Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/CwqTF5Rv1aYpP9-gdKk_vJKQq8s.roa
File: CwqTF5Rv1aYpP9-gdKk_vJKQq8s.roa (raw, json)
Hash identifier: 17nLd+uVBC4KobmpB11U472IHEXPcdGZETMf2CZNqeQ=
Subject key identifier: 0B:0A:93:17:94:6F:D5:A6:29:3F:DF:A0:74:A9:3F:BC:92:90:AB:CB
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 01856F8B760AF051306F3638FE571AE54E26
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/CwqTF5Rv1aYpP9-gdKk_vJKQq8s.roa
Signing time: Sun 01 Jan 2023 22:54:48 +0000
ROA not before: Sun 01 Jan 2023 22:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.1.86.0/24 maxlen: 32
2001:7f8:af::/48 maxlen: 128
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:76:0a:f0:51:30:6f:36:38:fe:57:1a:e5:4e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Jan 1 22:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b0a9317946fd5a6293fdfa074a93fbc9290abcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:42:cb:6e:d2:33:6f:18:38:d4:d9:e1:bd:8a:
bd:85:48:9a:6e:a0:b7:58:c9:5d:56:2b:f3:07:61:
6b:50:aa:56:56:c8:d2:9e:99:ea:b5:84:b8:16:2d:
a6:93:5c:d9:5b:aa:bb:79:20:af:c9:da:d1:e8:3e:
c1:64:77:c8:62:bb:04:77:6c:26:00:0b:e9:d3:24:
f8:6b:d1:e6:1f:50:a8:0d:e9:73:a5:e9:4b:73:5d:
d8:2d:b2:dc:8d:d4:e0:e1:d3:b3:f6:cd:08:2e:dc:
9f:19:a6:64:45:f7:39:1f:28:ac:db:66:40:11:d1:
e3:0b:16:46:c2:a5:39:d9:6b:d5:1c:22:4d:7c:cb:
f0:6f:d3:f1:7b:fc:61:fd:a8:e0:f9:0f:9d:96:a3:
62:01:b6:10:2f:72:96:df:23:74:16:6c:46:b0:36:
55:15:3c:5d:4c:63:9c:ed:1f:ca:bf:98:e1:5d:03:
25:22:46:96:8c:74:6a:61:bd:7f:d9:cc:8f:4e:58:
8f:b7:3b:1f:3c:0a:c6:70:51:27:c0:22:cd:aa:25:
b3:34:46:0d:7b:15:29:2c:38:d0:49:0c:6d:56:a4:
2d:a9:f3:d9:e2:5c:7d:59:4a:2e:0d:f5:bb:2f:70:
6e:f1:98:c2:6e:36:32:13:0c:d9:d9:87:95:34:fd:
f2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0A:93:17:94:6F:D5:A6:29:3F:DF:A0:74:A9:3F:BC:92:90:AB:CB
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/CwqTF5Rv1aYpP9-gdKk_vJKQq8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.86.0/24
IPv6:
2001:7f8:af::/48
Signature Algorithm: sha256WithRSAEncryption
7b:8c:67:ca:0e:12:84:e3:04:17:12:c4:f3:03:66:64:b6:46:
db:10:99:dc:2c:29:9c:53:bc:11:d3:9a:b9:b0:e7:13:de:da:
05:8f:39:40:a7:95:bd:12:5d:95:75:2e:8f:7d:99:f2:8a:db:
47:c9:ed:6a:9d:f9:bd:b4:53:52:7e:f8:ee:d7:3b:d3:b1:db:
6e:09:a0:d1:4d:e2:79:4c:38:e4:fd:75:5e:79:36:d8:33:9f:
ab:4a:40:c3:1a:1b:90:1b:e3:6f:ab:a7:e2:e1:1b:c9:32:5b:
b3:8c:a8:99:9f:de:8a:13:06:83:8d:6a:1f:5d:af:d8:20:11:
4a:e4:3e:8a:e9:fd:e5:a2:a5:ce:33:95:ad:d1:0c:83:94:cd:
c5:bf:16:35:3e:33:83:11:c0:2a:0d:7a:a8:31:81:1a:fc:dc:
da:b2:49:aa:b3:0c:33:ec:ad:8a:7d:06:4b:30:36:b1:e6:4a:
aa:82:5c:cd:89:0a:9f:82:46:f4:ca:1b:e9:5e:05:c0:55:bb:
2c:7c:ce:67:94:96:3a:e6:f7:81:62:6e:d9:19:df:31:ed:24:
77:de:77:2a:20:e3:ac:1f:52:21:74:b1:64:50:d6:1c:a3:57:
09:68:14:8c:22:c0:08:17:bc:a8:c3:dc:a3:ec:a3:76:6d:a9:
61:ff:33:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:32 2024 by rpki-client on console-fra.rpki-client.org