Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/xVNRckoSVh7pRHne976gxq6Xik4.roa
File: xVNRckoSVh7pRHne976gxq6Xik4.roa (raw, json)
Hash identifier: r/LCpJQmFPP3XZVc04FZusTT/rCe61DTGbw/dmzAayQ=
Subject key identifier: C5:53:51:72:4A:12:56:1E:E9:44:79:DE:F7:BE:A0:C6:AE:97:8A:4E
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 018CC493359B3996C02B7CD2BCCFFC0835F9
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/xVNRckoSVh7pRHne976gxq6Xik4.roa
Signing time: Mon 01 Jan 2024 10:30:30 +0000
ROA not before: Mon 01 Jan 2024 10:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 185.212.174.0/24 maxlen: 24
185.161.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Mar 2024 22:11:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:35:9b:39:96:c0:2b:7c:d2:bc:cf:fc:08:35:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Jan 1 10:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c55351724a12561ee94479def7bea0c6ae978a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3c:a6:a5:e8:0d:9e:30:04:5b:39:bb:bf:f9:
bd:e2:b8:b3:7f:fa:03:bd:47:76:90:59:dc:7c:d3:
4a:f6:f3:7f:ba:5c:4b:be:bc:54:30:21:1e:93:b5:
31:1c:98:9e:27:35:b1:38:00:b0:5a:0d:46:49:62:
fc:60:60:5e:a2:60:5a:d2:ca:a1:3f:d5:8d:29:f3:
e4:39:82:ac:3a:4c:fa:a8:ae:4e:de:aa:1a:d3:0c:
08:8e:f8:70:46:5a:16:b2:10:3c:8d:4e:77:aa:1b:
53:d9:3b:22:f3:91:51:65:d3:b2:96:50:bc:2e:9a:
d1:ab:f6:00:96:c0:ab:bd:72:25:73:96:3f:80:97:
fd:86:42:b5:0c:64:83:9f:ba:cb:1c:34:c7:f6:f0:
9f:f7:63:96:0a:6b:35:07:3f:d0:b0:be:a8:86:9a:
c3:dc:61:df:bc:a0:34:75:f2:1b:cf:5d:83:6c:71:
0d:e2:51:16:ea:d0:2c:e2:47:b4:76:63:6d:08:9c:
a6:4d:05:9f:18:f4:cf:40:a3:93:f9:d8:34:3c:f6:
6e:ad:a1:e2:8d:de:75:1b:05:12:2c:24:38:27:0d:
9a:4c:17:1f:e7:1f:86:b9:6b:96:e1:a4:38:5b:21:
b0:f8:c8:20:bb:d1:50:1d:b9:cf:9e:55:f9:37:c4:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:53:51:72:4A:12:56:1E:E9:44:79:DE:F7:BE:A0:C6:AE:97:8A:4E
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/xVNRckoSVh7pRHne976gxq6Xik4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.111.0/24
185.212.174.0/24
Signature Algorithm: sha256WithRSAEncryption
20:00:aa:a8:f0:27:c2:6a:29:ee:4d:e7:72:4f:86:56:3b:1e:
4d:8e:97:f7:c8:3f:5c:a0:09:60:a1:f6:01:6d:5a:29:f3:08:
ea:7a:8f:ac:e3:85:33:1e:df:39:c9:85:ef:4b:17:a1:f6:a6:
d0:5d:60:53:2f:e0:e8:53:94:bf:f1:fe:1e:48:2b:16:05:7b:
bb:5b:cd:73:8a:56:50:e1:e1:f4:b4:06:39:8e:39:8d:ca:6e:
97:98:0a:dc:5e:7c:b5:e4:de:cf:5a:6c:4c:77:17:24:b3:90:
5e:52:8a:ec:97:04:87:b4:7d:07:5c:4b:64:31:6f:ce:20:0d:
91:74:61:1e:60:1b:da:46:01:51:a1:a0:32:3e:9a:8b:c7:8f:
af:1b:64:07:cf:22:d9:34:f3:2e:02:3a:3a:25:7d:fa:d8:8f:
3a:71:8d:a9:80:00:9f:a7:bd:5b:52:a6:31:fb:c6:be:68:4f:
f3:ec:83:8f:08:98:a3:85:79:08:08:ca:17:5c:6c:11:82:8f:
61:37:dd:97:0d:b4:1a:29:42:20:f7:a9:0c:e4:3a:e7:a8:ff:
dd:23:cf:7b:99:b2:3b:f8:8e:ec:9a:c0:bb:1d:3a:ed:52:c3:
5b:40:67:e9:30:cb:08:96:8c:9e:5e:e8:61:b9:e0:aa:7f:6e:
c8:68:4c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:09 2024 by rpki-client on console-ams.rpki-client.org