Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/SqVQ5ztzXQIuDhw19cRC2Ybx0pg.roa
File: SqVQ5ztzXQIuDhw19cRC2Ybx0pg.roa (raw, json)
Hash identifier: lyBWkMaVPK7PpffWOO3GK1ZA64fJ+ia86DI82Dyy1VI=
Subject key identifier: 4A:A5:50:E7:3B:73:5D:02:2E:0E:1C:35:F5:C4:42:D9:86:F1:D2:98
Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Certificate serial: 018B47F9ABC49533E0E109C274AF7592A81D
Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/SqVQ5ztzXQIuDhw19cRC2Ybx0pg.roa
Signing time: Thu 19 Oct 2023 12:47:06 +0000
ROA not before: Thu 19 Oct 2023 12:47:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204064
IP address blocks: 185.201.12.0/22 maxlen: 32
185.115.180.0/22 maxlen: 22
185.116.51.0/24 maxlen: 24
185.116.48.0/22 maxlen: 22
185.151.172.0/22 maxlen: 22
2a07:7a00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:f9:ab:c4:95:33:e0:e1:09:c2:74:af:75:92:a8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Validity
Not Before: Oct 19 12:47:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4aa550e73b735d022e0e1c35f5c442d986f1d298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:9b:13:3c:aa:43:7b:82:d6:88:87:ff:a3:
db:cb:63:0c:b6:7a:94:2d:78:a4:26:eb:fd:cf:46:
2e:ea:ae:d7:38:05:e9:f4:8b:26:3f:d1:74:48:d1:
63:93:bf:c1:e7:4c:52:3d:74:62:d0:41:9f:ef:b1:
08:90:45:c8:43:25:77:d4:d2:5a:43:48:03:27:51:
ea:bd:6e:3f:a4:ee:e3:e5:7e:c0:27:11:7c:45:4f:
35:cc:fa:b0:9c:65:86:22:ab:52:3e:0a:27:34:9a:
49:02:50:61:52:26:52:b1:3a:e3:e4:5e:ec:d4:16:
b2:52:9d:51:25:21:b8:71:51:4b:b4:25:43:c3:e4:
d8:84:66:7e:db:d7:3b:af:05:b7:d3:7f:83:9c:64:
54:c6:53:e1:ec:a3:fc:a7:e7:96:eb:a3:1f:a5:9c:
aa:43:bb:23:c6:36:78:4f:26:b2:7c:3b:f8:3c:0e:
67:8b:fd:a4:d2:62:e4:a3:bc:05:1b:de:9f:98:be:
71:cd:e7:53:63:1c:34:b8:4a:ba:85:7a:05:53:d2:
13:98:cc:f8:1e:1b:30:21:c7:f9:d4:e5:e2:05:ba:
fd:22:4d:90:25:56:3a:a7:d6:ff:58:49:82:56:6e:
7e:de:61:4d:34:99:5e:5e:62:2e:a6:5a:86:2d:67:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A5:50:E7:3B:73:5D:02:2E:0E:1C:35:F5:C4:42:D9:86:F1:D2:98
X509v3 Authority Key Identifier:
keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/SqVQ5ztzXQIuDhw19cRC2Ybx0pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.180.0/22
185.116.48.0/22
185.151.172.0/22
185.201.12.0/22
IPv6:
2a07:7a00::/29
Signature Algorithm: sha256WithRSAEncryption
30:7d:e2:01:15:2b:7a:63:e8:71:b8:2d:75:51:8a:b5:81:8d:
f3:a6:c3:78:d5:3e:0d:72:3c:64:93:12:a9:e7:70:7c:3c:63:
c4:00:83:41:a0:08:30:b2:34:a0:1c:da:a9:6c:98:33:a2:2d:
bd:fd:18:60:b0:cc:93:28:e0:df:60:af:91:91:71:aa:b0:f0:
cd:7e:c6:df:69:07:68:a3:3f:3b:be:6e:94:98:8e:4f:02:a9:
92:fc:65:76:ab:65:2c:c0:df:0e:31:6e:65:d4:5e:ce:0d:ea:
e0:73:b6:6d:d8:bc:47:fc:af:d4:51:5a:67:86:5d:51:e8:ef:
87:54:e4:1b:0d:e7:ca:4c:ac:54:16:19:75:a4:a9:0a:19:65:
6d:01:a0:4d:f4:d0:fd:81:48:c8:6d:da:0a:90:40:7b:48:e5:
92:e6:80:ad:3e:77:e4:a7:6b:6c:82:ec:ea:7d:78:92:a0:fa:
3e:9a:eb:56:13:b8:60:bd:10:9f:32:6a:90:b2:a5:c8:5f:b8:
0c:5f:a7:9c:92:31:a0:aa:a4:b8:27:5b:b6:d9:b3:15:7e:1b:
bf:73:ca:e7:c8:f7:0f:ab:39:b3:c2:23:5c:15:0f:87:1e:8d:
ad:ac:6d:03:e3:74:27:fa:bc:b8:f1:47:6c:ba:b6:9b:4b:a1:
ce:fc:97:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:14 2024 by rpki-client on console-ams.rpki-client.org