Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/xm4gh0vZRcQ9IambN8Jh7fQ46AA.roa
File: xm4gh0vZRcQ9IambN8Jh7fQ46AA.roa (raw, json)
Hash identifier: j1XQvSQ/dOYXZ2TALZ5HAvx7BVSCzcLUtydeifbPzkU=
Subject key identifier: C6:6E:20:87:4B:D9:45:C4:3D:21:A9:9B:37:C2:61:ED:F4:38:E8:00
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 0190216CC4AFF5BA3CBCDD88C71AAAD849A5
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/xm4gh0vZRcQ9IambN8Jh7fQ46AA.roa
Signing time: Sun 16 Jun 2024 14:21:34 +0000
ROA not before: Sun 16 Jun 2024 14:21:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47285
IP address blocks: 185.105.236.0/24 maxlen: 24
185.105.238.0/24 maxlen: 24
2a10:ab00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 19 Jun 2024 10:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:21:6c:c4:af:f5:ba:3c:bc:dd:88:c7:1a:aa:d8:49:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jun 16 14:21:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c66e20874bd945c43d21a99b37c261edf438e800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:b8:68:bf:aa:f6:d0:86:98:b7:34:d1:cb:
f7:c6:08:f8:ce:c6:21:12:19:8c:d7:26:9e:a2:30:
a2:57:20:b6:1f:fe:37:2e:a1:03:43:bf:46:18:27:
44:52:cb:32:9e:a3:d8:ee:db:4a:b2:ad:b4:fb:cc:
25:18:cd:64:59:36:cd:90:37:f4:f3:c7:c4:b6:53:
eb:aa:88:42:db:11:81:5d:b1:7c:0d:6d:e8:54:6e:
df:8f:58:d1:50:92:9f:be:63:c5:f5:d2:79:c8:21:
f5:02:4b:f7:2e:50:cb:64:cd:74:b7:9b:2e:ad:49:
26:5e:97:6d:f7:82:01:8b:f9:79:34:23:cb:d7:c6:
17:18:9b:f1:09:af:db:91:9f:49:48:88:a5:e8:38:
ce:6e:8e:bb:db:d2:1e:25:52:03:13:1d:2d:05:8d:
46:a8:9d:f7:e7:78:36:77:04:3f:7a:7d:e8:e2:3d:
3f:5b:e3:75:a9:26:ed:f2:4f:1d:cd:4b:5a:da:d9:
e2:a8:4f:2c:f5:b9:da:a5:e5:ea:c4:73:36:79:10:
7b:6a:75:db:61:f7:5a:37:d3:4d:7e:32:f4:80:be:
bc:60:10:c6:e7:83:84:b7:dd:87:c6:53:89:4a:25:
e5:24:16:24:58:b0:c3:4b:20:c5:30:73:1a:f3:52:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6E:20:87:4B:D9:45:C4:3D:21:A9:9B:37:C2:61:ED:F4:38:E8:00
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/xm4gh0vZRcQ9IambN8Jh7fQ46AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.236.0/24
185.105.238.0/24
IPv6:
2a10:ab00::/29
Signature Algorithm: sha256WithRSAEncryption
33:19:80:64:a1:0a:9a:8f:d0:10:3f:b9:eb:ac:35:cc:e4:ac:
c3:b7:36:bb:fc:08:52:d4:b5:a5:f3:de:57:69:e1:f4:08:41:
c1:c0:7e:1f:18:7b:2c:ae:e9:00:28:68:b2:8c:3b:3e:c7:18:
b9:82:69:d8:11:04:d9:e1:65:43:b5:79:24:2b:0c:bc:32:d4:
99:9c:72:4d:5d:ab:6d:e5:a1:2e:fc:e0:53:07:bc:fe:f0:4a:
cb:b8:96:ed:65:de:58:a8:d3:1c:3b:c4:42:84:ee:c8:66:de:
ce:62:a3:d5:8f:30:44:4f:17:c7:ae:4b:10:bb:77:c9:f0:1c:
a8:4e:63:79:d5:06:7f:bb:de:b6:e3:92:cb:18:e0:c3:99:15:
c4:f2:5b:e8:5a:c7:e2:77:0b:43:f5:22:94:1a:bd:7c:50:fa:
35:e1:b2:e8:49:11:0e:e6:ed:fd:8b:06:b0:99:e9:66:8c:62:
d6:25:32:ac:12:27:ed:3e:ad:3d:5e:06:c5:e0:57:7a:a6:f2:
4a:38:7d:c5:c1:29:35:2a:9d:1e:32:1b:1f:24:01:51:7a:15:
4e:22:51:9a:42:72:23:c5:4b:1f:d0:e1:5c:0d:44:0a:8d:07:
a5:b0:91:11:ca:21:9a:9d:19:04:ef:d9:cd:4d:6e:36:ca:c7:
e6:a7:32:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 16:25:59 2024 by rpki-client on console-ams.rpki-client.org