Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/pMD9elru7P5dMCsZTnAJCJP8_38.roa
File: pMD9elru7P5dMCsZTnAJCJP8_38.roa (raw, json)
Hash identifier: nEglSfmmHlTIw5ZQujKz8HjnESaRZfShlv9hPV1VIp4=
Subject key identifier: A4:C0:FD:7A:5A:EE:EC:FE:5D:30:2B:19:4E:70:09:08:93:FC:FF:7F
Certificate issuer: /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial: 018CA860B116A20E22DDAB89CAA7E6440036
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/pMD9elru7P5dMCsZTnAJCJP8_38.roa
Signing time: Tue 26 Dec 2023 23:05:58 +0000
ROA not before: Tue 26 Dec 2023 23:05:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211331
IP address blocks: 185.119.10.0/24 maxlen: 24
185.119.10.0/23 maxlen: 23
185.119.11.0/24 maxlen: 24
2a10:80c0::/29 maxlen: 29
2a10:80c0:1000::/48 maxlen: 48
2a10:80c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a8:60:b1:16:a2:0e:22:dd:ab:89:ca:a7:e6:44:00:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Validity
Not Before: Dec 26 23:05:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4c0fd7a5aeeecfe5d302b194e70090893fcff7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7f:b8:31:e2:90:b1:b5:5d:58:bd:5b:ce:e1:
47:f8:c1:2d:23:0a:a4:1e:86:57:2a:d2:c3:ab:e5:
62:17:8a:37:d9:28:29:9b:88:ed:87:50:ab:8b:38:
74:a0:29:8c:38:07:5c:4a:68:5c:e6:01:72:31:fc:
4b:88:cb:70:8f:82:1f:41:61:de:49:79:df:34:6d:
00:33:50:d7:8c:f8:14:02:5e:46:ed:ad:f0:de:58:
10:46:ad:bf:73:47:bb:73:14:bc:e0:48:4a:9b:f8:
af:42:ab:0e:93:df:19:da:7c:eb:a0:c3:99:3e:a6:
73:f4:52:98:19:ca:e5:e5:85:ed:99:16:6d:80:3e:
2c:64:c1:91:d8:c3:d8:b7:6b:a9:dc:36:53:0d:ed:
8f:6e:b3:aa:53:fa:8a:17:5c:cd:9b:68:ce:24:91:
d5:fe:0a:aa:ea:a9:ba:d4:ac:23:68:ee:74:df:61:
2f:70:44:61:23:da:9e:ba:b0:27:e2:9d:3a:e8:06:
99:0a:81:8e:4d:cf:8f:4c:60:31:cf:87:b3:23:42:
dd:17:54:8b:a0:a4:82:1d:2e:5b:d4:f6:d8:ab:f3:
80:af:19:fb:40:83:90:8b:2f:ed:e2:c0:cb:25:2c:
12:0c:70:52:40:36:02:9f:79:81:38:4e:24:d5:72:
04:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C0:FD:7A:5A:EE:EC:FE:5D:30:2B:19:4E:70:09:08:93:FC:FF:7F
X509v3 Authority Key Identifier:
keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/pMD9elru7P5dMCsZTnAJCJP8_38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.10.0/23
IPv6:
2a10:80c0::/29
Signature Algorithm: sha256WithRSAEncryption
8b:40:93:b7:cf:89:5a:5c:bc:98:2b:cb:41:4e:84:d0:3e:d9:
71:a7:be:48:47:4b:8f:e0:ff:ef:fd:a6:bc:52:d2:05:85:ca:
f3:17:bc:ca:cb:fb:55:85:a0:c2:62:ab:1d:3b:f7:d6:21:4d:
99:2f:03:9b:2e:15:bf:e3:f1:ff:79:74:b1:d2:b4:20:e6:d8:
81:2a:69:b7:61:86:6e:af:65:e3:57:f3:84:24:20:53:5f:ce:
f0:81:eb:f7:d2:6a:44:9d:4f:28:24:b2:2f:12:0f:7c:a4:17:
f5:bc:cc:5e:0f:22:23:b4:49:bc:69:de:38:86:56:a3:c3:01:
0d:47:55:d6:4a:d2:47:b3:cb:fe:03:a2:47:2a:ff:59:34:19:
dd:c6:6f:07:c6:68:d7:f6:30:e0:a6:ca:28:95:ab:4e:3b:8d:
cd:a6:ef:fe:58:39:72:85:83:cc:71:b7:d1:12:e8:94:ee:e3:
d6:fa:e5:e1:79:35:2d:4a:d4:07:eb:04:24:80:2d:98:2c:8f:
e7:05:5d:76:0d:41:95:28:d8:54:b2:03:99:c1:0e:2f:b2:18:
77:6f:57:18:fb:a8:0a:86:98:a3:62:39:fd:43:02:26:bb:b4:
23:89:52:dd:1a:2d:fa:42:0f:2c:fc:80:28:5c:c3:86:d2:f9:
fb:34:09:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:37 2024 by rpki-client on console-ams.rpki-client.org