Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/ATODyutRCJ5ifO-TZRWqsu0nQNo.roa
File: ATODyutRCJ5ifO-TZRWqsu0nQNo.roa (raw, json)
Hash identifier: 6XZBWqK0mVM4KpgpcHasaTHdEneT5MnC2GSdb9NQ8/g=
Subject key identifier: 01:33:83:CA:EB:51:08:9E:62:7C:EF:93:65:15:AA:B2:ED:27:40:DA
Certificate issuer: /CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Certificate serial: 018A467717512591E94312D9845947F5F9A6
Authority key identifier: 88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/ATODyutRCJ5ifO-TZRWqsu0nQNo.roa
Signing time: Wed 30 Aug 2023 12:42:04 +0000
ROA not before: Wed 30 Aug 2023 12:42:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51092
IP address blocks: 185.250.3.0/24 maxlen: 24
185.250.0.0/22 maxlen: 22
2a0c:7bc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:46:77:17:51:25:91:e9:43:12:d9:84:59:47:f5:f9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Validity
Not Before: Aug 30 12:42:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=013383caeb51089e627cef936515aab2ed2740da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:37:d5:fb:81:ce:11:70:6a:71:81:f2:2e:d6:
32:50:6b:42:8d:89:da:3c:41:06:cc:db:f2:b1:69:
c5:64:ce:8b:46:bc:60:1e:98:44:ee:85:4b:a3:c3:
b2:96:13:ba:e6:83:04:ac:f0:94:a2:62:d7:f3:aa:
ea:2c:f2:54:d8:bd:f2:29:86:00:ab:18:52:74:cb:
b1:33:b9:f2:c5:35:df:25:a4:1f:5c:db:a5:84:dc:
da:ad:fb:ad:e8:13:ce:8e:fd:28:2f:ff:a7:01:33:
1d:1b:ab:b3:f1:8f:70:51:4b:42:2e:1d:e7:cd:14:
0a:36:c6:c4:b6:36:89:8d:9f:f2:1a:95:5e:43:6a:
6a:92:93:be:44:9d:6e:32:2e:be:4e:e4:d7:fe:66:
46:db:60:08:78:21:ec:6a:07:5f:ba:8f:db:e6:89:
48:6e:0d:d9:6f:98:63:7f:e2:cd:97:d4:40:26:c1:
36:d5:d0:a0:3f:7f:b2:ee:89:8b:be:df:e7:0a:22:
08:eb:cc:74:c8:d4:9f:75:65:6b:a1:f6:3f:9f:fb:
a5:64:0e:58:91:ae:7d:a6:18:e4:0a:8c:b3:69:40:
b6:bd:41:b6:83:94:47:30:c6:8d:23:47:84:60:7f:
40:c9:3a:ba:5a:1a:e3:97:aa:14:fd:8d:e9:94:2e:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:33:83:CA:EB:51:08:9E:62:7C:EF:93:65:15:AA:B2:ED:27:40:DA
X509v3 Authority Key Identifier:
keyid:88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/ATODyutRCJ5ifO-TZRWqsu0nQNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.0.0/22
IPv6:
2a0c:7bc0::/29
Signature Algorithm: sha256WithRSAEncryption
a9:54:1c:10:06:dc:8a:70:bf:ef:af:7d:0a:0a:c4:74:14:b0:
78:f1:f2:1d:b8:0a:61:d7:45:69:e4:65:60:9e:ae:b4:bf:40:
0f:d7:9f:06:22:e0:20:23:0d:3a:4c:ee:e9:07:93:22:71:9d:
5e:f9:bc:84:45:96:91:9a:4e:84:67:50:75:3f:1f:3a:cf:8f:
3d:3e:19:da:6e:84:67:11:a2:a5:68:a8:01:77:4f:13:69:bd:
96:e9:8b:93:0a:5d:7e:45:b3:dd:73:c5:2f:8e:da:c2:89:16:
d7:0e:f0:5d:29:07:35:7a:3a:b8:39:26:4b:49:64:2e:a3:df:
37:ab:2e:ba:ff:2b:6e:20:f5:aa:ac:f3:00:87:57:60:c5:2a:
5d:b9:f8:18:74:7e:75:f0:f2:6a:de:78:38:10:08:80:6e:76:
92:e6:1d:4c:67:2f:29:34:4b:82:af:2b:03:08:54:3d:31:21:
7a:84:2a:b0:8c:a5:88:df:c2:bf:87:28:00:79:da:df:bd:75:
57:59:e2:2f:a4:f8:d4:f1:38:93:14:b5:c5:ce:a0:29:df:d4:
ca:48:c2:1f:4c:d6:7f:a8:74:e3:b6:7c:f3:ec:f3:9d:a4:ce:
fa:d1:a0:e9:ae:66:bd:5d:43:00:4e:d4:37:58:c6:22:1d:aa:
d2:cd:79:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:29 2024 by rpki-client on console-fra.rpki-client.org