Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/n_9UyH7lUvXLEtRtOQmLMvo4KaQ.roa
File: n_9UyH7lUvXLEtRtOQmLMvo4KaQ.roa (raw, json)
Hash identifier: TPG8hhx9qzq4H40e+6hzPYKnJtsxjTKYi9CfMYpEE58=
Subject key identifier: 9F:FF:54:C8:7E:E5:52:F5:CB:12:D4:6D:39:09:8B:32:FA:38:29:A4
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 01856DD425D92EC1B2F783371B71FB8B0CAC
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/n_9UyH7lUvXLEtRtOQmLMvo4KaQ.roa
Signing time: Sun 01 Jan 2023 14:54:57 +0000
ROA not before: Sun 01 Jan 2023 14:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48314
IP address blocks: 185.225.132.0/22 maxlen: 22
2a0d:c400::/32 maxlen: 32
2a0d:c401::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 10 Feb 2023 14:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:25:d9:2e:c1:b2:f7:83:37:1b:71:fb:8b:0c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Jan 1 14:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fff54c87ee552f5cb12d46d39098b32fa3829a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:db:c5:16:5a:73:00:e5:cb:62:e2:a7:89:b0:
73:58:a4:0b:39:05:f6:dc:9a:91:cf:c9:12:63:22:
cc:6f:e9:f3:43:0e:38:9b:ba:6e:0b:e8:6c:86:cd:
29:bb:ac:03:a1:ca:5b:07:13:6f:97:30:f0:0a:a7:
11:91:c2:d6:a8:4c:09:98:58:28:f6:7a:db:37:cd:
48:e4:b4:0b:de:7d:7c:be:12:98:70:8e:43:86:4d:
9d:9e:41:9c:7c:11:74:ce:49:da:e1:56:3f:a8:04:
b8:4d:6e:d9:54:35:3a:8a:90:d6:df:97:e8:74:cd:
f1:53:05:7e:2d:c6:8a:6c:f0:b4:14:a6:a2:14:fd:
69:b2:57:94:55:7a:09:ad:41:2a:ae:55:c5:ab:01:
ef:e7:08:85:be:64:ca:26:2d:e7:09:9f:08:f7:51:
c2:b3:c6:19:d8:93:fd:ae:4b:bb:fc:d8:13:bf:bd:
58:2a:92:0c:9a:b4:98:68:95:2f:00:df:9d:2f:3d:
90:de:f8:81:98:d8:56:52:02:c5:05:bc:a7:1d:70:
4a:47:11:8f:19:76:14:57:ce:32:d9:27:59:b7:1b:
57:24:49:6e:6a:91:7c:9f:4e:75:5e:7e:9c:db:29:
3f:ac:88:e3:9d:2e:1e:c3:7f:f9:aa:5f:dc:23:b8:
90:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FF:54:C8:7E:E5:52:F5:CB:12:D4:6D:39:09:8B:32:FA:38:29:A4
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/n_9UyH7lUvXLEtRtOQmLMvo4KaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.132.0/22
IPv6:
2a0d:c400::/31
Signature Algorithm: sha256WithRSAEncryption
70:fb:07:cd:b8:f0:23:20:52:2d:74:e1:74:c8:2e:8d:94:53:
93:fb:8c:83:ce:16:b1:05:cf:c4:65:aa:8c:66:7c:df:06:5a:
c8:f7:64:26:4c:b2:bc:dd:c5:06:31:c9:e8:99:68:83:b2:87:
5e:cb:e8:e3:29:86:08:8c:82:b6:0b:a0:73:3b:36:b4:59:52:
ba:a1:c9:47:52:f3:d7:72:68:8c:1e:55:4c:2d:1b:88:c1:bb:
8c:f9:e5:28:7d:2b:1b:2f:64:29:f7:a7:38:d7:63:df:51:98:
15:6b:9d:d1:ca:3b:32:e1:18:ae:e1:00:4f:c4:ca:a7:e6:76:
b9:65:88:ba:df:5c:92:14:20:99:89:93:78:ba:3d:0f:1e:4f:
f1:3f:5c:ca:39:2c:77:5c:74:6a:fe:5c:5f:9c:20:38:af:4c:
c0:8e:43:3c:82:67:cb:1c:a9:29:b1:b6:b2:d1:0f:64:4e:6c:
b2:eb:b6:bc:fa:4e:f4:c1:17:41:f7:89:79:8c:68:ec:7a:4d:
f2:37:9d:a7:8f:19:b9:ea:6c:87:47:da:70:05:5d:a7:2f:06:
49:b6:93:51:31:90:19:74:a1:43:6d:5d:23:c1:82:5d:d5:f3:
d5:b8:7d:62:b2:b5:9f:da:3f:8c:ee:ae:9f:40:60:41:10:40:
6a:c3:e4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:51 2024 by rpki-client on console-ams.rpki-client.org