Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/b-ayb4E9Ij9i6J1iOGV2hKn9xUI.roa
File: b-ayb4E9Ij9i6J1iOGV2hKn9xUI.roa (raw, json)
Hash identifier: //BFY4NKgPWMyBLN4RhAoKFf+0dHjjSGc2NKjuvOnbU=
Subject key identifier: 6F:E6:B2:6F:81:3D:22:3F:62:E8:9D:62:38:65:76:84:A9:FD:C5:42
Certificate issuer: /CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
Certificate serial: 01856CF864D49A47C71914659E65EEEE6363
Authority key identifier: 58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/b-ayb4E9Ij9i6J1iOGV2hKn9xUI.roa
Signing time: Sun 01 Jan 2023 10:54:56 +0000
ROA not before: Sun 01 Jan 2023 10:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8676
IP address blocks: 31.7.8.0/21 maxlen: 24
217.65.160.0/20 maxlen: 24
185.109.138.0/24 maxlen: 24
185.109.136.0/23 maxlen: 24
2a03:9f00::/32 maxlen: 32
2001:1420::/30 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:64:d4:9a:47:c7:19:14:65:9e:65:ee:ee:63:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
Validity
Not Before: Jan 1 10:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fe6b26f813d223f62e89d6238657684a9fdc542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:05:8a:14:9c:1f:e4:02:89:4d:53:9d:7c:76:
3c:7d:ab:9a:13:54:e1:7e:0b:26:ed:17:5a:1d:56:
6c:d1:1c:24:b1:ae:78:73:55:0c:0a:1b:e6:4f:40:
8e:3d:fc:a9:63:dd:59:f6:f6:50:af:f1:4e:f0:29:
2c:4c:3f:95:23:1c:3d:1d:06:33:c9:3d:a0:1a:f5:
c5:1f:c4:70:28:1b:75:db:93:69:37:8f:c8:96:31:
4d:62:93:10:6e:d6:04:c4:76:58:9a:49:1f:f3:7a:
29:91:70:ba:7a:d3:e7:8f:69:10:88:d5:83:95:2d:
34:e9:93:32:f6:ec:d2:64:f0:59:db:0f:d3:f8:5f:
52:05:74:f9:91:0e:1d:bf:d9:5b:b6:7a:86:27:1d:
7f:25:c9:14:14:25:19:75:66:82:c0:38:20:6a:88:
c1:18:ec:7c:50:95:f6:ff:48:5a:7e:28:46:ee:f8:
cb:73:c9:75:f4:30:c7:98:ba:b9:7f:0f:00:de:e8:
58:f6:cf:47:71:e5:e8:49:f5:65:c7:0e:5f:26:5b:
70:ac:8b:05:f5:cf:65:78:22:3a:b4:bc:62:08:7a:
71:8b:69:0e:bc:8d:e9:ed:d2:3b:34:a6:6e:3c:e9:
54:4b:50:b5:cf:ed:9d:bf:3c:4c:41:e7:9a:ff:a4:
eb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E6:B2:6F:81:3D:22:3F:62:E8:9D:62:38:65:76:84:A9:FD:C5:42
X509v3 Authority Key Identifier:
keyid:58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/b-ayb4E9Ij9i6J1iOGV2hKn9xUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.8.0/21
185.109.136.0-185.109.138.255
217.65.160.0/20
IPv6:
2001:1420::/30
2a03:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
b1:eb:05:9f:ac:9d:76:f2:1f:1b:ff:ed:2b:6d:77:a4:bf:7d:
61:a4:d0:75:f1:af:e4:e1:8c:0b:de:80:62:86:c9:53:6e:f0:
74:46:f4:9a:91:2d:6c:cc:21:8e:af:a2:00:97:f9:63:63:69:
8a:01:3c:62:68:40:98:e2:95:69:2a:4c:a4:8f:a8:ad:fe:6c:
c3:9f:f8:a3:7c:33:11:4a:79:a9:8c:46:06:dc:09:87:76:79:
1a:84:14:26:2e:e6:84:36:e9:61:a6:a8:b1:09:51:38:51:17:
be:d9:b6:5e:bc:b1:36:d4:43:4c:47:0e:01:b0:09:de:aa:b6:
fc:a5:24:3d:63:29:5b:88:e0:41:0f:f3:9c:10:38:02:ba:43:
81:82:b3:1f:6d:4e:ef:5c:ab:f1:32:e5:f4:32:74:ba:b1:19:
41:dc:6c:8e:b1:54:7a:89:c3:7f:bb:37:de:de:09:0a:00:55:
35:4c:5c:9d:c8:b9:f9:a1:2f:ac:49:cd:3f:d6:d6:a5:be:07:
14:9e:3d:60:2c:80:89:ad:81:93:ed:38:a7:9e:1e:c2:5a:a7:
bf:e8:e4:1e:86:1a:98:cc:40:fd:57:a6:9c:a7:81:09:5c:7c:
27:30:fc:26:10:5a:d6:aa:8c:79:64:bd:9e:24:f5:9c:42:1e:
37:ee:4b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:12 2024 by rpki-client on console-ams.rpki-client.org