Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/Wtr8BdJ2gAgtZ4ukSNgxqlJvJ0Y.roa
File: Wtr8BdJ2gAgtZ4ukSNgxqlJvJ0Y.roa (raw, json)
Hash identifier: mfK/7Id5lIUagjogyKWCGV8p4LfQ5Kr2jJvPM9mxL7c=
Subject key identifier: 5A:DA:FC:05:D2:76:80:08:2D:67:8B:A4:48:D8:31:AA:52:6F:27:46
Certificate issuer: /CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Certificate serial: 018570D4F847DFD671528EA0B958045D3626
Authority key identifier: BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/Wtr8BdJ2gAgtZ4ukSNgxqlJvJ0Y.roa
Signing time: Mon 02 Jan 2023 04:54:43 +0000
ROA not before: Mon 02 Jan 2023 04:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201847
IP address blocks: 185.62.48.0/22 maxlen: 22
185.62.48.0/24 maxlen: 24
185.62.51.0/24 maxlen: 24
185.62.50.0/24 maxlen: 24
185.62.49.0/24 maxlen: 24
2a04:efc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d4:f8:47:df:d6:71:52:8e:a0:b9:58:04:5d:36:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Validity
Not Before: Jan 2 04:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5adafc05d27680082d678ba448d831aa526f2746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:27:0c:f0:e9:5d:58:5d:7c:07:a8:96:a8:
51:b9:98:41:bc:4b:3f:92:24:82:56:f4:e8:83:7f:
1a:15:ad:a3:b5:cd:a0:ad:4e:4b:39:4c:3a:4e:5a:
46:7d:13:08:65:cc:96:b3:62:22:4d:84:b3:57:f8:
74:ca:87:5b:e2:b5:8f:55:2f:ad:ea:68:e7:41:22:
b7:a8:26:43:f4:73:81:31:c8:0b:c0:c9:81:11:d8:
2d:6a:82:71:25:31:3d:2a:41:53:56:05:2f:ff:8f:
3b:3f:3e:92:43:bb:4d:28:66:65:90:07:91:fa:95:
d4:1c:1b:2d:11:68:69:43:ed:c1:48:60:0d:2e:3a:
43:40:7f:4b:4e:38:6b:c1:f1:02:83:6f:0f:54:5c:
89:8b:b4:af:d2:0d:f7:ce:32:38:04:82:a3:5c:0d:
87:3c:2d:0b:b5:4b:07:54:6c:91:76:2f:67:81:21:
05:a5:d8:c0:82:0f:80:6b:9a:87:02:da:5d:15:90:
ed:c5:05:00:eb:74:60:bf:68:32:3b:fa:b6:ff:62:
03:95:8c:b5:26:3f:27:e0:e3:7f:3a:cd:14:a9:07:
db:8e:cb:ec:c5:45:99:74:9c:07:38:85:f0:41:3a:
9b:67:55:f2:7c:1f:cc:c3:c9:33:70:7c:8e:40:2b:
7b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DA:FC:05:D2:76:80:08:2D:67:8B:A4:48:D8:31:AA:52:6F:27:46
X509v3 Authority Key Identifier:
keyid:BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/Wtr8BdJ2gAgtZ4ukSNgxqlJvJ0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.48.0/22
IPv6:
2a04:efc0::/29
Signature Algorithm: sha256WithRSAEncryption
3e:c9:60:73:d7:78:f6:f5:99:82:1f:ff:60:49:b3:0e:8e:d5:
27:d5:a3:aa:74:98:ee:80:18:ea:25:7f:e4:05:a1:3d:6b:d9:
28:21:f0:83:dc:be:57:f5:ba:11:ee:12:77:4d:f7:85:5c:b1:
00:98:bf:31:17:12:6f:31:e4:ab:40:a0:7c:32:83:ed:5c:cf:
87:59:36:4e:73:c4:7b:a6:c0:38:a3:6b:70:5d:53:a3:d7:68:
4b:a2:03:0e:80:48:c9:20:64:7a:50:a8:aa:14:6b:bc:0c:2d:
ea:de:d9:9d:92:4a:ce:5a:0e:06:da:5e:0b:41:ad:63:10:48:
c4:17:4e:47:f0:70:bf:76:ae:53:fc:f0:38:0c:e7:ed:98:a1:
1e:15:a9:32:ec:da:9d:43:be:9b:eb:3b:54:95:30:6a:b7:d6:
bd:5c:d8:05:28:e3:da:fb:89:42:7f:f9:d0:60:b0:a9:2d:1f:
8c:8b:57:71:71:a9:15:27:a5:e5:b4:29:9c:d9:18:71:3c:f1:
77:40:c5:2e:b8:8b:57:4b:c4:45:7c:12:0a:a6:81:99:0c:4e:
af:b7:a8:59:f8:aa:72:cb:a4:79:20:73:66:ce:67:58:81:53:
12:40:e9:56:07:51:24:8f:d3:6c:09:2d:26:96:5a:51:53:b7:
b6:18:ed:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:59 2024 by rpki-client on console-fra.rpki-client.org