Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/4dVfxiUXhHNv4TLgHVORaAkLANg.roa
File: 4dVfxiUXhHNv4TLgHVORaAkLANg.roa (raw, json)
Hash identifier: J5SXW/ozUUcMIJAysj0WviwdvYsNvC8z8RrxeZOvQHo=
Subject key identifier: E1:D5:5F:C6:25:17:84:73:6F:E1:32:E0:1D:53:91:68:09:0B:00:D8
Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial: 018B70407CE5D1E345694B92B1546B486E37
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/4dVfxiUXhHNv4TLgHVORaAkLANg.roa
Signing time: Fri 27 Oct 2023 08:29:16 +0000
ROA not before: Fri 27 Oct 2023 08:29:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197412
IP address blocks: 185.230.172.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:40:7c:e5:d1:e3:45:69:4b:92:b1:54:6b:48:6e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
Validity
Not Before: Oct 27 08:29:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1d55fc6251784736fe132e01d539168090b00d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8f:29:cf:fe:3a:b4:c5:c0:7d:07:12:af:06:
e0:d5:cf:84:07:43:78:6c:a2:9c:f0:72:82:a1:a1:
2f:6e:ea:c3:0d:09:28:96:73:84:8a:0d:19:8f:40:
74:eb:8f:14:41:29:49:9a:20:0e:4e:6e:02:17:51:
e1:48:fe:ab:ac:fc:9e:88:82:3e:e8:cd:ea:0e:83:
8b:b8:17:32:28:82:71:3a:ad:f3:f6:69:10:da:fd:
55:15:65:c5:96:0b:7d:a0:64:78:4d:48:1a:59:3a:
29:6c:42:5a:5c:a5:06:97:9e:7f:fb:10:e2:fa:29:
80:ff:f6:06:26:9b:df:54:e7:07:c8:d6:11:5e:fb:
69:cc:3e:1e:cf:13:e6:6f:78:66:0a:af:59:97:a5:
18:5b:5e:1a:2b:3b:69:fc:4b:3f:dc:3d:3a:3d:ca:
2d:8d:2c:c5:71:6c:98:d4:59:fb:7f:04:45:47:fb:
37:74:c4:09:38:3e:7b:1c:57:81:da:61:a6:46:80:
43:2b:16:74:d6:a9:36:cc:56:b3:f2:b6:00:98:bf:
48:cc:b0:24:e9:f1:0f:e1:28:80:80:0d:a9:e2:26:
f2:d3:75:6a:f4:45:ad:49:e2:03:3c:03:10:8f:36:
7b:aa:a6:26:e9:4c:a2:07:3e:43:93:a3:23:2f:5a:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D5:5F:C6:25:17:84:73:6F:E1:32:E0:1D:53:91:68:09:0B:00:D8
X509v3 Authority Key Identifier:
keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/4dVfxiUXhHNv4TLgHVORaAkLANg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.172.0/22
Signature Algorithm: sha256WithRSAEncryption
22:23:e7:83:2a:9a:bb:12:d6:55:57:d1:a3:3a:50:89:41:53:
af:97:ea:76:89:e5:6f:ab:f9:ca:f9:3f:96:e4:36:cb:32:86:
cf:2b:a3:30:51:16:69:f0:d8:31:ea:e7:13:15:98:e2:7c:aa:
80:22:cd:61:69:91:1d:be:78:4c:93:f5:49:8a:cf:b7:0f:7d:
46:6b:3b:b3:25:e8:8e:d1:7c:dd:dd:9b:b5:6f:47:6c:11:ac:
c7:c2:a2:85:73:22:e1:47:eb:31:f4:52:f5:5a:29:f4:a0:af:
ba:f2:81:c3:1e:ea:29:47:2a:70:64:d3:8e:01:02:97:53:a4:
af:dd:e2:57:a0:26:1d:89:96:20:dc:a8:2b:16:4c:cd:0f:13:
fb:d0:17:28:74:18:9b:99:72:7b:1a:31:51:e9:0d:c3:42:1f:
a2:a1:d8:c8:32:e7:2f:c1:01:b5:07:0b:6d:d2:b5:83:58:ea:
d6:ed:60:27:cd:3c:b7:04:64:ff:a1:a1:bf:3f:c4:14:16:09:
1a:db:03:41:e2:24:a3:58:67:ec:cf:c1:8e:b5:9a:5a:2c:66:
21:09:34:37:66:39:44:d4:19:fc:bd:df:a1:9d:d2:52:48:5d:
c5:85:1d:09:4b:77:9c:ed:47:08:4b:71:ef:a9:0f:c5:11:5b:
09:f6:74:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:06 2024 by rpki-client on console-fra.rpki-client.org