Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/nMKLgwS3ZIXQ4yVTGpZo_yq5HzU.roa
File: nMKLgwS3ZIXQ4yVTGpZo_yq5HzU.roa (raw, json)
Hash identifier: hsR5LL22B0WO8mENFFUnPwgp30Z85Ni7LmbyyWoyNWE=
Subject key identifier: 9C:C2:8B:83:04:B7:64:85:D0:E3:25:53:1A:96:68:FF:2A:B9:1F:35
Certificate issuer: /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Certificate serial: 01894A1625D6C2F28831E99FFD7BFAE23335
Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/nMKLgwS3ZIXQ4yVTGpZo_yq5HzU.roa
Signing time: Wed 12 Jul 2023 12:31:52 +0000
ROA not before: Wed 12 Jul 2023 12:31:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201946
IP address blocks: 185.49.8.0/24 maxlen: 24
185.49.8.0/22 maxlen: 24
185.49.9.0/24 maxlen: 24
185.49.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 12 Jul 2023 16:50:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:16:25:d6:c2:f2:88:31:e9:9f:fd:7b:fa:e2:33:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Validity
Not Before: Jul 12 12:31:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cc28b8304b76485d0e325531a9668ff2ab91f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f8:17:1e:b4:ff:c0:c8:4d:df:b5:f2:fe:e5:
8c:c7:aa:21:b2:72:10:81:f3:33:90:88:ee:eb:bb:
72:ac:f3:6d:1e:28:44:22:d6:ff:78:d5:14:0c:87:
7b:cd:38:78:75:12:85:75:10:17:16:34:4f:29:0b:
2e:d7:59:a9:73:db:40:ff:88:d8:d6:06:00:43:f8:
c1:b4:8e:84:9b:1c:e4:ab:f2:06:87:19:8f:48:82:
d9:e3:96:6c:2a:97:4f:0b:a2:7b:48:4b:69:f8:5c:
2b:5c:bc:c3:73:a1:80:60:b5:b4:66:6b:06:2a:5d:
da:a6:3e:46:6c:31:c5:f3:c9:f2:88:eb:45:12:cd:
78:13:b7:f3:c2:77:73:09:80:f3:38:84:5b:f8:e4:
47:32:1e:95:e3:35:07:f8:d2:f8:e1:e7:a3:22:6a:
e1:8a:e0:3d:41:e9:13:17:98:91:3e:9f:38:02:14:
d0:75:f7:2e:d3:0a:3b:5b:47:cf:62:0c:e9:1e:6f:
9a:ab:ee:33:ac:11:ef:ea:49:4d:eb:29:0c:97:ea:
66:30:f8:b2:dc:c4:ca:23:92:a4:65:b7:8d:db:87:
41:4c:3f:91:dd:9d:22:bf:f3:6d:79:51:19:a7:76:
29:00:08:ee:a6:68:13:cd:8a:47:65:af:ec:f1:eb:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C2:8B:83:04:B7:64:85:D0:E3:25:53:1A:96:68:FF:2A:B9:1F:35
X509v3 Authority Key Identifier:
keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/nMKLgwS3ZIXQ4yVTGpZo_yq5HzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.8.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:c4:08:5f:6e:d3:17:61:c8:c0:3e:55:70:01:11:c4:ea:13:
b0:0d:76:0a:31:19:18:48:e3:0b:4a:41:54:4a:07:b4:9e:3d:
82:90:43:ef:b6:ff:9b:f3:aa:b2:1c:cf:e0:96:12:0c:a3:2b:
9e:38:84:d6:ce:c9:91:44:43:55:bf:3c:d6:5a:79:24:4f:34:
e8:bb:95:37:82:6c:74:1b:31:98:36:87:da:7f:a0:fb:4f:58:
55:77:7a:23:3d:91:6f:6c:f8:33:d6:2a:48:10:fe:a0:a8:d9:
a9:92:ec:a1:db:40:7d:2d:15:2a:e4:0f:4b:74:31:a8:1f:83:
f2:5a:50:13:27:1c:8c:af:98:1e:3f:c6:6b:a4:42:48:9e:11:
a6:8c:de:69:25:dd:ec:d2:4e:3d:3e:53:82:9b:e4:54:91:87:
e0:30:99:c8:e5:c4:fb:43:16:0c:59:cc:77:dd:7e:48:96:cf:
15:e8:c3:bd:bf:87:85:85:f4:12:ea:57:0c:78:21:84:4a:6f:
65:04:7d:f3:08:82:4e:f1:32:52:9c:e4:09:d9:ee:fc:cb:5c:
09:24:7f:0a:9c:ad:ac:83:37:da:66:5d:ce:f7:38:6f:ab:15:
57:9d:36:3f:43:0b:99:37:d0:9b:b3:51:d4:4d:a7:39:14:a9:
c0:44:15:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:15 2024 by rpki-client on console-fra.rpki-client.org