Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/rwtUwuzRk3AGwIckaZP3MoeEep0.roa
File: rwtUwuzRk3AGwIckaZP3MoeEep0.roa (raw, json)
Hash identifier: iT9L8yXl9Dx6xJi4KtR0xrZcZV5yPWfoajsXdWCf27A=
Subject key identifier: AF:0B:54:C2:EC:D1:93:70:06:C0:87:24:69:93:F7:32:87:84:7A:9D
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185739000A6BF924F70AB93CE93565AA975
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/rwtUwuzRk3AGwIckaZP3MoeEep0.roa
Signing time: Mon 02 Jan 2023 17:38:15 +0000
ROA not before: Mon 02 Jan 2023 17:38:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206804
IP address blocks: 185.227.68.0/24 maxlen: 24
185.234.73.0/24 maxlen: 24
2a0b:b87:ffd7::/48 maxlen: 48
2a0b:b87:ffd6::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:00:a6:bf:92:4f:70:ab:93:ce:93:56:5a:a9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af0b54c2ecd1937006c087246993f73287847a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:14:68:ac:83:92:b1:7c:f7:ec:47:e4:ba:
1a:6f:be:24:9f:4b:9b:20:f5:77:93:54:1e:ca:2a:
e4:5a:1c:4f:30:ae:fc:a4:f6:40:f9:c7:49:b9:d5:
a0:2a:cf:72:b2:fb:45:d4:b7:f3:c9:66:e4:8e:84:
84:2a:63:53:65:2d:8d:bb:a1:9f:fc:71:e3:c5:4c:
95:c0:70:e7:84:03:3f:40:d0:5e:62:17:c2:70:bf:
4c:06:35:f4:b7:2e:d8:c2:97:ea:5b:6e:8c:bd:06:
a1:40:d8:85:97:c4:e5:3e:60:ec:ca:78:8d:da:e7:
7c:c0:e6:56:0e:f7:4f:d1:67:c1:8a:2d:a8:23:c8:
59:63:f9:74:1e:d9:13:82:25:50:e4:b6:8e:b7:96:
52:89:46:2d:e3:e0:48:61:fb:3d:89:56:43:14:bc:
86:ba:bd:60:92:c8:76:43:34:8c:45:4b:04:5a:b7:
b1:96:91:b4:a8:3e:39:e7:70:f2:29:6b:05:aa:71:
70:43:43:58:ac:43:f7:79:e8:18:45:25:dc:c1:c6:
ba:b8:4a:f6:66:60:fb:b8:31:23:9f:3f:be:d6:f8:
4e:d8:30:5a:73:d4:48:74:b4:5d:3a:a1:3f:ec:b7:
b6:4c:20:d1:0e:38:8a:56:95:03:7f:ab:28:55:9a:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0B:54:C2:EC:D1:93:70:06:C0:87:24:69:93:F7:32:87:84:7A:9D
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/rwtUwuzRk3AGwIckaZP3MoeEep0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.68.0/24
185.234.73.0/24
IPv6:
2a0b:b87:ffd6::/47
Signature Algorithm: sha256WithRSAEncryption
c7:3e:ce:05:2a:b3:5b:5c:40:fe:14:d0:6b:25:2c:97:34:9e:
af:d8:fd:a2:72:05:39:c9:9b:8f:ab:2a:0e:ce:a6:e1:58:29:
9f:8f:0b:c2:2a:ff:7e:5a:de:e2:09:d4:17:7d:b1:fd:5b:92:
a7:a9:53:cd:78:56:1a:e5:50:6e:ad:4d:42:eb:52:ee:d0:4a:
03:8a:f7:bb:9a:e1:be:e5:33:67:1c:51:35:eb:78:a9:3b:01:
09:d5:f8:15:2d:29:ab:47:56:1c:76:ee:a0:23:61:ee:f7:84:
d6:30:15:5e:94:7f:16:fc:0d:13:e2:0a:f5:8e:e5:98:50:b3:
73:12:39:90:a8:d4:ff:3a:97:b6:c8:c3:e3:0e:88:c2:1c:7e:
06:86:f9:04:e3:81:50:cc:46:16:9b:67:67:dd:0d:76:3b:97:
82:41:57:44:c2:87:d3:1f:0b:5c:10:5f:ad:e4:36:74:fc:e6:
3a:b9:47:e0:46:ce:9d:6b:89:06:2a:ef:55:91:f5:2f:cd:e1:
c9:9f:0b:2a:68:b5:79:b7:4f:94:93:02:70:90:2a:98:f2:2c:
ea:26:7b:9a:af:54:55:4c:17:db:21:34:ab:c9:0a:b8:84:ae:
14:cb:f1:0b:cf:eb:33:62:06:f3:d5:e3:1e:2e:e8:bf:a0:1b:
7b:77:7c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org