Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/2oQHb671K9MdNgea5R2XWi2VM0Y.roa
File: 2oQHb671K9MdNgea5R2XWi2VM0Y.roa (raw, json)
Hash identifier: k009K3by9fiQg9tZJAL27+swlYlkwb/HG/7Rt6pHHGM=
Subject key identifier: DA:84:07:6F:AE:F5:2B:D3:1D:36:07:9A:E5:1D:97:5A:2D:95:33:46
Certificate issuer: /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial: 018F5DBD4789677A70C1548F1CD9A1206F9E
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/2oQHb671K9MdNgea5R2XWi2VM0Y.roa
Signing time: Thu 09 May 2024 14:23:56 +0000
ROA not before: Thu 09 May 2024 14:23:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.128.36.0/24 maxlen: 24
185.128.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 May 2024 22:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5d:bd:47:89:67:7a:70:c1:54:8f:1c:d9:a1:20:6f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
Validity
Not Before: May 9 14:23:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da84076faef52bd31d36079ae51d975a2d953346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:bb:c4:26:57:f0:ea:ca:23:cd:11:46:b5:
e7:f0:f7:cc:b2:3f:6f:87:83:30:4d:f5:47:ad:ed:
31:c8:fe:f9:6c:98:08:02:82:06:fd:0a:92:e4:d0:
09:dd:1c:b3:9f:ce:50:9a:0e:68:19:04:ae:10:8b:
83:f2:09:92:fd:b0:b0:e3:40:d8:db:86:a4:db:92:
64:55:81:27:dc:1c:ba:43:65:53:82:54:20:3c:7e:
a0:03:fc:af:6a:9a:ee:99:36:d7:8c:bc:0a:86:75:
b4:2a:de:99:76:fc:c7:6a:6a:f9:67:c9:e4:d7:23:
25:7c:e0:1b:7c:55:dd:44:aa:aa:cd:f4:c1:b8:c7:
a6:9f:fe:b1:d0:13:ee:42:bc:fa:26:fa:be:18:6b:
6a:47:9e:76:17:68:17:db:fe:27:66:6b:ec:bf:6d:
ec:be:7f:d2:1b:3d:1e:66:e7:ec:2d:f9:ef:a3:73:
d0:a4:f5:b0:60:b9:00:06:99:62:af:c2:20:0b:2a:
ba:34:7a:77:52:3c:19:59:7f:07:36:c7:43:ea:7d:
2b:d2:38:61:0f:f3:88:c0:18:9a:ed:ba:43:40:52:
df:f2:eb:40:d7:c1:e8:78:43:3e:7d:dc:f0:d6:09:
1d:27:e2:41:e5:13:73:a7:28:84:63:78:f7:57:8d:
4a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:84:07:6F:AE:F5:2B:D3:1D:36:07:9A:E5:1D:97:5A:2D:95:33:46
X509v3 Authority Key Identifier:
keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/2oQHb671K9MdNgea5R2XWi2VM0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.36.0/24
185.128.39.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:36:dd:7d:25:58:90:26:a3:6f:0f:00:e4:6d:9e:4a:01:6e:
74:2a:cb:e7:c4:85:a5:a7:48:12:ba:5e:24:e8:ce:52:7f:6f:
4c:04:59:54:30:94:81:77:2c:f5:15:48:cb:9a:5d:37:a9:70:
aa:aa:2c:b1:5a:07:8d:c7:dc:c7:4f:fa:93:75:eb:af:cf:15:
10:83:c0:2f:4b:06:e7:89:46:a1:46:36:91:e8:35:92:00:a5:
71:b1:bb:46:f3:f4:86:ab:42:8a:1a:bf:4d:b1:95:51:bb:b5:
21:e9:97:d0:32:59:53:e4:31:00:66:a2:99:b8:d4:e4:fe:12:
9d:a9:3c:47:71:81:59:29:26:0e:45:3f:41:19:6c:85:15:35:
7e:77:34:e5:d2:3c:a2:b6:a6:4b:61:e7:e5:47:62:73:95:73:
01:9b:a6:51:b4:c3:c8:33:c3:45:bc:8f:f7:d4:10:22:81:2c:
f8:75:f4:38:ec:03:0a:a7:09:49:70:7e:b8:27:2d:ca:0f:de:
cb:08:9b:00:a1:f7:3e:68:67:14:89:e1:19:50:d2:4e:5d:af:
44:07:d5:94:13:3e:c7:2d:eb:57:ea:0b:30:1e:8e:1d:1b:db:
13:98:cd:58:97:94:b2:8b:cb:90:b2:7f:36:c3:e7:76:0e:52:
04:fa:4b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:25 2024 by rpki-client on console-ams.rpki-client.org