Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/_01wJlJqk73Qi4sWNpnUlwrbkCY.roa
File: _01wJlJqk73Qi4sWNpnUlwrbkCY.roa (raw, json)
Hash identifier: xS608hjSBDptDpNbE9IIKnZLKcgu8FmRDYyP/hC0RhM=
Subject key identifier: FF:4D:70:26:52:6A:93:BD:D0:8B:8B:16:36:99:D4:97:0A:DB:90:26
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0185729EC7B6D1BE1271AA24C864AF0A90DC
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/_01wJlJqk73Qi4sWNpnUlwrbkCY.roa
Signing time: Mon 02 Jan 2023 13:14:46 +0000
ROA not before: Mon 02 Jan 2023 13:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 185.169.180.0/24 maxlen: 24
185.169.183.0/24 maxlen: 24
45.133.37.0/24 maxlen: 24
45.133.36.0/24 maxlen: 24
45.133.38.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Jun 2023 10:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:c7:b6:d1:be:12:71:aa:24:c8:64:af:0a:90:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 2 13:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff4d7026526a93bdd08b8b163699d4970adb9026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:72:1b:3b:1b:3f:00:cd:81:7e:80:f9:1e:
1f:10:8d:7d:0a:17:c4:b1:80:f1:f6:ab:c6:a7:08:
08:50:6e:91:39:bf:46:1e:77:64:84:6e:31:77:36:
db:74:67:c0:33:25:43:7a:b9:80:c3:25:11:bb:d2:
10:b9:f4:77:a4:d2:06:ac:e1:85:36:53:e9:22:3c:
d3:9b:b1:78:fb:b3:d8:ae:7e:bb:8c:9f:60:42:0e:
88:8d:ab:3b:0c:0e:32:db:4b:46:0c:59:d2:91:fb:
77:24:6f:7f:99:84:20:88:02:89:c6:1d:c1:ed:fb:
60:c1:aa:e1:22:ed:ee:c1:29:19:6e:e7:33:9d:e1:
cc:a9:8e:a4:c0:e9:13:9c:ac:d2:e8:37:d2:dc:17:
42:b9:b9:e8:d1:48:be:a7:0d:ae:f4:30:4e:99:3e:
c8:7f:7b:2d:d2:42:b0:80:55:43:2f:96:a1:44:fc:
75:0e:f4:11:b2:38:b9:db:bb:cb:d4:c3:d0:58:f0:
65:37:ef:65:a3:f0:ee:7d:35:4c:ac:15:70:20:ae:
d9:63:7b:71:72:a5:3d:3f:a2:79:bb:dc:b7:ac:e2:
f3:4a:38:98:e0:17:3f:2f:eb:e5:43:85:e5:ce:fd:
b5:c8:31:af:5e:f4:e7:9d:d9:65:92:04:35:85:b8:
ec:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4D:70:26:52:6A:93:BD:D0:8B:8B:16:36:99:D4:97:0A:DB:90:26
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/_01wJlJqk73Qi4sWNpnUlwrbkCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.36.0-45.133.38.255
185.169.180.0/24
185.169.183.0/24
185.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
35:10:db:69:9f:cc:e4:84:46:ed:5d:44:c6:dc:cf:d4:24:70:
02:6b:c6:36:6d:f3:e3:07:0e:a4:75:95:af:c9:f6:a1:d0:fd:
71:2e:d8:53:15:5f:34:4e:ba:11:18:68:85:92:ce:d0:a2:2e:
f9:ec:b2:86:c9:e6:ad:6d:f2:b3:fb:9a:1c:f8:2f:47:f6:2a:
9b:30:c0:ab:71:73:b8:bb:0b:c0:ab:38:35:15:a7:4e:c2:dd:
6c:87:c8:2a:ce:66:31:54:c1:78:7c:37:cb:18:ab:0c:6f:f1:
5b:4b:2a:5f:ae:dd:98:b7:45:ef:ea:33:8e:db:d7:3e:b5:57:
fc:a9:57:e6:0c:c9:03:36:12:75:74:67:05:ea:c4:41:1f:cb:
a4:76:c7:82:3d:70:c0:91:4d:b8:97:b4:d2:f5:2c:c9:19:25:
81:90:4c:96:8d:62:33:b0:6d:db:83:75:eb:d8:95:20:7f:3b:
df:86:8d:df:bd:b0:29:f4:4b:16:0d:e7:38:a9:81:df:9b:f6:
10:f7:d3:22:bc:ba:5f:38:f9:1a:91:63:9a:28:3d:8c:bf:91:
29:d9:69:ef:d1:8d:60:a1:4b:a8:de:36:0f:ce:ac:16:d9:25:
12:41:40:bd:a5:53:a1:45:20:26:8e:5a:17:45:d4:c1:f2:3d:
7b:b5:ed:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:45 2024 by rpki-client on console-ams.rpki-client.org