Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/iax5rg46Hn5wqdDMr1eh6quMK6k.roa
File: iax5rg46Hn5wqdDMr1eh6quMK6k.roa (raw, json)
Hash identifier: nlw80IbZW3dKSUHKkahhfBiYuxymtltW+72YXbtU6Iw=
Subject key identifier: 89:AC:79:AE:0E:3A:1E:7E:70:A9:D0:CC:AF:57:A1:EA:AB:8C:2B:A9
Certificate issuer: /CN=2928db241541d6b6a6490004060aa71ad6ec189c
Certificate serial: 01856CF84ABB0F98A0A07756081627667DFB
Authority key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/iax5rg46Hn5wqdDMr1eh6quMK6k.roa
Signing time: Sun 01 Jan 2023 10:54:49 +0000
ROA not before: Sun 01 Jan 2023 10:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213075
IP address blocks: 185.243.87.0/24 maxlen: 24
193.200.250.0/24 maxlen: 24
2a0d:d81::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 16 Aug 2023 19:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:4a:bb:0f:98:a0:a0:77:56:08:16:27:66:7d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2928db241541d6b6a6490004060aa71ad6ec189c
Validity
Not Before: Jan 1 10:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89ac79ae0e3a1e7e70a9d0ccaf57a1eaab8c2ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:62:72:a7:36:5b:7e:4a:d4:a7:55:32:43:53:
78:b4:7f:c5:88:27:2f:2c:f6:b2:6e:4b:20:13:e3:
24:c7:e1:28:d4:77:bd:ab:a7:59:59:7e:5f:b2:59:
ee:ab:50:6b:3c:05:d6:2b:8b:c5:d6:28:02:3e:78:
2b:68:9e:e5:eb:6d:d0:1f:eb:37:21:12:a4:77:72:
66:b4:3b:a4:c4:8f:3e:2c:89:84:20:67:ac:8c:6a:
b5:e5:ba:42:9d:c5:8e:96:6e:41:9c:28:5b:57:46:
a9:1d:b3:04:ac:e8:f2:c7:11:85:59:27:8c:d9:83:
e9:3f:ba:49:ca:87:74:fc:34:e2:49:cb:9e:fa:ee:
61:34:72:0d:1c:d1:80:fa:0b:cf:19:be:9e:03:6e:
d0:7b:49:c1:79:57:07:0f:8c:55:61:12:d1:84:05:
ac:d8:7f:42:66:74:b3:8b:48:64:f4:23:fd:4a:f8:
91:a3:21:d2:6f:4a:b8:8c:30:35:5b:36:47:2f:bc:
ed:c4:e7:03:f8:54:01:1e:37:db:95:3e:65:fe:ff:
e6:1c:57:f0:32:8a:aa:ea:66:c3:08:5c:05:79:86:
12:b7:82:e5:e5:71:1e:b4:76:7c:4b:7d:78:cd:88:
79:23:ba:37:c8:cc:ef:a6:da:39:c7:93:a2:a1:cf:
0b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AC:79:AE:0E:3A:1E:7E:70:A9:D0:CC:AF:57:A1:EA:AB:8C:2B:A9
X509v3 Authority Key Identifier:
keyid:29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/iax5rg46Hn5wqdDMr1eh6quMK6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.87.0/24
193.200.250.0/24
IPv6:
2a0d:d81::/32
Signature Algorithm: sha256WithRSAEncryption
94:63:85:84:24:5f:e7:60:44:1c:78:22:d3:08:2e:ee:c9:db:
ec:04:b0:6f:ce:68:8e:d4:44:44:3a:88:d8:d6:b5:7b:0a:cb:
58:16:c7:3f:5e:9d:39:d2:ba:86:d5:c2:6a:50:b2:ce:4c:f5:
16:9d:73:a9:c9:91:9c:54:a5:ef:62:2c:b3:46:73:30:b4:95:
5f:58:51:30:da:4a:0f:9b:3c:ad:f0:50:33:88:91:9f:61:a9:
9e:d7:b6:9c:b4:c3:57:bb:51:5e:40:1f:cf:5b:f2:d4:37:8f:
0c:18:c2:8e:25:3d:ba:44:ca:53:0f:df:7f:52:97:2a:e0:36:
24:d3:6f:72:d4:31:91:b1:54:1e:9b:06:f8:a4:02:3d:76:30:
38:b5:be:91:6c:eb:39:a9:69:ae:2b:de:6f:c9:d8:d7:5a:b0:
7a:dd:47:83:c5:35:06:15:25:a7:6f:f7:b5:d5:52:42:d6:2e:
41:9a:e6:38:b8:32:03:7a:3a:c8:f8:10:d3:a9:46:bf:dc:f1:
2a:5c:ab:06:ab:c0:af:53:90:f3:ee:60:f0:f2:59:2e:6e:c1:
5d:98:6e:eb:f0:c2:b6:0e:55:fc:71:db:14:f1:d3:d4:c4:61:
6d:19:17:62:b5:3c:45:ae:56:01:80:c8:49:c6:5b:4f:c9:6e:
a5:c9:f0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:44 2024 by rpki-client on console-ams.rpki-client.org