Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/1bUZSKfIuh-QfCN_TyG90xc195A.roa
File: 1bUZSKfIuh-QfCN_TyG90xc195A.roa (raw, json)
Hash identifier: db12cAMl3IHwBVGDrOlgkKFn0Vkc0LxSwFhNPAdXZd0=
Subject key identifier: D5:B5:19:48:A7:C8:BA:1F:90:7C:23:7F:4F:21:BD:D3:17:35:F7:90
Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Certificate serial: 018CBA05E7DFF6F7F770A8AFD78E3838C880
Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/1bUZSKfIuh-QfCN_TyG90xc195A.roa
Signing time: Sat 30 Dec 2023 09:19:58 +0000
ROA not before: Sat 30 Dec 2023 09:19:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48147
IP address blocks: 185.142.156.0/24 maxlen: 24
185.142.156.0/22 maxlen: 22
185.142.157.0/24 maxlen: 24
185.142.158.0/24 maxlen: 24
185.142.159.0/24 maxlen: 24
185.208.180.0/22 maxlen: 22
185.208.180.0/24 maxlen: 24
185.208.181.0/24 maxlen: 24
185.208.182.0/24 maxlen: 24
185.208.183.0/24 maxlen: 24
185.213.8.0/24 maxlen: 24
185.213.10.0/24 maxlen: 24
2a07:4284::/32 maxlen: 32
2a0b:3cc7::/32 maxlen: 32
2a07:4285::/32 maxlen: 32
2a07:4283::/32 maxlen: 32
2a0b:3cc0::/32 maxlen: 32
2a0b:3cc6::/32 maxlen: 32
2a07:4280::/29 maxlen: 29
2a07:4287::/32 maxlen: 32
2a0b:3cc5::/32 maxlen: 32
2a07:4281::/32 maxlen: 32
2a0b:3cc2::/32 maxlen: 32
2a0b:3cc3::/32 maxlen: 32
2a07:4280::/32 maxlen: 32
2a0b:3cc0::/29 maxlen: 29
2a0b:3cc1::/32 maxlen: 32
2a07:4282::/32 maxlen: 32
2a0b:3cc4::/32 maxlen: 32
2a07:4286::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ba:05:e7:df:f6:f7:f7:70:a8:af:d7:8e:38:38:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Validity
Not Before: Dec 30 09:19:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5b51948a7c8ba1f907c237f4f21bdd31735f790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:2e:e2:6b:0e:95:d2:e5:05:90:40:40:1d:
7e:90:85:42:ef:d2:31:f9:0e:f9:20:ce:17:28:9f:
b9:bf:59:c2:3e:65:8f:e5:a1:55:8f:b1:1c:7c:20:
05:9d:88:c6:9f:99:ee:52:48:de:ba:b1:c0:c6:4c:
bf:6d:1a:2d:98:42:55:2b:25:da:aa:51:5d:c9:54:
77:51:cb:f1:d7:f3:08:ca:9f:0a:e6:9a:23:09:e9:
09:86:88:c8:66:07:20:fa:cd:59:dd:4c:b8:c7:75:
61:37:be:49:cf:fd:bd:8d:4c:e1:50:d8:a7:6b:35:
66:e2:61:35:85:45:67:85:da:0a:c8:15:3a:7b:86:
e2:88:9d:35:ec:a1:3f:67:ce:52:e3:60:37:3a:68:
8d:ed:f1:75:1b:71:26:7a:78:55:12:5b:d3:82:91:
a5:f9:7a:0b:c4:27:9e:04:52:7b:59:ce:af:19:a1:
92:dd:cd:62:e2:aa:db:75:0c:ae:fd:59:9b:f2:39:
62:3f:b9:20:ba:c2:3f:91:d8:66:7a:03:3f:48:0d:
45:35:a3:a0:df:6a:c7:2a:79:c8:b8:18:1a:68:6e:
00:68:cc:b9:9c:45:a9:c8:00:1c:6e:65:d1:59:04:
f1:4b:17:bd:2f:54:12:61:cf:da:31:a2:4c:6d:30:
07:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B5:19:48:A7:C8:BA:1F:90:7C:23:7F:4F:21:BD:D3:17:35:F7:90
X509v3 Authority Key Identifier:
keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/1bUZSKfIuh-QfCN_TyG90xc195A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.156.0/22
185.208.180.0/22
185.213.8.0/24
185.213.10.0/24
IPv6:
2a07:4280::/29
2a0b:3cc0::/29
Signature Algorithm: sha256WithRSAEncryption
26:56:63:08:21:50:8a:b0:7c:7a:fb:04:19:9e:f8:ba:c1:92:
cc:c6:3b:d0:f1:79:04:8f:26:9a:7b:28:fe:ad:9b:41:4a:ea:
75:5d:82:58:28:68:62:45:77:91:1b:23:b9:97:8c:22:7d:86:
7b:92:51:0e:bc:6a:9d:62:3a:54:cb:08:e5:84:c4:dd:05:76:
e7:bb:b4:19:bf:39:5f:a8:a3:27:48:c9:66:9d:9f:86:95:f9:
d4:bd:17:7c:11:b6:73:b3:71:c1:ee:fa:c4:c7:7c:54:8b:c0:
35:0e:0e:ce:50:1c:ea:f0:e5:0b:85:9e:da:5e:36:a7:cd:70:
de:46:7b:19:00:6a:10:39:27:60:44:02:8e:7f:8f:36:c9:aa:
f1:cb:5f:44:33:3b:8d:20:42:c9:fd:9b:37:99:e4:73:a9:ff:
fd:52:26:27:82:8f:ea:c3:c7:3d:fb:9a:e7:ab:f6:19:e2:dc:
80:6d:74:84:b5:27:73:38:69:be:33:29:a7:28:9d:4d:88:31:
46:36:e5:c1:8e:00:6e:fe:7e:b0:c2:6c:18:a1:03:84:29:bd:
33:fd:27:08:2b:cb:9b:b7:25:b6:81:fe:85:81:5e:5c:af:7e:
8d:d2:b4:cd:bc:bd:77:41:f8:a3:24:ee:20:d2:b8:5f:ab:99:
98:94:e1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:04 2024 by rpki-client on console-ams.rpki-client.org