Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/uv07A7LvjQrC5cGQ-9ti73dqfEk.roa
File: uv07A7LvjQrC5cGQ-9ti73dqfEk.roa (raw, json)
Hash identifier: CGz5/hgTpDKG69fLBM/fFTOPY24qdGTE7ysfqUtsv/U=
Subject key identifier: BA:FD:3B:03:B2:EF:8D:0A:C2:E5:C1:90:FB:DB:62:EF:77:6A:7C:49
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 0189AB01B3C1B4B66480DEC3B30B1E81F5AD
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/uv07A7LvjQrC5cGQ-9ti73dqfEk.roa
Signing time: Mon 31 Jul 2023 08:12:42 +0000
ROA not before: Mon 31 Jul 2023 08:12:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213220
IP address blocks: 185.245.42.0/23 maxlen: 24
185.245.43.0/24 maxlen: 24
185.245.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:01:b3:c1:b4:b6:64:80:de:c3:b3:0b:1e:81:f5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jul 31 08:12:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bafd3b03b2ef8d0ac2e5c190fbdb62ef776a7c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b9:8a:09:b7:a1:45:3c:af:97:f6:91:0c:d1:
5f:92:58:9e:88:1f:c8:42:42:c1:9a:4e:8f:c0:8e:
9c:27:ff:d1:53:bf:ff:35:62:b0:c2:4d:83:33:df:
cf:bc:49:fa:3f:86:c7:33:82:8f:a4:82:81:ea:73:
8c:b7:39:6f:e5:ff:8b:f8:6b:7c:65:c0:5e:d9:4e:
92:d3:a5:83:2b:9d:ee:f3:59:35:43:f0:9f:55:30:
d9:75:6a:c9:46:92:9b:17:1d:78:fb:66:6f:da:f9:
bb:89:cf:b3:f4:68:49:f0:60:57:f2:81:6f:c5:5f:
a9:7c:0f:37:f9:42:a1:1e:d8:db:31:b6:6f:74:48:
38:af:d4:36:20:9f:eb:19:11:b5:5c:c3:8c:08:91:
da:79:08:2d:7d:07:fe:98:19:23:8b:85:51:7e:c7:
d3:8d:c0:c7:09:9d:8e:72:32:2d:45:4a:42:1f:aa:
f2:a4:6e:59:fd:59:9b:29:a9:e0:50:e8:03:79:07:
1f:61:85:43:16:b7:2b:42:91:99:dd:4a:f4:6f:db:
4a:97:ee:23:57:79:35:69:55:f3:27:c7:cf:33:a7:
72:9e:e1:42:29:c6:55:4d:84:d7:55:87:e3:b1:89:
29:7f:9f:fa:64:ff:3a:36:23:bc:0a:7d:d8:9a:96:
e0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FD:3B:03:B2:EF:8D:0A:C2:E5:C1:90:FB:DB:62:EF:77:6A:7C:49
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/uv07A7LvjQrC5cGQ-9ti73dqfEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.40.0/24
185.245.42.0/23
Signature Algorithm: sha256WithRSAEncryption
10:29:9c:59:e9:d0:38:81:5e:f2:cc:da:bf:7f:c0:da:26:09:
0a:b4:84:5e:7f:d0:54:fd:f1:24:50:ef:80:07:82:45:81:c7:
1c:5b:f5:d8:7e:b1:09:b3:17:37:3c:70:fb:1d:61:c6:af:d3:
34:d9:df:dc:7b:8f:ab:72:a6:9b:1b:fd:84:70:69:05:47:45:
c7:73:25:a3:f4:54:37:6e:31:e9:d8:64:55:d8:d5:08:f2:79:
e1:46:ac:cd:be:e1:f0:7d:fc:35:69:df:40:43:33:01:17:7c:
78:b9:b1:69:ec:e0:0e:37:ce:82:6a:a6:3e:3e:e1:fb:84:55:
df:47:f7:e7:2e:09:1e:59:89:c5:27:35:0d:a3:60:d3:3a:a9:
bf:3f:0a:41:68:fb:01:f7:03:d8:6c:0d:cf:43:2c:86:03:f6:
df:a5:ee:3b:52:29:b0:03:9e:7c:3e:a3:cb:2d:15:1d:62:24:
c2:c8:42:04:17:07:7a:81:8e:fd:27:9c:a6:83:7c:d4:90:4d:
2a:81:73:b4:78:0d:38:e8:02:be:94:45:ce:be:c0:61:f5:02:
09:7a:d1:56:bb:eb:4c:63:06:47:cd:75:59:06:64:2e:be:87:
0f:fe:67:81:fc:49:ec:66:68:5d:d1:7f:22:00:2c:7d:25:a8:
78:19:c7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 12 10:56:22 2023 by rpki-client on console-ams.rpki-client.org