Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/boY45X43n8btwWxstqwICx6bu5c.roa
File: boY45X43n8btwWxstqwICx6bu5c.roa (raw, json)
Hash identifier: irwTD7/+agm1D/yixpERzxaGJlrFKN+FS89VV0BlsUE=
Subject key identifier: 6E:86:38:E5:7E:37:9F:C6:ED:C1:6C:6C:B6:AC:08:0B:1E:9B:BB:97
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 018D579FFED0BD3339CEFE6293BA159C008E
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/boY45X43n8btwWxstqwICx6bu5c.roa
Signing time: Mon 29 Jan 2024 23:48:39 +0000
ROA not before: Mon 29 Jan 2024 23:48:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 83.229.113.0/24 maxlen: 24
185.90.220.0/22 maxlen: 22
185.90.220.0/24 maxlen: 24
185.90.221.0/24 maxlen: 24
185.90.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 13:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:57:9f:fe:d0:bd:33:39:ce:fe:62:93:ba:15:9c:00:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Jan 29 23:48:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e8638e57e379fc6edc16c6cb6ac080b1e9bbb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:c3:29:c4:4b:67:01:5b:61:b6:fa:36:d9:
2a:06:d4:ef:8d:4f:75:eb:80:75:ac:53:d5:ad:53:
8e:6b:83:c3:12:f4:5a:4e:1c:62:86:6e:82:c8:35:
fa:09:85:47:b2:ed:e3:c0:e0:b1:07:c4:3a:02:0d:
a4:0b:8a:8c:e1:e8:ad:a0:c8:d0:26:35:ce:21:ed:
46:fd:45:6d:0b:67:e2:6d:11:7a:4e:53:c5:02:34:
8e:65:02:be:ec:8e:bb:78:a5:f0:00:25:5d:02:5b:
8a:fc:6c:d7:3c:fc:79:c9:3d:92:c9:47:2c:cd:cd:
cb:0c:11:ac:58:6b:ff:fc:29:e0:e9:09:58:d5:b4:
01:1f:6e:68:60:45:bf:3f:8b:57:b6:b0:be:54:de:
21:e7:57:bf:59:f4:d5:4d:81:c1:4d:e4:0e:09:e0:
1e:0f:63:f6:c0:c0:7c:7e:7a:f8:5f:0d:85:16:f6:
da:de:8c:05:ea:36:5d:04:8b:c0:df:96:ca:14:39:
f6:95:04:f5:02:aa:c6:c3:0a:d5:df:cf:28:b5:02:
2c:70:b5:07:af:fe:d8:71:d9:49:14:05:4b:a9:a5:
5e:10:bf:49:24:04:5b:ff:ac:d7:6e:08:21:87:c9:
41:65:a9:65:d8:45:a7:5a:cb:95:34:c5:93:db:bb:
9c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:86:38:E5:7E:37:9F:C6:ED:C1:6C:6C:B6:AC:08:0B:1E:9B:BB:97
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/boY45X43n8btwWxstqwICx6bu5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.113.0/24
185.90.220.0/22
Signature Algorithm: sha256WithRSAEncryption
07:8f:50:58:ba:7e:b7:5a:48:85:5d:4d:dd:35:f0:a8:25:40:
66:02:4f:de:02:81:d7:3c:d9:d1:f3:9d:e5:1a:ef:20:65:2c:
88:89:58:10:28:e6:0e:bd:40:ce:ab:51:60:7a:b0:95:c3:43:
8b:20:20:40:17:10:8a:72:bd:42:89:ca:09:70:81:fb:67:27:
c2:3f:6f:5b:a1:56:ad:73:c5:45:a0:50:4e:ca:db:c9:c7:b0:
9e:e5:7b:40:5d:7f:ff:3b:cc:40:b5:97:f2:3a:b7:10:a9:c0:
d5:70:ad:3a:e6:ff:fd:92:54:93:34:ef:ce:c1:f1:88:f2:a1:
10:74:8b:59:5b:bb:79:b8:9f:91:00:22:f3:84:62:85:ae:80:
97:a5:8d:85:81:56:50:c5:c2:f3:22:2c:65:fe:cd:70:02:36:
c8:c6:c6:b2:c0:4e:63:95:34:38:8b:72:d2:eb:dd:77:1c:51:
9a:0d:99:4a:e2:a7:56:a9:25:89:e7:11:da:81:b8:cb:c2:6f:
77:b3:e2:55:03:09:96:98:c1:66:63:7c:a2:22:1c:eb:51:0f:
90:45:b6:df:9c:0b:2d:60:a7:51:09:9f:33:90:48:cf:a4:92:
b6:e2:fe:b1:9e:c3:3f:2e:3b:c6:a6:4f:fd:01:fa:f8:15:35:
e0:c0:38:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:07 2024 by rpki-client on console-fra.rpki-client.org