Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/mAsOyXLwRXlwVO2UUe2AQIvo3ok.roa
File: mAsOyXLwRXlwVO2UUe2AQIvo3ok.roa (raw, json)
Hash identifier: fE5eF1FhMPlK1OEQG4M80OTVOz4nkY3Be7L+DqjdiRE=
Subject key identifier: 98:0B:0E:C9:72:F0:45:79:70:54:ED:94:51:ED:80:40:8B:E8:DE:89
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 01863B7AC99A732361F604BD626D52DD61EF
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/mAsOyXLwRXlwVO2UUe2AQIvo3ok.roa
Signing time: Fri 10 Feb 2023 13:19:08 +0000
ROA not before: Fri 10 Feb 2023 13:19:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.64.73.0/24 maxlen: 24
185.64.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:7a:c9:9a:73:23:61:f6:04:bd:62:6d:52:dd:61:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Feb 10 13:19:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=980b0ec972f045797054ed9451ed80408be8de89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3f:93:de:5a:b4:20:37:89:17:7b:fc:11:4d:
e8:44:0d:75:a1:73:ea:84:8f:fd:33:22:78:69:d1:
e5:1d:3a:2b:04:8d:06:82:40:fc:17:3a:4b:bf:08:
0e:7c:62:f2:7a:be:3b:0f:72:cb:59:0f:c1:24:47:
e1:7c:d0:34:1e:67:a5:85:31:2d:cb:eb:16:28:7b:
18:57:e2:c3:d9:f5:0f:cb:6a:67:ff:54:99:05:59:
6e:93:64:4b:1e:08:14:f0:9b:20:8c:e4:9e:1b:26:
d1:bd:25:e0:26:eb:fa:53:73:5a:4c:76:e3:2b:d4:
12:3e:0e:0f:58:ea:09:6a:cc:c6:b4:ac:61:64:14:
50:f4:37:c0:8b:94:62:82:f8:95:0b:78:d7:18:2b:
87:44:bf:6a:bf:2a:ea:5d:5b:d7:55:2b:c8:d0:45:
4b:db:93:1a:c2:bd:be:78:80:dc:41:c3:bd:77:ef:
c6:6f:87:6a:88:ad:7a:60:94:b2:d7:d8:0b:ae:dc:
69:d5:f0:5f:7a:e8:4c:6e:b8:fb:b7:8a:d4:2f:1d:
a4:f2:9f:cf:22:c8:26:c6:fe:f9:c0:95:70:bd:00:
ce:3c:0b:2a:25:fc:9f:1f:c5:38:87:4b:69:b4:52:
b4:d7:55:6f:9a:d3:ea:86:38:bd:02:78:3c:06:e8:
43:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0B:0E:C9:72:F0:45:79:70:54:ED:94:51:ED:80:40:8B:E8:DE:89
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/mAsOyXLwRXlwVO2UUe2AQIvo3ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.73.0-185.64.74.255
Signature Algorithm: sha256WithRSAEncryption
1d:e1:36:e9:b0:87:80:82:22:7b:f2:6a:40:0d:f4:6f:bf:de:
47:c9:51:46:f9:2e:7b:8c:b6:4e:84:a3:9a:ef:17:3c:e7:8b:
3d:37:94:e8:88:ed:d1:64:ba:98:c3:66:fe:71:80:f3:ab:ec:
40:82:3d:7e:e7:e0:e5:30:3a:55:f3:7a:13:b7:cc:db:30:2e:
12:9a:ca:78:09:54:27:4a:4a:2c:b6:17:ef:8d:b5:2a:44:e6:
29:d5:14:d5:7c:5a:6c:ed:28:7c:7b:7f:68:0a:3c:8a:ff:0c:
73:eb:c5:25:6d:d3:bd:90:cf:4a:a1:48:97:14:de:bc:a4:48:
0e:73:05:8d:00:09:33:dc:b6:4d:84:6f:e8:74:7c:83:c1:a1:
f6:f7:f9:0a:7a:f6:c1:f1:70:f2:b7:79:fe:46:91:f0:12:69:
19:23:cb:34:8b:05:67:37:2b:2b:4a:4a:35:5b:9a:1e:65:47:
ef:80:af:38:8a:b1:d5:e3:fc:72:c3:58:14:ce:62:40:ac:4b:
57:c0:19:52:53:fe:05:37:37:d0:b6:21:bc:b9:9c:ae:d7:46:
ca:82:fd:4b:6a:d5:19:50:f1:58:17:22:20:83:f6:81:d0:d2:
ab:c6:e8:a5:af:f8:ae:5f:1f:58:5a:bd:72:b1:e7:b6:5d:50:
e6:f1:63:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:31 2024 by rpki-client on console-fra.rpki-client.org