:b6:3d:1a:6a:67:3b:1e:c2:ff:ab:92:c4:33:
f2:45:1b:f2:88:83:ec:b3:ab:9d:96:39:38:b6:fb:
5f:89:5e:57:12:26:79:a4:3e:2c:7f:5d:37:28:16:
76:2a:fe:05:12:5f:5b:24:99:b0:41:a1:5e:e2:80:
f2:93:0a:61:a2:4d:59:58:11:25:ca:c6:45:18:87:
28:c0:8e:62:ba:6b:bf:6b:76:57:fd:d4:ce:7e:49:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:83:EC:4A:87:B9:10:7E:02:9F:36:7F:DE:F8:84:CA:29:13:CC:8D
X509v3 Authority Key Identifier:
keyid:93:34:A8:2F:DC:08:F0:E8:DE:5D:84:8D:37:7E:0C:C5:D9:77:99:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzSoL9wI8OjeXYSNN34Mxdl3mb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/UoPsSoe5EH4CnzZ_3viEyikTzI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/kzSoL9wI8OjeXYSNN34Mxdl3mb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.120.0/22
IPv6:
2a01:4fe0::/32
Signature Algorithm: sha256WithRSAEncryption
49:c5:cb:d2:f8:3c:40:20:e8:bf:12:83:4c:f3:28:29:ad:5b:
cc:eb:46:b1:ca:12:18:90:3b:97:b4:48:75:90:e7:5c:ba:51:
01:63:a9:dd:14:33:ab:74:e2:9b:d1:4a:99:2f:8b:7a:d8:83:
8e:b4:62:7c:67:d2:b8:3f:ff:7e:f2:9d:1e:e2:f4:08:ec:b5:
b5:a2:e9:77:2e:72:2b:6c:24:11:d3:6a:3d:be:9a:38:9e:e6:
38:ec:d5:b5:47:52:dd:4c:e6:db:da:64:1c:e8:d4:bf:f9:66:
73:f6:a2:8d:e2:bf:8c:8d:d7:98:0e:64:ce:17:26:b0:8b:1a:
98:de:c3:f3:55:ce:af:3c:7b:90:e2:ff:fd:15:5c:94:d6:36:
d5:b5:00:cf:4d:0d:a8:ef:e6:0f:9f:ed:be:56:b3:78:8d:ab:
45:bf:5f:03:ed:2c:84:11:aa:1d:a6:5a:6c:9c:2b:d0:b1:52:
7f:60:25:0c:18:20:62:ea:a1:d1:d2:3f:c6:72:53:b4:a0:3e:
20:11:30:36:c9:16:f8:41:da:71:85:d2:7d:58:b8:cf:28:ea:
dc:7c:17:f7:84:f0:db:e2:b1:13:32:dc:4f:cd:ce:7d:ae:9b:
6b:db:e6:3d:ca:b0:55:22:62:8c:5a:ae:36:a7:ef:4f:92:0e:
7c:70:f6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:06 2024 by rpki-client on console-fra.rpki-client.org