Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/1-hw6_66lFt3BukQfK0VthHeNZC0.roa
File: 1-hw6_66lFt3BukQfK0VthHeNZC0.roa (raw, json)
Hash identifier: EaPcIcCwA5zyi436/UOC7PwCmycuXj/B0o242UYQ6HM=
Subject key identifier: FA:1C:3A:FF:AE:A5:16:DD:C1:BA:44:1F:2B:45:6D:84:77:8D:64:2D
Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial: 018571152CD5A68869C0DF637078379B8C5F
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/1-hw6_66lFt3BukQfK0VthHeNZC0.roa
Signing time: Mon 02 Jan 2023 06:04:51 +0000
ROA not before: Mon 02 Jan 2023 06:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209365
IP address blocks: 185.206.63.0/24 maxlen: 24
185.206.62.0/24 maxlen: 24
85.208.100.0/24 maxlen: 24
85.208.103.0/24 maxlen: 24
85.208.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 May 2023 14:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:2c:d5:a6:88:69:c0:df:63:70:78:37:9b:8c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Validity
Not Before: Jan 2 06:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa1c3affaea516ddc1ba441f2b456d84778d642d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:04:75:5f:95:0a:45:30:10:4e:23:22:d7:
a8:aa:53:f2:0e:5f:3e:e4:0e:3e:14:80:e9:23:8b:
7c:b9:da:34:6c:14:73:ba:aa:66:26:5c:93:00:db:
d2:72:08:6a:ce:db:0c:b3:3f:87:53:18:5c:3c:81:
23:79:13:d2:14:95:e5:66:e2:b7:8f:07:0c:bc:19:
bf:a6:55:4c:f7:71:82:88:ab:be:da:68:4b:f0:cd:
ce:ac:77:c0:d8:0c:de:22:e1:45:72:5c:ab:99:95:
97:9c:43:fb:0f:52:d0:35:37:a4:59:76:28:1b:07:
9b:74:48:19:f6:76:c6:f3:dd:83:7c:92:eb:7f:5c:
43:fe:3e:6c:e3:cc:0c:4e:4b:53:f3:f8:74:72:3c:
1a:79:e8:1a:32:12:03:5b:ef:72:a8:87:29:de:00:
45:e5:08:e4:aa:92:ec:9c:e3:b6:55:19:60:f3:95:
57:49:36:0e:9e:88:70:ff:3a:29:14:90:f5:fa:e4:
8d:f9:89:17:21:95:20:93:82:57:79:f5:f2:40:26:
02:a1:3a:7f:1d:1d:b4:60:72:f1:a1:e4:c1:fd:15:
31:3e:44:7c:7c:b9:87:23:d8:8a:f3:e5:c8:de:41:
d5:d9:4a:10:f0:cb:fb:74:65:fe:59:97:e9:5d:ae:
ae:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1C:3A:FF:AE:A5:16:DD:C1:BA:44:1F:2B:45:6D:84:77:8D:64:2D
X509v3 Authority Key Identifier:
keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/1-hw6_66lFt3BukQfK0VthHeNZC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.100.0/23
85.208.103.0/24
185.206.62.0/23
Signature Algorithm: sha256WithRSAEncryption
15:e8:73:18:be:9c:e5:87:97:1a:6b:6a:3e:68:19:e1:d8:cb:
34:68:db:38:fb:2f:53:47:a9:da:2b:4f:23:2b:ba:d6:1f:d5:
9d:b6:06:39:da:c4:a1:19:7f:eb:aa:a6:4d:f3:27:73:e5:a8:
4d:df:5e:ca:7a:54:c3:d7:78:bc:d1:85:a6:91:df:da:1f:81:
fa:6b:dd:88:2e:8f:de:4a:8b:27:fe:ce:48:b4:7f:19:44:4b:
55:60:dc:c1:cb:b2:08:58:8a:7f:26:a4:6f:5e:3d:3f:07:88:
15:8b:78:86:15:8a:49:1f:8a:53:f9:4a:5e:2c:c7:38:eb:f3:
cf:c0:66:b6:77:ba:70:bb:e1:3f:33:67:18:93:99:69:cc:1e:
e6:7e:82:4e:b1:d3:7f:a4:36:ee:63:8c:0d:9f:ef:e8:99:a7:
a2:a2:0f:9e:76:be:cc:22:a4:9a:fa:1c:48:1b:72:3e:70:50:
bf:33:ba:75:82:78:ce:7d:01:9e:14:99:03:ff:0e:8e:cf:5f:
23:2a:dc:6e:13:dc:6c:1b:0c:75:52:68:d3:74:8d:af:4b:95:
60:a8:1b:36:d0:60:59:10:84:51:2e:41:5e:f6:27:b3:20:3e:
35:d4:07:5d:b5:61:44:76:b1:b8:aa:b1:fc:31:f5:43:7a:4e:
6f:9a:e3:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:04 2024 by rpki-client on console-fra.rpki-client.org