Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/w3rvxf185NOjYWwJ4KeWFXlMZN4.roa
File: w3rvxf185NOjYWwJ4KeWFXlMZN4.roa (raw, json)
Hash identifier: hJqnVPhNaTYFMxzs4GG0sByYnDbnOy1veIkUWwcKwW8=
Subject key identifier: C3:7A:EF:C5:FD:7C:E4:D3:A3:61:6C:09:E0:A7:96:15:79:4C:64:DE
Certificate issuer: /CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Certificate serial: 01856F0B3890F9CEB4AE9D346436D50A15D1
Authority key identifier: 4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/w3rvxf185NOjYWwJ4KeWFXlMZN4.roa
Signing time: Sun 01 Jan 2023 20:34:44 +0000
ROA not before: Sun 01 Jan 2023 20:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44874
IP address blocks: 185.217.165.0/24 maxlen: 24
2a10:d700::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:38:90:f9:ce:b4:ae:9d:34:64:36:d5:0a:15:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Validity
Not Before: Jan 1 20:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c37aefc5fd7ce4d3a3616c09e0a79615794c64de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:32:e9:bf:28:4a:84:00:27:73:f5:01:d3:
fc:e3:46:f9:5c:a6:7a:b4:90:99:cc:ba:19:56:56:
d1:df:c5:68:cf:4a:35:ba:8f:a4:35:89:99:23:c5:
55:eb:db:f4:f0:ad:ee:71:9c:24:e5:7a:32:e0:04:
7a:62:98:8f:b5:14:95:9e:68:62:da:66:8f:09:de:
80:b4:7c:87:20:3f:99:bc:b0:9a:51:ad:ee:22:ca:
42:a9:4b:8e:20:4e:40:7d:18:06:64:d7:5c:56:e8:
29:a3:06:ed:01:18:1a:59:2d:de:7b:da:6d:29:86:
f3:64:45:9f:68:41:b5:dc:06:1d:36:59:7f:be:10:
fe:35:fe:b9:0b:8a:3e:13:9a:ba:c8:af:5f:a1:04:
11:c3:64:56:74:cf:27:dd:96:3c:fc:cc:07:fe:c5:
ee:94:e3:13:5a:6e:d1:c4:09:40:ed:d6:fe:04:af:
59:77:36:c4:28:18:52:f0:64:c2:9f:de:12:bc:8b:
54:be:8b:ba:31:71:45:4a:21:1e:3d:42:8a:e2:24:
bb:a1:84:cf:04:3f:18:92:61:21:cc:51:db:f6:5b:
7d:5f:49:78:5d:93:5b:71:8b:88:bb:e8:24:12:a8:
b6:0b:5a:23:0b:7d:db:66:51:d3:ab:d7:91:32:c8:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7A:EF:C5:FD:7C:E4:D3:A3:61:6C:09:E0:A7:96:15:79:4C:64:DE
X509v3 Authority Key Identifier:
keyid:4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/w3rvxf185NOjYWwJ4KeWFXlMZN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.165.0/24
IPv6:
2a10:d700::/29
Signature Algorithm: sha256WithRSAEncryption
01:ef:79:0c:bb:3b:8d:c3:b4:b6:c1:9a:6d:de:d6:79:e6:50:
86:99:12:35:26:2d:5b:2f:91:86:0e:1b:97:ef:c2:9f:ef:32:
e1:17:2b:5e:73:73:0f:b1:99:b7:2c:f0:9f:ad:f6:85:79:f6:
6c:e1:eb:b5:6d:fc:f5:78:40:5d:f9:27:7a:80:c5:68:fa:e9:
78:69:4e:d9:56:7c:b1:68:b5:f3:81:9c:9e:76:56:02:77:1e:
f7:d0:65:58:19:cf:90:89:f7:0f:82:f0:09:33:2a:56:74:3c:
ef:09:a9:ca:ef:08:0f:a8:9b:60:c9:d0:88:f7:a0:6e:8d:98:
9f:83:59:17:33:56:69:14:e2:d9:63:df:52:1f:73:3d:44:09:
16:b1:b6:4f:61:de:e3:84:84:6f:fb:f0:96:16:9d:9e:08:ca:
35:ac:e8:13:12:bc:81:14:3f:58:8e:e9:54:42:41:69:5c:fc:
59:e7:de:9d:29:b5:d1:66:78:92:da:c7:f6:39:16:6b:db:a0:
ae:f9:28:cf:a4:d8:b2:1a:6e:96:f8:3e:63:18:b5:9c:a8:bd:
0a:d3:94:44:9a:59:e0:76:db:cf:52:8b:cf:8b:ab:e5:4c:95:
61:2b:91:f2:10:10:33:b8:e2:0f:dd:f0:67:94:09:f4:db:ec:
04:d1:1a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:55 2024 by rpki-client on console-ams.rpki-client.org