Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/PTIo1fDuSjsA8JXEZ9kfpXOGMQI.roa
File: PTIo1fDuSjsA8JXEZ9kfpXOGMQI.roa (raw, json)
Hash identifier: nW8LL5TfniIbgYHguJMoOmRzgr6UNCl7gsMs2fmP1r8=
Subject key identifier: 3D:32:28:D5:F0:EE:4A:3B:00:F0:95:C4:67:D9:1F:A5:73:86:31:02
Certificate issuer: /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Certificate serial: 01856F8B66D7AA2AB1EF615DBB23666FDC52
Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/PTIo1fDuSjsA8JXEZ9kfpXOGMQI.roa
Signing time: Sun 01 Jan 2023 22:54:44 +0000
ROA not before: Sun 01 Jan 2023 22:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39568
IP address blocks: 185.230.206.0/24 maxlen: 24
185.230.205.0/24 maxlen: 24
185.230.204.0/24 maxlen: 24
185.230.204.0/22 maxlen: 22
185.230.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:66:d7:aa:2a:b1:ef:61:5d:bb:23:66:6f:dc:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Validity
Not Before: Jan 1 22:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d3228d5f0ee4a3b00f095c467d91fa573863102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:27:cf:c8:5b:56:4a:d3:21:e9:36:dd:77:5b:
e0:bd:43:11:1d:f9:bd:aa:b3:1f:d5:79:d2:ca:ac:
a7:f3:f2:09:b1:46:90:08:fe:3c:67:71:c3:4f:20:
8d:50:bf:e0:28:35:56:5d:45:43:8f:ab:23:e1:ed:
9f:47:a8:51:bd:e2:2f:06:45:6b:d4:76:56:c6:ae:
d7:bb:7c:42:00:f8:ca:9c:66:59:91:96:4e:a2:55:
e3:a9:50:78:c7:0a:74:c0:0a:e4:48:58:9f:11:9f:
2b:4a:cf:57:11:ca:5b:f8:bd:02:39:29:ed:43:8c:
16:31:22:8d:94:82:88:ee:2b:40:f1:f8:26:a5:7d:
c2:df:69:38:91:0c:56:6d:37:b9:64:14:db:87:00:
b6:fd:7e:0b:18:e0:f9:87:3c:0b:1f:fc:85:ee:1a:
3b:03:d1:86:eb:d7:f9:22:ea:c1:1a:be:8e:8b:53:
d5:25:c0:7d:63:ae:66:9a:ce:47:52:b1:91:3f:30:
44:44:2f:07:43:1c:58:ea:76:d2:46:b4:ba:74:f7:
d9:c7:d3:ad:86:09:2f:fa:74:86:6b:32:a0:d3:4b:
89:c1:3b:d9:7f:da:ba:e4:dc:2b:5c:5c:16:bb:ac:
80:85:bf:a9:45:85:25:2e:96:92:0b:9e:cb:26:f5:
d8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:32:28:D5:F0:EE:4A:3B:00:F0:95:C4:67:D9:1F:A5:73:86:31:02
X509v3 Authority Key Identifier:
keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/PTIo1fDuSjsA8JXEZ9kfpXOGMQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.204.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:08:6a:0a:81:73:77:b8:7d:d6:6f:19:59:73:1b:73:6c:ab:
59:3c:6f:10:d1:b8:98:e1:3b:53:35:b5:c0:81:3e:02:e8:8f:
48:f5:ba:05:b7:5f:d6:ff:f0:a5:ef:79:67:24:8c:6f:c7:c4:
bd:22:ef:50:fd:d8:2b:3d:82:d4:90:3e:9b:8f:b7:30:ee:39:
21:4f:31:f2:c4:0b:9f:59:82:22:cc:8b:b2:51:c4:d7:12:12:
ff:3b:d4:da:dd:b8:d9:90:a1:16:a8:7e:2b:af:e0:9f:6d:85:
7a:32:27:9a:6a:3e:73:6b:88:fc:98:06:42:5d:2f:ef:ed:43:
59:1a:4a:55:01:99:fa:32:71:a9:1f:2e:b8:7b:06:c4:18:f8:
16:af:a9:8c:f9:85:67:ef:32:24:5f:e0:c1:3a:29:70:72:b1:
57:0c:2d:89:30:90:fc:53:1e:c3:1c:31:8d:46:20:a3:92:be:
0a:dd:e4:b4:b6:b8:a0:c0:da:15:ff:8a:1c:86:46:2f:9e:dd:
64:85:27:fb:6c:bd:57:72:7d:35:b7:df:8a:61:9d:09:83:52:
a1:b2:25:14:d2:17:25:db:18:a7:cc:07:92:77:b8:87:19:35:
cf:0b:6c:e3:b5:85:70:73:d9:6c:d7:6d:d1:fe:65:fc:99:e3:
fc:49:df:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:00 2024 by rpki-client on console-fra.rpki-client.org