Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/w7KSk2vV_GliL-tJcmbeavAGDVg.roa
File: w7KSk2vV_GliL-tJcmbeavAGDVg.roa (raw, json)
Hash identifier: 1ZNctLm9LTR4ZjGBp71gG8aMMRJcpRs/0ZVKcIZFPLY=
Subject key identifier: C3:B2:92:93:6B:D5:FC:69:62:2F:EB:49:72:66:DE:6A:F0:06:0D:58
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 01856FC29DD3CBDEC5C86CDB083720920BC9
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/w7KSk2vV_GliL-tJcmbeavAGDVg.roa
Signing time: Sun 01 Jan 2023 23:55:03 +0000
ROA not before: Sun 01 Jan 2023 23:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213245
IP address blocks: 185.19.82.0/24 maxlen: 24
185.215.46.0/24 maxlen: 24
185.215.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Feb 2023 10:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:9d:d3:cb:de:c5:c8:6c:db:08:37:20:92:0b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Jan 1 23:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3b292936bd5fc69622feb497266de6af0060d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:08:77:46:00:15:bf:65:94:fd:2a:1a:7f:1d:
a3:9f:07:be:f4:8a:cb:e0:04:98:b0:a4:f5:bf:25:
28:94:26:43:a7:be:e1:f4:90:87:6f:dd:fa:6d:b8:
79:28:a6:3f:00:5c:1e:06:2b:dc:72:bf:ab:af:fb:
01:0f:00:c4:b0:06:10:41:18:83:bf:04:d7:66:c4:
1d:71:80:da:d7:33:11:a1:6e:b0:df:c8:65:01:a4:
4d:9b:9b:e1:ab:63:52:b8:49:71:f8:08:b1:09:4e:
6d:c3:4f:9a:6f:f0:64:4c:72:f4:62:ba:be:40:3b:
db:33:bb:2f:40:dd:a3:a7:77:02:de:40:05:02:41:
93:76:60:1b:94:94:e9:5f:de:11:7f:96:5e:2b:24:
4d:25:b8:da:b6:b0:cd:86:3f:2b:72:1f:4b:f0:2b:
5e:8d:68:8a:cc:35:c0:fc:85:52:5f:8b:21:e9:dc:
0b:41:75:d4:72:b4:8a:8c:a3:b6:02:33:e0:48:f8:
07:9f:b3:25:d9:3d:6a:7a:48:e7:36:af:78:92:08:
bc:57:75:40:30:8c:5f:0f:2c:53:45:f4:0e:d3:35:
27:c2:f5:3f:da:8c:54:bd:45:e0:24:fc:9e:3f:88:
41:41:2a:27:3f:c2:3e:77:a6:0b:05:7b:b9:df:6d:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B2:92:93:6B:D5:FC:69:62:2F:EB:49:72:66:DE:6A:F0:06:0D:58
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/w7KSk2vV_GliL-tJcmbeavAGDVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.82.0/24
185.215.45.0-185.215.46.255
Signature Algorithm: sha256WithRSAEncryption
84:c8:2f:af:c9:58:90:78:a0:00:82:eb:81:ac:50:8c:75:fd:
d0:b7:98:5c:ab:92:bf:7e:7e:90:79:1c:11:77:25:2e:f0:99:
f3:1a:d9:c4:31:6a:cb:fd:5e:16:54:9b:59:52:92:d1:6f:ee:
3e:fe:fc:71:41:f2:ae:07:03:31:55:17:4b:51:10:d9:e7:fd:
7a:df:89:c1:55:0e:8b:a6:a9:f3:46:d5:e3:37:b2:8a:65:af:
04:b1:7d:b6:40:21:3b:d3:27:c7:a5:1c:d6:0b:37:fb:69:d4:
b0:c9:0e:8e:1b:e0:b4:5b:03:8e:79:90:88:f7:40:13:ec:1a:
83:1c:7d:5b:1c:74:39:9f:53:2b:ae:6a:e1:c9:88:7b:49:9c:
4c:7f:18:98:4f:b7:a7:22:8c:7d:58:47:3b:56:49:67:28:57:
dc:26:97:32:09:22:4f:bb:c3:3b:5f:39:a3:7d:ec:c5:d1:77:
a8:6b:d8:d6:46:2a:10:85:c8:04:bc:f7:4e:7c:16:e6:99:9f:
a2:3d:f5:d5:ef:e5:57:32:d3:54:79:5e:dc:eb:50:d5:eb:d2:
f0:91:20:6a:3d:c7:43:97:83:ab:68:14:4b:14:2f:0d:f4:a7:
42:d9:63:6f:3f:87:c7:bf:15:f7:7a:5c:60:70:ed:b2:43:30:
fe:d3:74:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:44 2024 by rpki-client on console-ams.rpki-client.org