Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/w_jEPCgyK5Gi_Gd-g-adObFcuJ8.roa
File: w_jEPCgyK5Gi_Gd-g-adObFcuJ8.roa (raw, json)
Hash identifier: meyuyk0IYP4JTxELT9eMdAzr1Vb893w19ywb0Eql/oE=
Subject key identifier: C3:F8:C4:3C:28:32:2B:91:A2:FC:67:7E:83:E6:9D:39:B1:5C:B8:9F
Certificate issuer: /CN=8621b0b7dfa0a7888f75eff20f32145a0b3f0dd5
Certificate serial: 018572BA6F3D51C43303A687E95B476CCBC2
Authority key identifier: 86:21:B0:B7:DF:A0:A7:88:8F:75:EF:F2:0F:32:14:5A:0B:3F:0D:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/w_jEPCgyK5Gi_Gd-g-adObFcuJ8.roa
Signing time: Mon 02 Jan 2023 13:44:58 +0000
ROA not before: Mon 02 Jan 2023 13:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60111
IP address blocks: 185.125.220.0/22 maxlen: 22
2a02:5c20::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:6f:3d:51:c4:33:03:a6:87:e9:5b:47:6c:cb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8621b0b7dfa0a7888f75eff20f32145a0b3f0dd5
Validity
Not Before: Jan 2 13:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3f8c43c28322b91a2fc677e83e69d39b15cb89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:52:63:79:47:75:98:7e:5e:d1:05:c8:97:a3:
6f:d1:f5:1e:65:55:92:c5:d6:b0:f5:a0:09:ed:f6:
05:b3:a6:52:97:17:68:7f:b4:73:3e:6a:22:d4:92:
2f:0b:e3:e5:81:ee:f0:cd:10:f1:f1:67:77:9e:10:
7f:3f:39:4f:84:ed:60:c3:b0:6e:4a:8a:88:89:48:
4e:04:af:8a:6e:42:20:37:c7:b8:3e:a2:12:86:e6:
41:cd:4a:78:79:75:ba:57:10:58:4b:93:41:b4:20:
1b:88:2b:71:2b:53:23:18:b7:54:6c:b5:87:e7:b4:
33:70:1c:00:ff:ae:25:fe:19:83:73:2d:bc:37:6f:
76:cc:4c:56:a2:85:05:bb:c8:c1:3c:95:03:bf:4b:
31:b6:8c:8c:14:dd:2f:53:7c:86:f2:6a:2e:8e:b4:
0d:5f:cc:75:ec:fc:f6:f0:46:a1:07:9e:11:6e:ea:
57:ac:91:8b:75:35:70:73:9c:21:2a:44:e5:b3:a2:
74:f7:5b:50:79:30:92:c1:9d:92:1b:60:d9:22:a5:
7e:a4:a8:e4:e5:e6:2f:4a:70:a1:78:4c:d6:95:ea:
dd:b6:c8:53:e7:a5:a5:76:98:29:b5:25:30:00:e0:
ec:d1:66:51:a0:7f:da:0b:23:f2:e0:0c:d3:43:f7:
a4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F8:C4:3C:28:32:2B:91:A2:FC:67:7E:83:E6:9D:39:B1:5C:B8:9F
X509v3 Authority Key Identifier:
keyid:86:21:B0:B7:DF:A0:A7:88:8F:75:EF:F2:0F:32:14:5A:0B:3F:0D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/w_jEPCgyK5Gi_Gd-g-adObFcuJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.220.0/22
IPv6:
2a02:5c20::/29
Signature Algorithm: sha256WithRSAEncryption
27:71:27:0e:bd:1d:ac:82:97:5d:6d:1e:dc:8f:6c:48:82:81:
8d:78:7f:67:c7:73:62:60:73:c6:35:07:7c:61:24:fe:8c:17:
73:ca:ed:e1:ad:16:1f:6d:bc:3c:c4:1a:51:01:f5:0d:22:bb:
c8:71:41:ee:01:53:de:0f:f8:dd:e3:d4:79:a5:91:18:74:53:
6b:81:cf:39:bf:66:76:eb:18:62:99:01:e4:aa:d9:fe:e9:a4:
a7:ef:71:fb:cb:04:d2:30:99:e7:a8:31:63:fc:86:aa:8f:b5:
cb:3c:5b:1b:47:42:fd:48:b2:af:61:a2:d4:d9:bd:74:d7:3c:
e5:3c:25:05:e5:b4:80:1b:db:5e:8f:8c:ed:43:84:a8:c5:ae:
8a:e4:25:81:41:f2:4d:5d:e1:d1:73:50:8a:2b:b4:8f:44:a8:
b0:b4:76:17:90:c5:d9:77:7b:db:6b:45:98:32:da:49:51:3d:
52:44:40:7b:95:fd:a4:7c:aa:7d:a8:cb:3b:15:37:86:56:9d:
9e:d1:43:c3:d9:c5:3c:b2:c2:18:31:f0:9b:b7:5f:52:4c:e7:
4f:e8:57:6d:78:f7:f8:2f:8b:0c:d7:df:7e:54:02:9e:8d:92:
b9:cb:c1:9b:ad:6b:3b:5d:21:c0:10:3d:fd:47:e0:45:09:f6:
4e:a6:d6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:33 2024 by rpki-client on console-fra.rpki-client.org