Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/mQak8uqEFuNolMGw1rS2Bcs7u-M.roa
File: mQak8uqEFuNolMGw1rS2Bcs7u-M.roa (raw, json)
Hash identifier: cRO228OHcbAmGXzJoww09xW7VCperFLfZHypEjr4AXk=
Subject key identifier: 99:06:A4:F2:EA:84:16:E3:68:94:C1:B0:D6:B4:B6:05:CB:3B:BB:E3
Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial: 018570B05B49BE91B4C821D3EF3EB4B222DC
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/mQak8uqEFuNolMGw1rS2Bcs7u-M.roa
Signing time: Mon 02 Jan 2023 04:14:43 +0000
ROA not before: Mon 02 Jan 2023 04:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205726
IP address blocks: 185.208.58.0/24 maxlen: 24
185.208.57.0/24 maxlen: 24
185.208.56.0/24 maxlen: 24
185.208.56.0/22 maxlen: 22
185.208.59.0/24 maxlen: 24
2a0b:31c0::/29 maxlen: 29
2a0b:31c0:1337::/48 maxlen: 48
2a0b:31c0:2::/48 maxlen: 48
2a0b:31c0:1::/48 maxlen: 48
2a0b:31c0:5::/48 maxlen: 48
2a0b:31c0::/48 maxlen: 48
2a0b:31c0:3::/48 maxlen: 48
2a0b:31c0:563::/48 maxlen: 48
2a0b:31c0:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:5b:49:be:91:b4:c8:21:d3:ef:3e:b4:b2:22:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Validity
Not Before: Jan 2 04:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9906a4f2ea8416e36894c1b0d6b4b605cb3bbbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c9:b5:0c:5e:d0:71:fa:84:57:df:31:10:2f:
e2:95:6d:e8:ed:d3:f5:61:0d:cf:2f:25:cd:7d:e0:
df:08:03:07:0e:db:e8:b2:66:ab:a3:92:32:1d:5c:
80:43:3d:4b:04:d5:4a:da:5c:47:95:ba:2b:cb:78:
26:a6:54:de:5e:5c:c1:1e:0b:21:28:b3:02:6c:d9:
ff:e8:90:3a:5c:9e:ea:85:dd:f9:2a:34:6c:8f:c5:
98:b6:41:1f:5d:47:bb:0e:e6:b7:49:9e:be:f4:d1:
a9:e8:04:c8:91:50:dd:f1:2f:0c:c1:26:96:cd:bb:
cd:1a:8a:c6:04:d6:a7:f3:9f:9a:29:c8:ab:95:c8:
22:1e:96:59:54:9a:4c:31:83:13:67:f5:01:49:32:
d1:65:ba:b5:a4:8d:83:07:92:3b:d0:1e:d2:0b:ea:
e6:66:58:0f:31:50:99:84:cb:d1:1b:d0:46:b0:8c:
d3:17:97:62:25:7b:7a:fa:a5:37:31:e0:bf:8b:9a:
cc:4d:eb:19:40:55:b5:d0:8a:0e:32:1c:fb:ba:18:
0f:e3:70:27:22:01:a8:c4:fe:00:48:28:e7:18:34:
18:3c:c6:4d:db:9e:65:7f:0d:f8:06:04:c8:3f:0e:
56:99:b4:33:5a:01:d2:cf:73:44:db:65:3c:64:da:
35:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:06:A4:F2:EA:84:16:E3:68:94:C1:B0:D6:B4:B6:05:CB:3B:BB:E3
X509v3 Authority Key Identifier:
keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/mQak8uqEFuNolMGw1rS2Bcs7u-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.56.0/22
IPv6:
2a0b:31c0::/29
Signature Algorithm: sha256WithRSAEncryption
3a:17:1d:8c:82:6e:81:04:b0:dd:ce:41:0f:3a:1c:a5:1b:74:
71:f6:89:62:f4:ba:3b:87:74:e3:2b:1b:ca:eb:cb:a2:da:70:
de:50:c8:a8:9a:4e:a6:f1:76:23:4e:af:51:a1:78:95:9c:da:
93:aa:6d:80:4b:5f:da:34:fb:a2:13:89:30:ea:86:b0:bc:c2:
b1:3c:7e:aa:4e:a8:5a:0e:e3:07:0a:21:08:4e:e4:92:f5:4a:
be:7c:ee:b4:e8:7e:89:d6:c2:64:fa:c4:7c:5b:54:a8:b5:be:
4d:5f:70:e5:38:42:a6:92:07:bd:d4:82:1f:d8:aa:49:c5:ed:
f1:44:f3:f9:1c:42:c2:f8:9b:d9:19:37:07:aa:42:59:37:29:
12:d8:49:82:b0:69:96:ba:d8:87:30:0b:bb:30:1f:0e:ed:37:
b2:fd:c6:b3:6c:45:0a:ac:58:7a:f5:ae:4f:25:e6:9b:d7:17:
ce:8e:63:55:21:58:46:10:dd:64:b7:b6:dd:71:af:5e:18:ab:
00:c2:b2:78:f1:8a:bd:33:98:43:72:89:b7:ab:8a:ff:81:d0:
e4:c1:e6:f2:df:b7:5d:f1:7e:0d:f9:d6:5d:7f:59:26:a8:38:
a2:72:81:91:9e:51:74:5b:53:7e:55:ae:0a:72:00:9c:26:29:
ec:1c:93:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:21 2024 by rpki-client on console-fra.rpki-client.org