Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/44T0w6xRcozdvBq-xFtjr9eUoVc.roa
File: 44T0w6xRcozdvBq-xFtjr9eUoVc.roa (raw, json)
Hash identifier: Ghgg4/6RmLtWP4v9g+Bq2Sh3dzM4g5hAXzPPLcFNwtA=
Subject key identifier: E3:84:F4:C3:AC:51:72:8C:DD:BC:1A:BE:C4:5B:63:AF:D7:94:A1:57
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 01856CCB01A782C33829C95222291D30D6AD
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/44T0w6xRcozdvBq-xFtjr9eUoVc.roa
Signing time: Sun 01 Jan 2023 10:05:21 +0000
ROA not before: Sun 01 Jan 2023 10:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64425
IP address blocks: 185.244.39.0/24 maxlen: 24
5.182.210.0/23 maxlen: 24
2a0d:2406:200::/39 maxlen: 39
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:01:a7:82:c3:38:29:c9:52:22:29:1d:30:d6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 1 10:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e384f4c3ac51728cddbc1abec45b63afd794a157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a3:c9:61:14:f9:2d:ec:17:b7:03:1e:60:5f:
aa:9a:6f:54:ca:47:46:b3:81:e5:8e:ff:fe:67:93:
6c:05:15:c3:e5:3a:9a:2b:c6:c8:49:4d:0d:a6:e9:
a2:aa:f1:1c:de:05:6e:6b:a5:2e:3e:77:70:99:3d:
01:43:a5:49:60:3d:31:a1:b0:00:c5:2b:a8:e2:78:
f9:a7:83:be:cd:59:c7:04:80:5c:10:ed:ad:d5:fe:
75:34:53:69:89:20:81:ef:2c:63:17:44:9b:34:1c:
ab:84:9a:38:8c:f6:87:5a:cf:05:59:a6:a4:e7:e2:
18:a2:fc:d5:96:4b:67:fb:0d:38:c8:07:9d:89:59:
07:86:27:2d:32:07:e6:cf:a9:d7:39:58:74:f6:ae:
5d:3c:e1:30:83:8c:a6:e0:02:cd:4a:9e:ab:f0:e6:
b9:21:0c:02:2d:22:24:24:fa:74:ed:88:81:e2:4a:
7d:7d:22:e2:5f:c1:a1:e1:fc:6e:90:0e:86:b0:44:
18:48:2b:81:95:56:e5:e6:cb:5c:d1:96:44:48:8e:
f0:ff:e0:56:8d:6c:94:56:52:b4:22:d3:d9:c3:bd:
45:1e:0c:a1:28:ea:5d:f9:8f:ae:ec:30:00:94:4b:
0f:85:7d:85:e3:85:e2:55:df:b2:1e:33:d2:01:31:
b0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:84:F4:C3:AC:51:72:8C:DD:BC:1A:BE:C4:5B:63:AF:D7:94:A1:57
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/44T0w6xRcozdvBq-xFtjr9eUoVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.210.0/23
185.244.39.0/24
IPv6:
2a0d:2406:200::/39
Signature Algorithm: sha256WithRSAEncryption
1c:b5:30:ad:fc:18:e9:1f:ae:dc:38:d3:58:6c:1d:48:c9:4f:
fe:e0:9a:38:92:e8:14:d1:7b:64:89:d8:c8:24:4a:00:ac:bb:
08:6f:26:25:1c:df:07:23:fd:59:ec:e0:9c:fd:34:56:04:53:
17:b9:fa:54:da:44:ba:47:3d:a0:63:ef:3f:61:c6:65:32:4c:
11:eb:66:02:69:3e:8c:41:c5:0d:79:16:d7:e6:a7:9a:37:f4:
33:8b:99:2a:49:0e:97:0a:47:b5:29:f2:9f:ef:c4:e9:43:b4:
ec:85:73:11:ad:e3:81:e0:cf:d3:c1:00:0f:e0:d4:67:ff:e1:
67:37:d6:51:09:31:32:50:d9:57:90:dc:e5:8e:f2:be:43:10:
c5:ff:7a:d7:8a:08:cc:0b:92:4b:cf:1e:9d:14:08:a9:e8:51:
2b:b8:7c:5e:b1:4b:a7:a5:d6:dc:47:48:20:05:f1:ae:6f:06:
9a:a1:22:3b:17:25:74:9f:4f:85:be:b9:7d:f3:f4:a6:5c:64:
1b:48:2a:6c:ca:88:17:92:ab:bd:1d:78:55:fc:5b:62:d5:23:
49:1c:76:7b:a1:7a:3b:19:13:be:63:81:57:bb:6c:96:f4:12:
51:bc:4f:a8:cb:f2:7a:e5:cb:66:1f:34:d1:03:98:0c:8a:a0:
55:ab:f8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:18 2024 by rpki-client on console-fra.rpki-client.org