Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/AKHXspxsOVXgo910AfzVZoZm5z8.roa
File: AKHXspxsOVXgo910AfzVZoZm5z8.roa (raw, json)
Hash identifier: wpd2Nie6nmsST2bBzQEgv3hatztFwdDkaNMus3NE/E0=
Subject key identifier: 00:A1:D7:B2:9C:6C:39:55:E0:A3:DD:74:01:FC:D5:66:86:66:E7:3F
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 018D35F78A504B7F0B2673D0F60FC46972E7
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/AKHXspxsOVXgo910AfzVZoZm5z8.roa
Signing time: Tue 23 Jan 2024 10:57:11 +0000
ROA not before: Tue 23 Jan 2024 10:57:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.109.134.0/24 maxlen: 24
185.146.152.0/24 maxlen: 24
185.146.154.0/24 maxlen: 24
185.146.155.0/24 maxlen: 24
2a07:4f80::/44 maxlen: 44
2a07:4f80::/48 maxlen: 48
2a07:4f80:10::/44 maxlen: 44
2a07:4f80:20::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 24 Jan 2024 03:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:35:f7:8a:50:4b:7f:0b:26:73:d0:f6:0f:c4:69:72:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Jan 23 10:57:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00a1d7b29c6c3955e0a3dd7401fcd5668666e73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3b:bc:8c:df:57:22:34:83:0c:ac:c6:6d:c3:
0f:aa:ec:a6:52:f7:51:f9:b9:47:30:da:84:d2:7f:
37:b7:a2:c0:a1:05:35:7f:a3:21:34:0b:32:a0:eb:
47:14:11:7a:f7:15:9a:0e:77:cd:78:0c:57:0c:61:
73:6f:20:4e:17:6e:cf:62:c3:aa:84:83:99:dd:fc:
a8:d4:3d:bf:f2:9e:f6:11:b4:19:b2:eb:93:66:24:
8e:64:29:35:2b:d9:51:4a:11:dd:02:d7:60:ba:c8:
9e:11:f4:b4:f3:a3:66:bf:67:30:5e:bb:a6:b3:79:
71:bd:08:84:af:7d:81:c2:7f:db:0a:42:47:36:5d:
59:68:f9:2c:66:f5:f4:a6:4c:31:85:d4:2c:33:43:
48:ee:44:8c:fc:e5:8b:28:19:fd:4d:9c:97:95:f8:
76:36:e3:a9:69:e0:18:76:d8:b3:77:95:4b:2c:f7:
58:8a:a2:95:d3:30:8b:4c:25:eb:51:dc:56:ee:a3:
a6:a3:d8:4a:b2:3d:de:d4:cc:b6:72:a7:4a:c6:cf:
7c:ce:27:ff:b9:60:78:65:aa:2e:ae:fd:68:e4:d4:
f6:b6:16:af:11:4d:3a:1a:ab:0d:2d:9b:19:54:f6:
17:bc:4b:3f:11:0d:d7:82:c3:c6:f0:c5:1b:85:a5:
fd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A1:D7:B2:9C:6C:39:55:E0:A3:DD:74:01:FC:D5:66:86:66:E7:3F
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/AKHXspxsOVXgo910AfzVZoZm5z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.134.0/24
185.146.152.0/24
185.146.154.0/23
IPv6:
2a07:4f80::-2a07:4f80:20:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
52:b8:f0:f4:21:ef:4c:cd:e6:1c:60:c6:1c:46:a6:b5:e8:e0:
96:da:f5:2e:0b:21:cd:d0:b5:91:9c:ff:ee:b4:71:3b:8e:51:
09:5f:9d:50:ba:9f:1d:6a:80:47:a4:f9:41:22:70:10:69:18:
89:c5:44:35:74:e9:fe:67:e7:64:35:35:65:d6:09:6a:62:10:
6e:6d:34:d4:fa:4a:11:1a:db:75:42:0b:f1:ed:fe:c1:82:a1:
fe:6d:8a:49:fd:fe:9c:24:55:44:af:ce:59:52:81:56:d3:fa:
a7:cf:0d:d8:ec:8d:cb:21:2d:e5:a3:70:0c:2a:41:ea:95:cd:
68:ff:df:6e:ea:6c:2b:4b:d1:0c:89:af:3c:92:8d:a2:bc:5c:
b4:9a:65:38:7a:dc:9c:69:e3:6b:67:9c:36:aa:29:fb:ea:e2:
94:40:2b:26:33:75:49:dd:3c:bd:cd:26:6c:16:2a:a5:b3:86:
29:79:31:87:8c:55:6f:de:82:ab:45:16:c8:63:12:3b:fd:c2:
e3:14:ab:7e:45:1a:ef:99:4e:fc:fb:78:c0:d5:93:2f:97:8c:
08:e9:6e:78:87:39:4d:d7:98:c8:ff:52:ac:b4:48:c5:04:64:
95:cb:68:78:c9:be:01:c2:de:87:20:8e:b5:19:ec:43:07:d7:
b0:7d:94:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:49 2024 by rpki-client on console-ams.rpki-client.org