Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/o8xa0MbeE3mvM4mNAVyPHsBaJ3Y.roa
File: o8xa0MbeE3mvM4mNAVyPHsBaJ3Y.roa (raw, json)
Hash identifier: SddmQ8VfLXXB2W4RYXD2osf8uh8NutvFHSvTgOEb/gw=
Subject key identifier: A3:CC:5A:D0:C6:DE:13:79:AF:33:89:8D:01:5C:8F:1E:C0:5A:27:76
Certificate issuer: /CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Certificate serial: 018572C382E78954C8C2D48009671EC5B2DA
Authority key identifier: 67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/o8xa0MbeE3mvM4mNAVyPHsBaJ3Y.roa
Signing time: Mon 02 Jan 2023 13:54:53 +0000
ROA not before: Mon 02 Jan 2023 13:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 185.93.174.0/24 maxlen: 24
188.116.51.0/24 maxlen: 24
188.116.50.0/24 maxlen: 24
2a0a:7180:80::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:82:e7:89:54:c8:c2:d4:80:09:67:1e:c5:b2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Validity
Not Before: Jan 2 13:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3cc5ad0c6de1379af33898d015c8f1ec05a2776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f8:17:0b:44:83:66:17:67:63:0a:e7:77:81:
cc:fb:a4:38:29:a7:dc:85:08:45:a2:8f:a7:f5:b5:
d7:26:7b:63:66:70:87:86:4c:0d:86:cd:ae:cc:e3:
c8:b6:21:15:31:5a:40:7d:22:61:21:6f:3d:2c:28:
cc:66:1c:f3:4f:2c:e8:aa:0d:9f:b9:de:54:e4:ed:
91:70:01:29:6e:ee:1b:c3:0e:ba:ab:2e:11:ca:81:
03:87:4a:dc:1f:44:89:48:8d:9b:a6:72:87:85:0c:
49:ed:15:9a:3a:17:29:7f:6f:ce:e6:b3:04:24:6f:
2a:c2:83:bd:69:30:40:c8:ad:82:ab:21:ff:4e:51:
94:40:2c:48:6f:89:d3:2f:c0:47:8a:1d:49:0f:55:
9f:a1:96:97:a2:f5:b2:ca:ac:21:67:2b:7c:7f:4a:
fc:7b:31:29:47:82:5a:1d:bc:84:5e:6b:11:76:a0:
52:40:25:ae:d1:1c:62:84:ea:1a:d5:fe:a0:1c:0a:
09:df:5b:dc:0a:c5:1e:5f:d7:b9:c0:ef:d7:75:f0:
e0:00:8c:5e:13:1a:11:0e:39:30:f5:e0:b5:32:98:
01:25:ed:fd:32:76:d8:e0:65:7c:f0:97:47:0c:47:
ba:6a:04:af:34:bc:83:94:73:5d:04:49:36:64:73:
f8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CC:5A:D0:C6:DE:13:79:AF:33:89:8D:01:5C:8F:1E:C0:5A:27:76
X509v3 Authority Key Identifier:
keyid:67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/o8xa0MbeE3mvM4mNAVyPHsBaJ3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.174.0/24
188.116.50.0/23
IPv6:
2a0a:7180:80::/48
Signature Algorithm: sha256WithRSAEncryption
b7:6b:c7:72:58:8a:45:07:fa:ee:49:2a:1d:0e:25:b7:ca:dc:
b4:f3:8f:bb:62:5f:1f:22:ba:8a:db:df:0a:59:aa:53:7d:69:
f9:69:ce:e7:c9:97:05:c2:56:a3:df:bd:f1:95:31:12:ad:00:
54:98:97:3b:e5:45:03:3c:ef:05:ac:11:02:15:70:dd:97:05:
11:1d:ba:d3:0f:5f:98:be:55:3a:15:58:df:8c:ab:06:c9:12:
a1:eb:bd:a4:6e:ae:d8:ff:75:2a:99:80:a7:15:bd:04:f2:59:
4f:00:fa:06:5b:f2:7c:63:2f:37:af:31:10:88:48:f7:2b:4e:
09:f0:3c:cf:f6:9a:8a:3f:92:d6:a3:e8:cc:24:fd:75:54:f5:
3b:2f:96:6d:a7:f1:13:d1:00:8f:ed:21:3b:ad:7e:bf:cf:a6:
76:24:85:0a:58:e3:a5:5b:ef:34:71:4e:ac:dd:5b:b4:53:cb:
57:24:58:bd:93:3e:40:f3:77:22:d1:a8:72:9e:8c:6e:25:35:
c8:f9:d5:5c:49:58:b9:11:5f:5c:dc:e7:7a:d7:f1:48:19:3e:
9e:bc:ae:5f:5e:49:a7:2d:f0:13:fa:b7:ee:18:c7:e7:7a:27:
eb:92:c4:f0:33:77:8c:98:95:a0:00:a0:c0:54:c8:3d:b5:e9:
ad:4b:49:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:54 2024 by rpki-client on console-ams.rpki-client.org