Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/hO1YpzZrNFJwDLBoUlH-CvIEVYs.roa
File: hO1YpzZrNFJwDLBoUlH-CvIEVYs.roa (raw, json)
Hash identifier: Y6IySOUgi3U5GIeT1WUH4REeBvMb1wOMsdOm4yM7ViU=
Subject key identifier: 84:ED:58:A7:36:6B:34:52:70:0C:B0:68:52:51:FE:0A:F2:04:55:8B
Certificate issuer: /CN=b754992ba488a872c89cbdf42ca4df895e609c53
Certificate serial: 018829250D331E68D7D17C5AC65E8B9B462C
Authority key identifier: B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/hO1YpzZrNFJwDLBoUlH-CvIEVYs.roa
Signing time: Wed 17 May 2023 09:57:53 +0000
ROA not before: Wed 17 May 2023 09:57:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 185.130.30.0/24 maxlen: 24
185.130.29.0/24 maxlen: 24
193.163.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Nov 2023 16:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:25:0d:33:1e:68:d7:d1:7c:5a:c6:5e:8b:9b:46:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754992ba488a872c89cbdf42ca4df895e609c53
Validity
Not Before: May 17 09:57:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84ed58a7366b3452700cb0685251fe0af204558b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ff:42:37:55:0a:2b:44:d9:29:9e:2b:2a:06:
71:81:b6:60:f2:85:dc:f8:80:08:22:23:6c:a5:e7:
75:42:07:96:9f:b4:33:8f:80:a4:49:c1:5b:e1:bd:
c6:50:1d:63:18:81:c7:66:65:54:11:83:33:8a:cd:
e4:2f:7d:15:b3:04:31:4a:f0:36:f8:24:f4:c8:7f:
c0:96:4d:42:52:06:f1:86:c4:57:12:1a:be:79:b6:
6a:f6:51:9a:01:51:aa:e4:b3:c3:39:07:b2:46:9d:
7d:76:d6:26:3c:d9:59:68:0b:6f:bb:0e:df:2f:cd:
8e:bc:5d:e7:99:a0:c4:c3:df:0a:03:5e:df:35:00:
b5:bc:47:02:be:75:53:43:36:d9:ee:dd:5c:7d:a1:
18:ec:4f:44:aa:ec:d3:94:f1:e7:9c:f9:2e:76:ce:
4e:94:02:e6:54:54:63:8d:26:a6:57:46:a8:db:75:
e2:4d:a8:ce:81:64:c9:5a:8d:3e:8b:5f:6e:3b:58:
c9:ed:7e:1e:dc:26:98:e1:5b:95:5d:d7:f2:1a:c8:
ae:c1:23:66:83:7b:ac:1c:e7:56:50:71:0a:db:22:
10:92:07:01:d7:27:5d:0a:07:a2:49:ce:09:75:7c:
0b:ec:e8:00:4d:29:e1:28:95:d4:9c:04:3c:da:a4:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:ED:58:A7:36:6B:34:52:70:0C:B0:68:52:51:FE:0A:F2:04:55:8B
X509v3 Authority Key Identifier:
keyid:B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/hO1YpzZrNFJwDLBoUlH-CvIEVYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/t1SZK6SIqHLInL30LKTfiV5gnFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.29.0-185.130.30.255
193.163.126.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:62:72:14:df:18:ad:83:36:04:42:10:9f:78:05:8c:6c:0a:
dd:15:c9:da:71:d3:50:d0:98:c7:d9:0d:10:71:06:d9:b5:5c:
4a:cf:ab:80:f0:c4:63:93:50:be:13:d0:fc:9a:46:f3:d7:29:
f1:c9:04:e9:e9:4a:0b:41:71:7f:15:96:c0:ad:f9:d9:8b:9f:
24:87:75:15:db:5c:b4:5d:73:f9:d3:e9:b4:f5:97:ea:93:5a:
ef:ae:0b:8b:70:29:b8:b1:93:3e:d6:51:e1:bd:6c:b8:14:3a:
cd:80:99:23:a7:32:54:fc:0b:6c:ef:e9:cf:19:ff:c0:d8:be:
81:7f:bb:af:fe:12:75:ac:ba:93:0c:e1:e7:ff:06:8b:cf:2d:
96:8d:7c:d8:45:c4:e7:48:c8:2b:5b:6c:4d:c6:40:c6:90:80:
78:b8:dc:8f:7a:54:16:4a:f7:57:25:32:48:8f:ec:4b:5d:e5:
bb:65:9b:41:36:76:10:27:39:7b:35:7a:ba:ec:67:54:ed:bc:
3b:7b:51:d0:db:5c:b6:21:03:d9:48:a7:3e:dc:7f:07:da:d2:
6c:a5:e0:9e:06:88:d8:e6:f1:0b:d3:17:8a:50:aa:bc:9c:97:
59:fa:ae:6a:8a:95:9d:16:6d:85:5f:6e:c5:b7:5e:8d:23:25:
eb:91:55:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:15 2024 by rpki-client on console-ams.rpki-client.org