Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/dO3ICdl5ulcgQhc0kd2Mwx05CHk.roa
File: dO3ICdl5ulcgQhc0kd2Mwx05CHk.roa (raw, json)
Hash identifier: lHRUe0WMvOm42mtiz15TWFbg1WhPOKY7gNPh7qQqRqY=
Subject key identifier: 74:ED:C8:09:D9:79:BA:57:20:42:17:34:91:DD:8C:C3:1D:39:08:79
Certificate issuer: /CN=a09fda047b3a0b1c820435e699388660da32c63f
Certificate serial: 018DF9CC8B43E9DD4D4F72A9AB6146D43ECB
Authority key identifier: A0:9F:DA:04:7B:3A:0B:1C:82:04:35:E6:99:38:86:60:DA:32:C6:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/dO3ICdl5ulcgQhc0kd2Mwx05CHk.roa
Signing time: Fri 01 Mar 2024 11:35:48 +0000
ROA not before: Fri 01 Mar 2024 11:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49608
IP address blocks: 185.18.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jun 2024 01:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:cc:8b:43:e9:dd:4d:4f:72:a9:ab:61:46:d4:3e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09fda047b3a0b1c820435e699388660da32c63f
Validity
Not Before: Mar 1 11:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74edc809d979ba572042173491dd8cc31d390879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fc:27:e7:79:7f:11:13:59:f6:2e:75:13:4a:
62:a3:8a:c1:83:c1:82:4b:a2:d1:cd:83:0c:4c:51:
8e:19:81:dd:c4:83:9c:36:c1:0c:a5:5d:00:d6:72:
62:e2:a6:f1:0c:cd:63:1d:56:91:33:14:dd:f0:42:
31:b7:5f:13:e3:3b:51:39:de:15:26:3d:77:94:39:
fc:4b:d5:1c:25:20:ab:21:02:2a:65:f6:39:dd:b3:
64:52:e8:89:7a:56:6a:2f:2a:f6:82:03:6a:73:4b:
7a:47:22:75:d2:af:1a:5c:b5:59:f9:16:59:29:ea:
19:6e:01:b3:60:13:18:3b:c3:1f:72:a7:27:c4:c2:
37:85:a1:43:05:09:33:bf:2f:22:41:9a:34:f4:fb:
de:f4:39:8e:26:ec:88:a1:79:28:79:f9:34:f5:8d:
2d:6c:2e:2e:17:05:b9:26:87:25:56:1b:ba:b1:6a:
78:2e:f9:a7:56:23:be:88:13:b3:1e:55:47:9d:7a:
00:da:8f:27:d5:b4:ba:87:61:97:62:b9:94:f5:c1:
66:ea:fb:f5:cf:96:44:3e:50:0f:27:19:1b:68:b2:
cd:99:ca:18:23:21:a4:a1:95:de:84:37:dd:88:01:
78:29:5b:8a:d8:2f:4d:e5:ee:b5:eb:1b:ea:35:7c:
52:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:ED:C8:09:D9:79:BA:57:20:42:17:34:91:DD:8C:C3:1D:39:08:79
X509v3 Authority Key Identifier:
keyid:A0:9F:DA:04:7B:3A:0B:1C:82:04:35:E6:99:38:86:60:DA:32:C6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/dO3ICdl5ulcgQhc0kd2Mwx05CHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.222.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:d6:b4:f2:76:05:d6:9a:8d:af:13:60:1f:70:79:8b:72:b0:
18:62:d0:fc:17:55:ec:ea:61:52:71:dc:68:f2:b1:2f:d3:3c:
35:0f:fa:85:5b:a7:84:d6:dc:c6:b8:b3:18:2c:e9:68:c0:d8:
2b:6d:01:c3:ec:fd:ba:62:83:5e:38:3b:28:3b:4d:43:d5:a5:
0b:3d:30:c4:3d:72:54:7c:f1:24:4f:f9:ed:27:c7:d6:12:0f:
22:c2:32:15:5a:22:df:07:bf:ff:8f:13:1d:75:ec:3b:d5:31:
78:e8:b4:54:46:ac:cc:a9:10:87:68:0f:2b:86:ff:ad:cd:d4:
d6:74:94:91:1f:ad:95:fb:e7:32:be:72:1b:8f:5e:8c:39:b3:
f6:1d:ba:e1:e5:21:48:da:87:ac:48:48:5f:4a:61:18:92:e2:
8f:a2:8d:7a:dc:05:78:19:7f:97:7b:62:3b:ee:18:35:b8:58:
b7:c8:ed:b2:3b:a3:3c:44:fa:31:48:5d:c5:89:73:32:72:06:
2a:25:33:0a:8a:1b:67:78:1b:74:27:59:5a:7e:71:8a:8f:22:
c5:97:20:6e:9f:51:bf:c1:96:82:a7:49:fb:cb:f0:c4:ba:a9:
5b:c3:43:e0:61:0c:a6:39:4e:cb:9e:aa:14:7a:ae:6a:77:b2:
20:5e:c1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 03:01:55 2024 by rpki-client on console-ams.rpki-client.org