Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/1ZZiR_MsjdTT25Ei_X1zEzsiJl4.roa
File: 1ZZiR_MsjdTT25Ei_X1zEzsiJl4.roa (raw, json)
Hash identifier: JuIWPA8gsHEUhDo4by58IhlqZ2ZNARm27H8MdXqaFFQ=
Subject key identifier: D5:96:62:47:F3:2C:8D:D4:D3:DB:91:22:FD:7D:73:13:3B:22:26:5E
Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial: 01856E81EF89F9FD792DE00DEB3D7024A065
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/1ZZiR_MsjdTT25Ei_X1zEzsiJl4.roa
Signing time: Sun 01 Jan 2023 18:04:47 +0000
ROA not before: Sun 01 Jan 2023 18:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210008
IP address blocks: 185.230.182.0/24 maxlen: 24
185.230.181.0/24 maxlen: 24
185.230.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Dec 2023 07:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:81:ef:89:f9:fd:79:2d:e0:0d:eb:3d:70:24:a0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Validity
Not Before: Jan 1 18:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5966247f32c8dd4d3db9122fd7d73133b22265e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:b9:95:63:27:ff:90:ab:7a:04:18:af:bb:
de:44:73:fb:7f:1c:0c:f7:0f:46:36:4f:d0:b8:5b:
d3:73:1e:b7:d1:93:cf:ec:9e:13:6f:be:e8:09:aa:
e5:c0:8c:3d:54:8c:67:3b:ae:55:77:44:16:c5:dd:
9f:3b:bf:0c:a6:a3:ca:b5:28:8f:3c:59:9a:7b:51:
0b:4b:c1:cb:3c:9a:ce:0c:bb:0f:6f:d9:37:96:43:
21:47:e9:ee:4e:09:64:6f:bc:c4:a9:69:a0:bb:05:
77:e8:b9:be:c0:b7:d2:13:73:96:e9:68:2e:70:8e:
21:4b:0b:aa:7d:99:01:05:89:e4:2a:e5:00:0c:a4:
7d:52:22:ab:00:ff:69:1f:18:66:b5:3a:8f:6f:48:
16:67:a4:17:24:23:85:8a:ed:1d:91:e8:99:71:f3:
9d:76:2a:6d:a7:ce:13:fd:ad:a7:d1:19:86:ec:22:
8b:c4:10:d4:13:79:53:bb:3a:ed:74:a3:78:cc:75:
c2:35:9a:53:97:e2:37:15:1a:17:55:3f:79:08:3c:
c4:9d:4d:8d:99:cc:c5:cb:1a:4f:58:04:f1:0e:ce:
58:99:03:54:1d:0f:82:7d:2d:29:3b:29:2c:dc:c9:
98:25:d5:a2:58:6d:ce:be:8b:2a:86:4a:22:6c:f2:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:96:62:47:F3:2C:8D:D4:D3:DB:91:22:FD:7D:73:13:3B:22:26:5E
X509v3 Authority Key Identifier:
keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/1ZZiR_MsjdTT25Ei_X1zEzsiJl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.181.0-185.230.183.255
Signature Algorithm: sha256WithRSAEncryption
99:40:44:bd:1e:02:c7:4e:51:eb:62:a7:bc:38:1c:8c:af:a1:
d8:f9:31:0e:5b:cd:8f:ca:5c:7d:55:fc:9d:23:a1:37:7f:18:
6c:53:5a:fc:86:f0:a4:d3:18:9b:bb:8a:a9:00:93:ce:c6:53:
79:d2:3b:c8:d2:c8:d4:20:cf:a5:6b:9f:59:61:00:1b:cb:89:
59:d4:9d:f6:3b:ab:88:d6:ce:b7:87:a9:d0:db:db:21:b4:39:
48:73:5f:42:1f:ba:6a:79:e3:07:1f:9a:c8:37:d3:ee:91:ad:
d1:72:73:53:d3:6b:98:52:1f:5a:83:4d:8f:44:44:58:eb:11:
f2:c9:9d:ac:a4:10:f4:11:dd:aa:eb:e9:5e:9c:82:b9:f1:93:
44:1e:32:15:f4:d4:03:d0:d7:71:9b:8e:d8:7f:b0:3c:de:30:
7e:36:68:40:e0:0c:9e:3b:41:bf:27:3b:2c:dc:33:d7:57:74:
86:11:64:ba:20:b4:71:d1:98:de:44:18:38:45:35:e0:dd:cc:
30:49:f4:1f:48:d6:af:1c:ae:82:f5:2d:0d:db:31:97:33:f3:
0c:f5:83:8f:4a:08:f0:15:92:66:c0:c2:de:3e:8a:b4:5c:c4:
c1:0a:11:da:d4:5c:7c:81:ba:fd:b5:b4:fb:39:6d:a3:43:73:
43:3a:04:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:53 2024 by rpki-client on console-ams.rpki-client.org