Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/tPHa7wdUdJhJEEv2BVVxBaOcncc.roa
File: tPHa7wdUdJhJEEv2BVVxBaOcncc.roa (raw, json)
Hash identifier: ry2lYfZGoWF6Px6RqgYwSJD+piEWk9wy3mm3Umgrplg=
Subject key identifier: B4:F1:DA:EF:07:54:74:98:49:10:4B:F6:05:55:71:05:A3:9C:9D:C7
Certificate issuer: /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial: 0185723A0934530FD76D05BF95B7AF4A8587
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/tPHa7wdUdJhJEEv2BVVxBaOcncc.roa
Signing time: Mon 02 Jan 2023 11:24:43 +0000
ROA not before: Mon 02 Jan 2023 11:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202128
IP address blocks: 185.78.208.0/22 maxlen: 22
2a05:6d40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 15 Nov 2023 12:28:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:09:34:53:0f:d7:6d:05:bf:95:b7:af:4a:85:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb190d102ac9603b405b36374d429868604937af
Validity
Not Before: Jan 2 11:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4f1daef0754749849104bf605557105a39c9dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:91:49:d2:27:7e:ca:1a:7f:b0:c3:fc:5d:4d:
8a:6a:aa:06:90:2b:17:97:3d:03:88:62:aa:eb:20:
03:db:dd:81:85:2e:4d:64:a8:05:c8:29:53:58:9c:
f7:29:2f:50:a5:f3:af:30:ee:1f:42:50:7d:4e:76:
fe:d3:d5:2e:d6:f2:88:aa:00:62:b1:8c:fb:bd:40:
16:55:cf:ae:e7:80:6b:63:82:93:d3:db:50:73:6d:
8f:ba:d6:46:53:dd:2f:ce:78:14:7f:91:9d:9e:ad:
91:03:bd:a3:e9:cd:32:92:1e:e9:aa:21:7f:1f:64:
a3:66:43:d1:0b:47:88:5e:28:b7:34:1b:f3:33:0b:
fb:52:dd:2c:74:99:4f:28:5a:00:3e:65:81:59:e6:
24:45:c0:e4:73:4c:00:a5:08:28:4d:12:b8:45:5b:
27:03:37:e2:a7:aa:64:c3:8c:d1:b2:4e:82:cd:7c:
35:2a:52:4b:43:81:6f:ae:02:c4:30:7e:fd:65:e6:
be:6a:84:6a:30:19:e0:64:9b:df:9f:01:ea:3b:ef:
3e:6e:23:35:4c:f5:1c:a3:85:f6:24:cb:af:cb:4f:
eb:d9:21:6f:57:94:ff:f3:55:d7:4c:66:11:85:00:
0b:c9:65:ee:ae:fe:85:20:c5:00:b0:5b:7f:9d:36:
7f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F1:DA:EF:07:54:74:98:49:10:4B:F6:05:55:71:05:A3:9C:9D:C7
X509v3 Authority Key Identifier:
keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/tPHa7wdUdJhJEEv2BVVxBaOcncc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.208.0/22
IPv6:
2a05:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
90:2c:46:7e:69:09:75:3c:f5:fc:90:e9:96:25:4c:7b:70:62:
b3:8b:22:61:c0:f2:cd:c6:cb:6d:75:0c:45:0b:a4:49:a6:09:
d1:c2:51:fb:6b:7f:a8:56:8e:0c:d6:ac:a8:0c:21:af:fa:ff:
82:e8:81:ea:1e:41:d9:4b:c9:7e:1b:c2:e3:6f:74:8b:2c:f7:
e9:76:21:19:eb:a9:0a:18:4d:76:c0:94:ba:b3:e0:de:30:13:
6a:66:f6:8c:b3:18:f5:19:d7:ed:d5:c4:48:63:f8:5e:be:db:
9d:fe:6e:1c:52:ac:d6:ec:64:c0:e3:c5:81:3b:a1:f9:1f:c0:
50:5d:ac:d8:08:86:7a:37:3b:04:ae:a5:de:d8:60:b8:31:a0:
d9:aa:b1:46:d8:c9:b0:c4:59:40:63:c3:c2:62:ab:b9:e2:d4:
b1:97:e8:bd:ea:c7:78:33:ad:a2:22:f1:f4:fe:d6:5e:e5:c6:
b5:96:04:c5:3f:d8:e8:ba:31:d7:31:6c:83:eb:ce:6b:cb:97:
18:8a:99:2d:fc:4a:5a:a5:18:20:4e:cb:7b:cd:87:7e:e6:d2:
7f:a6:5e:30:bd:6a:c9:93:40:1c:9c:6e:ab:ae:63:74:52:64:
e0:95:25:59:09:6c:62:7c:d8:7e:22:51:ba:52:ff:b3:85:07:
83:fb:f9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:53 2024 by rpki-client on console-fra.rpki-client.org