Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/5zqvbX3Ny3cIqhiAFrW9SbMD-OM.roa
File: 5zqvbX3Ny3cIqhiAFrW9SbMD-OM.roa (raw, json)
Hash identifier: sywN8r5lekHEk7Oxb+Ra4+iEPYQoIxOgQUytoXv6YZY=
Subject key identifier: E7:3A:AF:6D:7D:CD:CB:77:08:AA:18:80:16:B5:BD:49:B3:03:F8:E3
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 0186FBAE44A451FC19C589C33A313CA71F33
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/5zqvbX3Ny3cIqhiAFrW9SbMD-OM.roa
Signing time: Sun 19 Mar 2023 21:02:27 +0000
ROA not before: Sun 19 Mar 2023 21:02:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 185.125.84.0/24 maxlen: 24
185.125.85.0/24 maxlen: 24
193.0.181.0/24 maxlen: 24
185.125.87.0/24 maxlen: 24
193.0.182.0/24 maxlen: 24
193.0.180.0/24 maxlen: 24
185.125.86.0/24 maxlen: 24
185.71.229.0/24 maxlen: 24
185.71.230.0/24 maxlen: 24
185.71.231.0/24 maxlen: 24
185.71.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fb:ae:44:a4:51:fc:19:c5:89:c3:3a:31:3c:a7:1f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Mar 19 21:02:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e73aaf6d7dcdcb7708aa188016b5bd49b303f8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:cb:ef:f1:7a:bc:02:27:c5:ac:f1:50:78:
f3:d9:52:ff:37:65:8f:32:5a:9d:f1:b7:13:68:9d:
5c:ad:67:35:de:97:c0:a5:e3:b9:7f:5d:b5:fb:6f:
92:7e:f6:9f:53:d0:7f:83:20:14:d1:94:98:ed:5d:
1e:6d:45:bd:95:0b:7f:0f:f7:bd:7c:bd:e2:a5:a6:
56:39:1f:06:b0:91:0b:0c:07:1e:91:56:80:7a:70:
73:b8:71:9a:3e:69:91:90:98:bc:fe:18:74:c1:b8:
4a:cc:5b:9f:a0:be:25:19:12:39:69:63:d3:de:72:
c0:30:9d:39:df:87:8b:c3:cf:6a:56:3b:53:3b:e4:
8e:59:42:8c:07:f4:39:88:3b:28:00:f2:e7:dc:e2:
3a:7d:ea:ab:06:e2:13:39:fb:60:b2:f7:23:8c:f0:
4e:2b:1c:2f:87:27:bb:5a:20:50:53:a7:ab:9d:d3:
33:b5:89:63:4f:dd:8d:ab:82:eb:1e:b9:73:b2:99:
56:14:90:c6:27:ad:dd:38:31:66:be:53:55:1c:9c:
fc:33:8f:50:af:7f:41:04:43:9b:5a:86:49:91:d6:
fa:12:57:9e:01:ab:b5:1c:2b:e1:ae:79:19:3a:87:
b1:bf:37:a9:74:90:a2:12:f6:ac:39:44:c2:d4:6b:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3A:AF:6D:7D:CD:CB:77:08:AA:18:80:16:B5:BD:49:B3:03:F8:E3
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/5zqvbX3Ny3cIqhiAFrW9SbMD-OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.228.0/22
185.125.84.0/22
193.0.180.0-193.0.182.255
Signature Algorithm: sha256WithRSAEncryption
38:22:b0:11:1d:2f:97:6c:bc:30:12:f2:9a:32:f9:ef:28:cd:
81:e8:6e:46:05:a2:51:aa:0c:2b:cc:37:e6:65:8f:5e:81:ae:
91:d1:ed:95:a2:be:29:c0:72:7f:cd:75:31:b2:a3:5f:f9:c5:
06:0f:1b:c8:73:1e:7e:7b:6f:8e:af:66:b0:0a:42:d8:35:d9:
67:13:ad:6a:1b:d8:e4:0f:c7:f6:92:3f:c6:cc:73:1b:fa:2d:
5a:af:ba:1d:56:17:e4:e2:51:ad:61:5c:99:a6:2a:23:d4:0f:
4f:b4:63:f5:a1:fe:a1:4b:c3:ac:69:74:41:1e:cc:93:f2:67:
67:e4:12:6a:02:43:7d:53:ef:1c:bf:2c:70:0f:7f:f3:73:a1:
82:7c:1f:ac:4a:4d:02:9a:a1:b4:e2:11:bf:fa:58:5e:29:eb:
6f:fc:c7:e5:fe:11:35:60:36:18:4d:50:8d:ba:7c:71:8d:7e:
2b:d6:e3:d7:5e:d9:80:90:af:58:9d:61:07:4b:c8:d9:f9:cf:
80:1f:e4:0c:a3:03:4b:b1:be:ae:8c:6f:78:75:b3:d1:6b:e0:
72:2b:77:85:94:ae:1d:dd:5d:d8:ee:81:55:a4:ed:6e:4f:33:
7d:9b:56:3a:10:b6:c9:e5:e9:d0:2d:08:bb:c6:18:74:09:6b:
45:27:3a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:36 2024 by rpki-client on console-ams.rpki-client.org