Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/ild_0cwrVaVXaFcM9QQN0Lo1N8U.roa
File: ild_0cwrVaVXaFcM9QQN0Lo1N8U.roa (raw, json)
Hash identifier: NybOVWluDM+oiCKkxwOKNRNMI7/yvy9PxCNBgUW5/Dc=
Subject key identifier: 8A:57:7F:D1:CC:2B:55:A5:57:68:57:0C:F5:04:0D:D0:BA:35:37:C5
Certificate issuer: /CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Certificate serial: 01856B9337E16204E23E52E1A21A4CF2C254
Authority key identifier: 13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/ild_0cwrVaVXaFcM9QQN0Lo1N8U.roa
Signing time: Sun 01 Jan 2023 04:24:48 +0000
ROA not before: Sun 01 Jan 2023 04:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38955
IP address blocks: 185.16.188.0/22 maxlen: 24
185.16.190.0/24 maxlen: 24
185.115.186.0/23 maxlen: 23
185.115.184.0/23 maxlen: 23
178.23.80.0/21 maxlen: 23
81.19.144.0/20 maxlen: 24
2a00:1a68::/32 maxlen: 34
Validation: Failed, certificate revoked on Tue 21 Feb 2023 06:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:37:e1:62:04:e2:3e:52:e1:a2:1a:4c:f2:c2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Validity
Not Before: Jan 1 04:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a577fd1cc2b55a55768570cf5040dd0ba3537c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:58:0a:11:24:4e:a2:86:d4:22:dd:43:df:
cd:1d:1a:3f:07:e9:9f:90:18:a5:de:e2:28:ba:cc:
2e:b0:54:11:d3:87:fc:05:1b:21:48:4d:82:70:7d:
b6:97:f7:77:e5:a8:9a:31:a2:e2:04:b7:f5:6a:04:
ab:97:36:05:b9:38:6c:83:ba:e4:29:b6:4b:a0:fd:
1f:3b:f1:4a:d1:2b:98:42:75:cc:ee:73:ce:52:dd:
74:83:0d:97:4d:a9:bd:08:50:fb:9e:50:48:b0:78:
cd:f9:72:0e:ba:2a:41:9f:ea:dd:7d:59:37:8a:77:
80:16:16:80:e2:73:eb:bb:11:31:43:ce:45:06:7e:
da:76:da:e2:e1:9c:ae:2e:66:09:2c:eb:8b:a0:5a:
84:52:d3:b6:e2:fd:cd:26:ab:64:dc:0c:42:0d:8a:
a8:7b:a2:7e:99:86:56:6f:51:13:66:04:66:0e:0a:
71:23:1d:de:08:14:db:9d:8e:8f:78:15:5a:cd:0d:
50:b0:27:30:4d:98:65:de:88:3c:b0:16:af:36:41:
99:b2:6e:e9:03:87:d5:b0:ef:16:c3:0f:b4:b0:bf:
85:08:44:41:0e:f1:08:80:18:0b:93:65:ff:5d:7a:
34:10:e7:d4:16:6d:ec:f8:2e:b3:f0:36:12:4c:82:
a0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:57:7F:D1:CC:2B:55:A5:57:68:57:0C:F5:04:0D:D0:BA:35:37:C5
X509v3 Authority Key Identifier:
keyid:13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/ild_0cwrVaVXaFcM9QQN0Lo1N8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.144.0/20
178.23.80.0/21
185.16.188.0/22
185.115.184.0/22
IPv6:
2a00:1a68::/32
Signature Algorithm: sha256WithRSAEncryption
6e:2d:2a:81:3e:d6:4b:b8:ee:88:a2:30:ab:7e:c7:1b:75:11:
cf:83:e1:b7:3b:d8:e4:0a:b6:34:9e:dd:6f:1e:a4:05:f3:90:
79:d2:84:e3:82:23:8d:75:9b:b1:8c:71:99:48:fa:f6:da:10:
f1:1b:13:51:2b:5b:a3:8c:3e:98:6e:c2:a0:c2:c4:1b:24:7e:
96:29:1a:e8:49:53:1b:97:9d:60:19:36:ee:89:c6:7b:4a:e6:
c4:3a:1f:46:21:d8:50:2b:82:f7:fc:72:d4:96:7c:b8:60:cd:
8a:00:f8:b1:a6:00:4c:31:ed:bd:e9:be:c6:06:42:e3:bc:80:
41:9d:da:3f:3c:e4:06:da:f0:72:37:5a:93:80:7e:6e:46:5d:
4f:12:00:e8:da:92:a8:2e:8f:e3:6a:8f:ae:ac:89:61:95:af:
66:3c:09:db:94:42:69:39:02:5f:c1:5d:22:00:70:28:9e:11:
95:d9:95:db:ef:71:50:84:47:d1:ab:27:e0:0b:93:e5:62:56:
6d:99:37:c8:c9:b7:09:bd:ff:7f:61:9a:cd:b8:b0:3f:ca:57:
f9:34:e0:45:0b:da:7d:c9:eb:5f:2a:b9:e2:3a:29:cf:43:80:
f1:7f:58:8c:47:d1:cd:26:f7:6d:e1:d4:5f:2d:83:41:8c:fe:
78:48:a2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:23 2024 by rpki-client on console-ams.rpki-client.org