Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/K94wDW3ACfnoHY6tECODQoVVo4U.roa
File: K94wDW3ACfnoHY6tECODQoVVo4U.roa (raw, json)
Hash identifier: Ixpwzrauv5XVss76rcfX+CUFjh/vEFD+RAOrjfe7lLY=
Subject key identifier: 2B:DE:30:0D:6D:C0:09:F9:E8:1D:8E:AD:10:23:83:42:85:55:A3:85
Certificate issuer: /CN=bd85314d13c782c052dd022b3e4e20142b64170e
Certificate serial: 018572BA5BFF532010BC8AC5F92BA485C933
Authority key identifier: BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/K94wDW3ACfnoHY6tECODQoVVo4U.roa
Signing time: Mon 02 Jan 2023 13:44:53 +0000
ROA not before: Mon 02 Jan 2023 13:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211629
IP address blocks: 185.252.203.0/24 maxlen: 24
2a10:b340::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:5b:ff:53:20:10:bc:8a:c5:f9:2b:a4:85:c9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd85314d13c782c052dd022b3e4e20142b64170e
Validity
Not Before: Jan 2 13:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bde300d6dc009f9e81d8ead102383428555a385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b2:d3:6c:01:a9:93:8a:56:5c:73:92:f4:9e:
50:08:72:86:57:47:11:56:78:be:8c:f2:86:42:50:
70:7f:26:3d:7a:c1:ae:5c:15:22:b4:6e:15:75:ee:
0c:a1:a7:c0:ab:2e:f0:d8:16:a8:db:64:87:08:a1:
9f:a2:97:e4:37:0d:76:6d:e8:66:3b:d6:7d:c7:e0:
03:7d:21:c5:28:a6:85:9f:b6:57:f1:37:f0:f5:5a:
de:97:41:9c:f1:65:5e:2c:3e:cf:f0:c4:88:97:be:
cc:95:26:dc:c2:d5:72:c5:24:ce:0c:d3:11:51:83:
37:b1:0a:88:e8:bc:52:d0:82:25:4e:bf:5a:a6:32:
ac:d3:30:1e:ef:d8:46:19:38:a6:06:9a:8d:3b:30:
f7:62:97:81:f2:7b:4c:04:86:ff:a2:2a:41:eb:e9:
b2:5b:5b:b3:95:12:d8:9c:eb:59:a7:f7:f0:ed:d1:
f1:06:6a:21:11:19:c5:c0:5b:5c:0a:77:20:90:ca:
9e:59:d9:d5:eb:1e:02:7c:cb:5b:78:9e:2a:8f:ac:
2f:49:62:3a:92:6b:33:50:6f:91:94:17:a1:93:c7:
e9:51:d1:c0:35:c5:06:fa:b0:1c:0c:3e:51:4e:04:
ac:c3:7b:bc:7c:91:e6:11:ca:3e:aa:27:90:d7:08:
83:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DE:30:0D:6D:C0:09:F9:E8:1D:8E:AD:10:23:83:42:85:55:A3:85
X509v3 Authority Key Identifier:
keyid:BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/K94wDW3ACfnoHY6tECODQoVVo4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.203.0/24
IPv6:
2a10:b340::/29
Signature Algorithm: sha256WithRSAEncryption
81:e9:a9:5a:89:3f:cd:76:69:60:69:3e:2d:96:5c:70:8a:fa:
88:9f:23:a1:c8:73:c7:de:00:df:cc:65:93:cc:0d:ba:2d:82:
f7:e4:3c:16:04:1a:06:6a:8a:68:ea:05:53:f3:08:dc:4f:bc:
6c:08:90:fb:96:c0:ed:aa:17:3f:6b:0e:b6:af:bb:48:98:ed:
ae:a4:dd:d8:fe:0e:76:fb:bb:5f:b2:56:e1:0e:a5:d1:d3:75:
2e:c1:70:81:16:b3:54:5d:44:32:5d:bb:9d:ad:64:11:97:e9:
5a:4e:db:98:99:bc:f2:6e:dd:ef:4e:96:af:47:de:52:93:6e:
c1:5a:b2:83:95:e3:37:75:fc:88:42:64:37:3e:cc:b2:cd:16:
1d:e9:1f:01:64:cd:f7:0b:92:16:01:41:c1:d0:52:0e:d9:31:
fb:18:b5:ed:61:32:07:40:a6:e2:5f:ff:dd:ad:01:76:b0:54:
09:e3:27:ce:4b:b3:54:7e:03:8e:42:63:7c:c8:51:dd:14:1f:
b5:97:cb:b6:ca:7f:a1:90:84:66:e7:f8:72:85:91:2b:18:9b:
bb:59:d7:76:1b:d5:c6:f8:d0:86:18:f7:5b:c3:d0:7a:04:de:
39:80:d7:bf:d4:4a:ad:87:9c:0c:8a:5b:9e:09:9f:c1:ad:38:
7f:22:c8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-fra.rpki-client.org