Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/8Y3TPAasHfk_EEPFsC7cgKqFTi0.roa
File: 8Y3TPAasHfk_EEPFsC7cgKqFTi0.roa (raw, json)
Hash identifier: ocgO5UUDuZr3QX7IwdEXIfTQCrL1jnNXFjxpxYFEgMU=
Subject key identifier: F1:8D:D3:3C:06:AC:1D:F9:3F:10:43:C5:B0:2E:DC:80:AA:85:4E:2D
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 01880A0488DC4BD57794EA21DA89E0742238
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/8Y3TPAasHfk_EEPFsC7cgKqFTi0.roa
Signing time: Thu 11 May 2023 08:54:09 +0000
ROA not before: Thu 11 May 2023 08:54:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.49.132.0/23 maxlen: 23
185.49.132.0/22 maxlen: 22
185.49.134.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:04:88:dc:4b:d5:77:94:ea:21:da:89:e0:74:22:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: May 11 08:54:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f18dd33c06ac1df93f1043c5b02edc80aa854e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:04:01:34:eb:44:22:da:fe:62:cc:e6:cc:
0b:d3:ad:56:0e:2f:9a:58:ee:0d:e5:6b:03:5d:7f:
c6:2f:75:c0:73:ad:09:1f:8a:a0:15:1e:5a:a8:88:
b6:5b:e1:57:7d:61:b5:0b:c8:7d:6a:16:ab:f1:93:
78:15:93:13:01:f6:e5:57:de:52:71:96:f8:73:32:
ba:6b:b5:f5:8f:c1:a6:f4:21:b1:e0:1d:cd:6c:a6:
1e:5a:a5:20:a4:97:04:c8:d8:6f:5d:83:76:c1:bf:
b4:44:6d:c4:ab:40:f4:88:47:78:6d:87:6d:e4:7b:
5f:1e:11:0c:7a:e2:12:6a:b1:eb:83:b5:f5:c0:8d:
12:7e:1e:6d:22:9d:fd:d9:b6:6f:5e:a5:16:c6:f4:
00:f8:87:f2:7f:ae:2b:6a:8c:8e:5d:c3:6d:83:67:
ba:33:dd:4e:8d:6d:f1:77:55:93:61:65:eb:e4:41:
d8:40:a0:ed:37:f3:37:ec:31:05:27:d2:d2:ad:fb:
32:b7:cc:46:73:b6:58:54:0e:6f:d8:c4:84:2f:14:
72:1b:5c:38:9b:9b:b0:41:c7:84:c0:92:53:02:90:
f4:09:ab:97:68:de:cb:12:92:3d:cb:ac:8e:f0:2a:
c0:4d:c9:3b:fb:ad:fe:e6:76:dd:09:22:f6:fc:bc:
65:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8D:D3:3C:06:AC:1D:F9:3F:10:43:C5:B0:2E:DC:80:AA:85:4E:2D
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/8Y3TPAasHfk_EEPFsC7cgKqFTi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.132.0/22
Signature Algorithm: sha256WithRSAEncryption
03:dd:5c:a4:7b:99:e2:b3:b4:24:c7:1e:39:74:95:50:ed:88:
c4:43:7d:b8:94:f3:1a:9c:08:09:80:c7:30:03:b9:ad:ef:a8:
93:9b:5b:72:ec:5b:d5:c0:76:b3:08:7d:df:a5:fc:2e:9c:f6:
bf:0e:8a:73:af:62:a4:50:0a:00:96:14:7c:c1:69:e7:18:1d:
b6:38:33:81:bd:03:18:4c:13:0b:0c:d8:22:43:4a:8c:58:6c:
45:48:4d:4e:62:97:34:36:02:07:ed:d3:52:32:89:34:0b:81:
f6:13:7f:36:34:69:06:b6:c7:eb:e0:92:19:60:05:09:48:25:
4b:04:41:aa:35:ae:7b:cf:a8:ee:be:a2:79:89:a5:b7:c3:f5:
09:b7:6c:d0:16:48:4e:7c:57:66:40:8b:f2:96:b4:0e:50:c9:
96:b4:6b:01:1f:be:3a:2c:f3:2c:2d:3b:f0:5d:d4:b9:6c:be:
96:0d:17:eb:d7:ba:65:ac:19:de:9a:0c:80:70:70:cf:03:fa:
c8:cc:bb:18:31:50:dd:89:f6:6f:f8:0d:42:48:ff:ca:6d:8f:
d0:2e:77:5c:86:6c:1c:3f:d1:76:77:78:de:07:ff:8c:ce:49:
7c:83:8a:83:c5:55:1e:cd:b1:d3:47:00:78:12:87:d3:70:c4:
12:57:2a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:07 2024 by rpki-client on console-ams.rpki-client.org