Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1yw3seBTbG5EVd0a9Oh3iNw0eqg.roa
File: 1yw3seBTbG5EVd0a9Oh3iNw0eqg.roa (raw, json)
Hash identifier: a1US3TtxdV83Ag/gPofHsryOx+ylKLOw4/WrpfO0dCA=
Subject key identifier: D7:2C:37:B1:E0:53:6C:6E:44:55:DD:1A:F4:E8:77:88:DC:34:7A:A8
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC80127D65FAA1786FE8E9E63B0DBBB01
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1yw3seBTbG5EVd0a9Oh3iNw0eqg.roa
Signing time: Tue 02 Jan 2024 02:29:28 +0000
ROA not before: Tue 02 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34549
IP address blocks: 85.254.178.0/23 maxlen: 23
85.254.180.0/23 maxlen: 23
85.254.76.0/22 maxlen: 22
85.254.80.0/22 maxlen: 22
85.254.104.0/21 maxlen: 21
85.254.112.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 14 Mar 2024 09:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:27:d6:5f:aa:17:86:fe:8e:9e:63:b0:db:bb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d72c37b1e0536c6e4455dd1af4e87788dc347aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:fc:41:d9:5a:79:91:1d:8f:ec:3b:59:d3:
4d:60:4a:5f:4f:e7:4f:e1:bb:34:dc:43:48:06:93:
22:91:cf:2f:f4:e8:e3:1a:e9:02:ee:5f:92:9e:87:
00:e6:43:c4:f0:5e:15:76:22:a7:a5:bf:81:3c:82:
36:a2:c6:c2:31:54:dc:7b:b7:8a:53:bc:c0:e1:65:
94:1e:94:d0:b2:33:7b:48:22:f0:99:92:8f:a1:0f:
39:fd:18:07:b4:56:62:aa:88:9c:4e:35:ac:0d:db:
9d:16:3c:86:04:bf:4d:92:cc:78:51:84:a5:8e:73:
53:2a:17:57:2a:8d:0f:02:2f:aa:6f:47:d0:7e:c8:
cd:65:19:7b:a6:43:a8:8d:3c:16:9e:d9:82:0c:2a:
7e:79:82:0a:6f:bb:e5:00:df:13:ce:57:fc:d5:ba:
26:61:49:d3:f8:d2:2a:24:96:24:7a:00:00:6a:cd:
2c:9b:85:16:5c:f9:8d:17:bc:4a:12:f0:df:88:80:
f9:0e:30:f7:1e:0c:ac:c5:49:dd:8c:fd:bd:52:d3:
f4:cb:75:ad:37:c6:ad:fd:ea:58:fa:8a:e5:60:f3:
6a:b0:99:ce:72:28:e8:d6:7e:03:e2:77:53:a5:b3:
cc:82:5b:b9:3f:4a:5e:4b:4c:f0:60:e4:20:85:55:
e2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2C:37:B1:E0:53:6C:6E:44:55:DD:1A:F4:E8:77:88:DC:34:7A:A8
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1yw3seBTbG5EVd0a9Oh3iNw0eqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.76.0-85.254.83.255
85.254.104.0-85.254.119.255
85.254.178.0-85.254.181.255
Signature Algorithm: sha256WithRSAEncryption
2c:5e:05:9b:46:d5:88:8f:93:be:e3:ba:be:af:f6:ec:49:af:
59:53:58:a4:65:e1:bb:99:7e:d3:8f:6d:c3:28:ef:7f:31:36:
82:44:40:ee:62:6c:99:0b:66:74:6a:c8:d7:d7:7c:79:49:6e:
7e:c2:f9:23:05:30:81:98:84:4c:54:db:5a:07:52:aa:76:61:
70:f6:11:8d:eb:70:a0:25:eb:30:d9:e2:4b:c7:09:08:da:d7:
1f:8c:9e:68:a6:22:a5:c6:87:0a:01:1b:94:6b:93:0a:9f:a3:
82:31:77:95:dc:2b:7d:9a:16:c1:29:1d:f5:62:8c:96:ca:71:
b0:cb:21:ca:28:90:93:ef:77:bc:6f:30:bd:e8:b4:a1:41:e5:
3d:cd:80:c9:85:dd:76:dc:ff:61:18:43:5e:01:c9:b4:eb:20:
0d:c6:b6:e2:2a:dd:65:7e:2a:54:9a:07:4f:b5:c1:c9:c5:33:
6a:a7:92:61:66:83:e8:81:f1:aa:c3:ff:9f:47:b7:3b:b4:92:
a4:77:67:72:db:54:6a:f5:04:97:6e:ed:8e:46:98:08:15:87:
a3:06:2e:36:14:51:93:59:82:ee:c8:5f:91:fe:69:b3:ae:a9:
b9:3c:1d:03:34:cb:c4:c1:6a:a3:08:2f:52:50:39:c0:e8:e6:
6c:64:66:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 14:29:39 2024 by rpki-client on console-fra.rpki-client.org