Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/Rqwn5hdkVhOFQxktpF0nOa0GVc8.roa
File: Rqwn5hdkVhOFQxktpF0nOa0GVc8.roa (raw, json)
Hash identifier: aYPSdsM5vP+486NQYpAACYpShPDAJmJGKduWR71ovM8=
Subject key identifier: 46:AC:27:E6:17:64:56:13:85:43:19:2D:A4:5D:27:39:AD:06:55:CF
Certificate issuer: /CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Certificate serial: 0185724C73502943D535442AFF8E31FF0344
Authority key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/Rqwn5hdkVhOFQxktpF0nOa0GVc8.roa
Signing time: Mon 02 Jan 2023 11:44:50 +0000
ROA not before: Mon 02 Jan 2023 11:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12952
IP address blocks: 185.118.129.0/24 maxlen: 24
185.118.128.0/24 maxlen: 24
185.118.131.0/24 maxlen: 24
185.118.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:73:50:29:43:d5:35:44:2a:ff:8e:31:ff:03:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Validity
Not Before: Jan 2 11:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46ac27e6176456138543192da45d2739ad0655cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6e:9a:4d:da:db:08:00:fb:de:57:46:10:42:
98:95:b3:47:2f:9b:ae:d2:74:60:48:e0:89:ad:31:
46:d7:83:2d:e8:de:02:42:c9:f3:6a:b4:a6:b7:17:
fb:44:32:35:60:9b:c6:13:57:4d:95:e8:e3:17:9e:
fb:eb:4a:e4:47:32:3f:5b:20:08:bb:35:53:68:90:
54:93:a7:9c:e3:f5:7f:f8:01:b9:6f:8c:fc:64:f7:
b0:8f:14:6e:70:19:bf:00:8b:11:d4:08:68:0d:bc:
a1:81:8c:ff:9d:b5:01:73:70:d2:ef:18:5d:ab:6b:
e9:8e:1e:37:3e:02:23:6f:14:f0:2c:e7:34:23:5e:
7c:f5:01:f2:05:98:17:46:13:42:ba:9a:78:1c:61:
2c:ec:e2:13:82:e0:cb:52:e6:40:95:e7:28:4b:21:
50:b3:63:31:71:d9:75:2e:73:a8:bc:5d:4a:f8:eb:
83:79:9a:54:ed:1b:63:11:c2:c5:9f:13:7c:51:67:
a8:a9:6a:ea:df:b5:a3:5a:80:f3:b3:a6:6d:bd:25:
8f:f8:b9:ad:31:18:dd:ef:19:05:5b:b2:1d:f1:69:
df:58:e2:28:33:eb:b7:9e:0c:ef:7d:5a:06:f7:b4:
0b:c8:af:f7:21:08:45:90:10:c3:9a:8f:83:7f:e7:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AC:27:E6:17:64:56:13:85:43:19:2D:A4:5D:27:39:AD:06:55:CF
X509v3 Authority Key Identifier:
keyid:A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/Rqwn5hdkVhOFQxktpF0nOa0GVc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.128.0/22
Signature Algorithm: sha256WithRSAEncryption
57:34:97:54:b9:e4:6a:77:95:0c:07:d0:32:8e:9d:e6:2d:18:
9d:38:c4:30:10:43:bb:60:03:3a:5d:d6:8e:29:c3:12:31:69:
91:78:e9:56:0f:be:80:f2:fa:5c:f8:ec:69:54:b9:80:b7:c8:
05:86:b8:41:95:90:f2:c0:4a:aa:3a:ce:23:10:b5:a7:1c:b8:
5c:fe:30:80:ab:bd:b4:94:68:a3:9f:cf:c0:36:3b:11:17:c0:
8c:11:e5:d7:3a:55:ed:2b:d3:bc:fc:c3:c5:2c:1b:80:8f:de:
f5:11:61:db:ce:46:e7:10:a8:25:41:17:40:cc:41:76:ff:a9:
58:8e:b2:73:3c:22:99:53:29:9d:dc:39:f7:13:fa:fb:ae:4c:
c8:82:66:2e:19:0e:bd:19:ca:4f:2e:93:aa:f4:b0:d4:d5:87:
b2:63:83:1f:4f:94:58:02:4c:35:5f:2b:d0:e6:5b:df:ed:87:
d1:99:72:f0:66:71:6f:5e:d4:12:cc:09:02:5b:97:b6:e7:77:
6d:6b:0b:96:d7:a8:68:28:58:ad:07:b6:1d:b0:85:9a:75:03:
98:f6:f9:4f:1c:02:c3:22:c4:ee:2b:f8:21:c4:56:f1:70:77:
44:04:72:ee:9f:28:73:33:a6:83:96:55:13:6c:ef:b6:66:bf:
89:28:53:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:25 2024 by rpki-client on console-fra.rpki-client.org