Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/mwQxE_0sNj5tWWtqfa1GOuZOtMU.roa
File: mwQxE_0sNj5tWWtqfa1GOuZOtMU.roa (raw, json)
Hash identifier: Bpzy38AMa04E1C+Q2sRl6RHgcirblvxFqkNfPIejehM=
Subject key identifier: 9B:04:31:13:FD:2C:36:3E:6D:59:6B:6A:7D:AD:46:3A:E6:4E:B4:C5
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 01856D0A9986D9DB770D14D8EB3FAA1B38B2
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/mwQxE_0sNj5tWWtqfa1GOuZOtMU.roa
Signing time: Sun 01 Jan 2023 11:14:49 +0000
ROA not before: Sun 01 Jan 2023 11:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62040
IP address blocks: 185.49.240.0/24 maxlen: 24
185.49.243.0/24 maxlen: 24
185.49.242.0/24 maxlen: 24
185.49.241.0/24 maxlen: 24
2a04:bb80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:99:86:d9:db:77:0d:14:d8:eb:3f:aa:1b:38:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Jan 1 11:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b043113fd2c363e6d596b6a7dad463ae64eb4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:03:00:cf:69:4e:1d:55:bd:db:5c:15:64:be:
01:eb:ae:a3:95:0a:c2:a9:3a:24:fd:35:8e:58:c7:
a5:8e:20:7a:2f:e7:45:f7:40:7e:26:ce:e8:af:cf:
ee:fb:d1:c7:7d:ed:96:d9:85:fa:3b:fa:05:e9:86:
b1:ca:aa:61:51:55:97:27:ae:f5:41:22:b9:7f:34:
47:54:9d:b5:7d:ac:78:9f:0a:ef:5a:12:5f:e5:cd:
6a:d5:37:7f:2f:42:63:4c:44:d5:59:28:80:0d:7f:
5e:17:4f:36:d1:30:98:86:93:2e:c7:ec:41:1e:30:
57:b2:d7:f5:4f:0d:d2:9a:fb:d0:6c:5c:31:aa:d2:
9d:dc:70:0a:d2:cc:dc:49:85:da:0c:0d:0d:e2:2d:
ae:6e:62:5c:38:2e:11:6a:51:0c:03:4f:a0:b3:35:
b4:fd:44:7d:04:2f:ad:c9:16:81:c8:74:68:b5:f7:
f0:a5:80:b7:63:bf:83:57:ce:c1:24:1b:29:66:9d:
2c:27:31:a0:bc:92:fb:27:47:94:0f:74:3e:07:89:
a2:46:05:6c:65:03:ec:5b:c2:9a:b7:df:27:a8:2d:
f6:89:98:e8:3a:32:42:a4:39:77:34:73:08:d5:d6:
d7:4c:be:ae:ff:c3:44:b5:7b:2c:63:77:11:50:76:
c9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:04:31:13:FD:2C:36:3E:6D:59:6B:6A:7D:AD:46:3A:E6:4E:B4:C5
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/mwQxE_0sNj5tWWtqfa1GOuZOtMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.240.0/22
IPv6:
2a04:bb80::/29
Signature Algorithm: sha256WithRSAEncryption
34:2c:0e:de:79:90:4f:f6:57:f4:40:19:ff:bc:2e:89:e3:60:
19:b6:fc:c7:7f:f4:e3:8e:70:67:2d:dd:e6:5d:31:57:21:9b:
56:ad:f5:33:8f:fa:8f:df:56:9d:06:1c:a0:f0:e7:f7:ff:22:
35:ec:b5:b8:33:d5:e0:7c:96:eb:db:e3:e8:3a:e8:05:81:b2:
43:96:03:05:92:2e:92:9b:b3:67:dd:e3:95:a6:4d:52:b4:a1:
98:8b:12:f3:5d:c5:8a:7e:59:fe:f4:d8:3b:71:47:f8:53:30:
3b:65:66:46:a5:25:64:30:73:4f:48:37:58:32:1d:26:8a:03:
f3:10:63:16:40:df:e6:34:1e:df:f8:38:7a:c8:21:3b:f0:14:
53:f4:76:33:85:60:36:70:2f:3d:60:ff:e5:e9:dd:6f:b0:08:
95:f7:86:35:e2:67:b9:ed:89:62:34:42:e5:74:c0:5b:51:a1:
e4:28:a2:0a:65:0e:e5:f0:b5:2e:c9:e3:42:24:06:9d:b9:10:
f1:0d:39:20:b7:6a:31:b5:f4:c2:6d:65:c2:de:6f:41:f4:89:
05:70:13:3a:63:8c:61:db:2a:b7:92:27:55:82:98:93:73:ca:
4b:9e:cf:90:d3:51:83:f5:69:e9:99:0f:fb:d1:6e:c0:f4:9a:
99:28:c3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:43 2023 by rpki-client on console-ams.rpki-client.org