Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/a5e0809VUjdep9VvmWsdBs7HWm4.roa
File: a5e0809VUjdep9VvmWsdBs7HWm4.roa (raw, json)
Hash identifier: XPCY8P7163RBYgv49BCC7s1/e4XR+khzxvgbSYRy+7E=
Subject key identifier: 6B:97:B4:F3:4F:55:52:37:5E:A7:D5:6F:99:6B:1D:06:CE:C7:5A:6E
Certificate issuer: /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial: 018A4CFFC28F92BEB74E772A9B7F2BEFFBF4
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/a5e0809VUjdep9VvmWsdBs7HWm4.roa
Signing time: Thu 31 Aug 2023 19:09:04 +0000
ROA not before: Thu 31 Aug 2023 19:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205166
IP address blocks: 185.228.29.0/24 maxlen: 24
185.228.28.0/22 maxlen: 22
185.228.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4c:ff:c2:8f:92:be:b7:4e:77:2a:9b:7f:2b:ef:fb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Validity
Not Before: Aug 31 19:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b97b4f34f5552375ea7d56f996b1d06cec75a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:13:46:51:19:35:09:69:55:12:3f:00:c9:
c4:8f:72:dc:c2:70:d5:cd:13:b6:81:aa:da:21:48:
54:f1:72:f9:56:7b:55:38:d7:cf:52:db:a6:f5:73:
4f:7f:f5:e8:e4:f9:bb:4f:23:75:74:b3:08:e8:c9:
0b:8e:78:46:32:33:3f:4f:51:09:31:fa:f1:1e:e2:
c4:24:b4:46:6a:51:d7:29:33:1b:0f:9f:1d:cf:49:
e8:93:45:72:c2:07:4d:a9:30:41:cd:81:f5:99:0f:
66:ee:d2:e0:98:e0:42:20:3c:6e:ab:0c:87:bd:ec:
af:b8:2c:3d:ea:0c:5e:b2:6d:58:49:f1:d1:ec:bb:
82:d5:b0:2c:e4:86:a6:ab:92:14:4f:9c:12:66:6f:
df:40:a9:c3:ec:d2:75:5e:36:31:d7:60:dd:1b:c8:
9b:22:34:89:97:48:5d:f3:8c:aa:ec:08:91:bc:b5:
37:64:84:38:a2:95:e3:5b:19:40:26:48:93:e1:6a:
07:bf:f7:59:a3:87:90:04:e1:3b:cc:c3:56:e2:3b:
fc:f5:ce:2b:20:60:b9:92:3d:d9:87:63:35:3c:74:
3c:a1:07:df:88:69:54:93:18:66:3f:19:b4:d4:20:
75:89:4c:b4:92:05:d3:c1:b6:b3:56:73:fd:92:86:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:97:B4:F3:4F:55:52:37:5E:A7:D5:6F:99:6B:1D:06:CE:C7:5A:6E
X509v3 Authority Key Identifier:
keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/a5e0809VUjdep9VvmWsdBs7HWm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.28.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:fb:41:1a:66:ca:35:0c:cb:6c:25:c6:3d:ff:f5:b9:3e:d7:
e5:5a:e1:ca:3e:a1:fa:d6:5d:61:4b:ea:78:65:73:46:b4:96:
3b:a6:de:df:c9:35:1e:2e:00:52:f5:30:7e:51:ec:8c:d2:9f:
8f:6b:94:70:07:f5:c2:0d:ba:da:be:7e:86:ac:f5:c1:18:13:
9a:2a:9d:6e:3a:24:20:ee:01:c5:fb:a9:f1:83:50:a6:20:8d:
1b:03:31:a6:cf:f1:42:1b:a5:d2:60:ae:b6:f7:cd:9c:93:21:
e1:31:24:38:37:5e:ae:8f:7c:02:9e:c0:e7:51:69:b2:cb:e7:
c9:65:85:a9:92:f0:53:72:d1:76:17:f9:5f:cb:cf:8c:36:41:
c3:a8:4e:78:df:a7:b6:66:ab:76:e4:b1:a2:95:82:71:88:bd:
12:d7:ea:6b:73:34:48:32:e1:0b:c0:30:21:b1:83:59:9a:09:
9a:10:c7:bc:37:21:d7:e9:fd:93:7a:c4:33:87:51:83:49:4d:
2b:6e:f3:4c:db:62:e9:dc:76:9c:ec:31:8b:8b:c1:79:81:17:
53:d7:48:ad:59:4d:4b:03:b9:a5:6d:cd:41:d4:77:8e:7b:f0:
62:44:ee:d5:1c:1f:d5:26:e5:7a:41:9b:ab:69:19:ee:e7:9d:
ff:46:15:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:30:52 2024 by rpki-client on console-fra.rpki-client.org