Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/yMMdoR_IgQRVUFufjNC1dX0GWS4.roa
File: yMMdoR_IgQRVUFufjNC1dX0GWS4.roa (raw, json)
Hash identifier: c9JfRhutBtiD+/faavZLrTUYw8FYBgW3VYGj4THJm5E=
Subject key identifier: C8:C3:1D:A1:1F:C8:81:04:55:50:5B:9F:8C:D0:B5:75:7D:06:59:2E
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 01856EF42DBF99EB8765674E97D5EAA2CDFE
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/yMMdoR_IgQRVUFufjNC1dX0GWS4.roa
Signing time: Sun 01 Jan 2023 20:09:34 +0000
ROA not before: Sun 01 Jan 2023 20:09:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51956
IP address blocks: 185.201.174.160/29 maxlen: 29
185.201.174.184/29 maxlen: 29
185.201.174.176/29 maxlen: 29
185.201.174.240/29 maxlen: 29
185.201.172.0/22 maxlen: 22
185.201.174.224/28 maxlen: 28
185.201.174.192/28 maxlen: 28
185.201.174.64/26 maxlen: 26
Validation: Failed, certificate revoked on Tue 31 Jan 2023 13:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:2d:bf:99:eb:87:65:67:4e:97:d5:ea:a2:cd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Jan 1 20:09:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8c31da11fc8810455505b9f8cd0b5757d06592e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:33:fa:ff:80:74:87:bb:b4:f6:7b:80:cf:
49:4d:1b:1b:a3:94:7a:43:99:25:6c:51:75:8c:0f:
6d:37:07:3f:93:be:02:6a:df:bb:46:27:8e:1e:0c:
36:54:bf:91:3d:ba:50:6c:dc:aa:84:c1:9a:f7:c8:
20:3a:7a:8d:b1:c9:02:f3:a7:fd:53:30:d6:31:01:
5b:b7:d4:e6:b4:f8:52:6b:91:1b:60:07:b6:f6:b5:
df:9b:36:5e:f3:d7:9f:92:56:42:95:4b:9c:45:ff:
52:f0:df:54:08:b6:6c:3c:16:ec:8c:74:0b:bd:49:
0a:9f:3c:de:70:90:05:55:06:df:bb:e1:dd:d4:42:
c7:3b:10:22:b1:50:0c:8b:9c:36:c9:96:b6:66:94:
11:ec:cb:e4:89:e7:ce:be:77:fd:c4:fb:01:b0:4e:
94:03:b1:dd:32:40:56:63:ac:bd:da:4c:ff:c2:99:
00:18:b2:1e:22:ea:4c:84:a5:8c:d9:c2:6d:e0:e6:
4d:80:51:9b:56:79:d0:cd:4b:90:cd:e8:12:b9:6c:
8a:fa:28:1d:23:2b:18:1d:b7:59:80:a5:b4:ce:06:
39:03:44:51:58:36:08:b2:59:92:33:ae:b6:78:b1:
fa:4d:1c:e1:9a:80:ac:3e:27:18:80:78:c7:55:55:
e6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C3:1D:A1:1F:C8:81:04:55:50:5B:9F:8C:D0:B5:75:7D:06:59:2E
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/yMMdoR_IgQRVUFufjNC1dX0GWS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.172.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:d2:b3:88:cd:fe:14:52:67:d8:e2:e6:0b:d0:c3:1d:11:b9:
1e:31:e3:d8:20:57:eb:0a:ac:f4:a3:6c:13:68:39:5d:e6:7a:
c7:f3:11:5b:4f:8d:67:08:7b:0d:7c:d2:e4:3e:2e:0b:a4:ca:
d3:44:ec:38:ad:fa:f5:59:78:71:0d:12:ad:53:d2:df:b2:0c:
2c:92:a5:f4:0b:b7:19:66:86:a4:51:a6:92:71:72:c8:c2:40:
64:27:72:8a:99:72:db:c6:5a:d9:7d:8a:85:b1:78:a2:6b:bf:
35:7a:38:b5:fb:66:82:1e:b8:69:fc:1d:15:43:13:7b:2e:17:
f0:6d:8d:d0:cb:2e:40:59:94:3d:69:17:59:a3:56:df:54:f2:
47:7e:e9:53:c3:b9:e0:67:6a:33:2d:0c:60:99:74:db:2a:b3:
16:b4:7b:f2:0a:c1:74:3e:02:80:35:40:f0:3e:4a:5f:97:e7:
f5:1d:d2:7a:8b:88:c7:15:a3:36:17:7b:55:30:30:f0:7a:86:
48:98:a2:e3:2d:3c:02:71:19:8f:72:2c:fe:29:65:c1:b7:ca:
c5:49:16:b8:ad:cf:4e:ff:02:c9:2d:d8:a0:a3:e0:f8:11:78:
cf:c0:ba:dd:bc:ac:2e:88:9d:2f:a4:e1:69:86:3a:7c:66:ed:
a3:65:92:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:01 2024 by rpki-client on console-fra.rpki-client.org