Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/x3KxHkb0yFDckwejDU4phUW0hEM.roa
File: x3KxHkb0yFDckwejDU4phUW0hEM.roa (raw, json)
Hash identifier: wz0haG3wl1aGB2qX1+8KHRESlx8nt9w9ErNE1OrtP6U=
Subject key identifier: C7:72:B1:1E:46:F4:C8:50:DC:93:07:A3:0D:4E:29:85:45:B4:84:43
Certificate issuer: /CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Certificate serial: 01856FC25AD65779B6A4A8BD669F137956F7
Authority key identifier: 58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/x3KxHkb0yFDckwejDU4phUW0hEM.roa
Signing time: Sun 01 Jan 2023 23:54:46 +0000
ROA not before: Sun 01 Jan 2023 23:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59874
IP address blocks: 185.68.38.0/24 maxlen: 24
185.68.36.0/24 maxlen: 24
185.68.37.0/24 maxlen: 24
185.68.39.0/24 maxlen: 24
2a05:1580:13::/48 maxlen: 48
2a05:1580:11::/48 maxlen: 48
2a05:1580:12::/48 maxlen: 48
2a05:1580:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:5a:d6:57:79:b6:a4:a8:bd:66:9f:13:79:56:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Validity
Not Before: Jan 1 23:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c772b11e46f4c850dc9307a30d4e298545b48443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:5c:70:7b:10:f2:3e:cc:dd:74:67:91:51:
60:f5:ad:92:d1:dc:40:15:b0:ad:11:0a:84:36:f4:
1b:d4:0c:a9:ed:16:9a:d2:14:d0:45:58:24:f7:e1:
1e:d5:3e:db:b0:2d:58:fe:65:3f:a7:f8:3b:f8:bf:
5b:0c:d0:c7:21:f8:4b:cd:59:0e:a8:f2:1c:85:ce:
ea:cc:2b:26:0e:84:d2:64:80:e0:07:0a:ea:39:45:
f9:e8:0b:5e:97:f8:56:b6:e5:e1:df:a5:bd:31:35:
c5:3e:7f:14:39:00:fd:0e:2e:77:c2:a2:c5:1e:51:
93:97:ec:f3:73:f8:3f:42:90:23:4c:6c:15:b2:92:
82:18:6f:f6:44:da:b2:1e:c9:e5:89:46:e1:bd:91:
76:99:be:29:ed:69:07:47:95:1b:53:80:88:58:f1:
df:71:84:dc:7c:12:47:da:09:dd:d8:19:fb:26:52:
a2:88:35:7c:bf:ba:00:5f:e0:15:50:3b:f5:cd:ed:
4e:7a:5f:4e:42:60:af:4b:b3:26:a3:c6:77:5f:6a:
c9:50:26:ce:c1:ac:94:66:ba:02:48:85:36:5f:d5:
36:01:d6:64:38:f7:a9:e7:12:ac:af:e8:80:8f:cb:
cd:87:8e:a6:4e:f5:a8:f5:56:de:27:74:33:8a:d8:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:72:B1:1E:46:F4:C8:50:DC:93:07:A3:0D:4E:29:85:45:B4:84:43
X509v3 Authority Key Identifier:
keyid:58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/x3KxHkb0yFDckwejDU4phUW0hEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.36.0/22
IPv6:
2a05:1580:10::/46
Signature Algorithm: sha256WithRSAEncryption
81:3d:93:ff:fe:27:a7:5c:9a:77:c6:1a:e6:53:e1:23:cc:64:
c5:33:6b:32:ff:89:ab:cb:31:97:9e:1a:18:62:c7:d0:72:79:
57:99:56:c5:cc:93:c9:a1:90:03:af:4e:41:2a:f7:7c:71:23:
32:86:98:dd:0f:67:d3:f6:5d:52:61:4f:cf:1e:4c:ac:08:c4:
85:5b:be:ba:51:36:75:07:ca:36:88:a3:ce:36:fa:18:87:94:
77:25:2a:b6:85:4a:f9:e3:39:0e:63:9f:96:bb:bb:ce:56:6e:
8a:cf:ba:ac:cc:a2:77:4b:12:20:d5:7a:41:4d:70:16:25:30:
f6:b6:7e:a1:df:03:a3:49:67:ce:cc:90:6f:3a:ca:69:e5:19:
46:8c:dc:27:e5:14:ad:12:46:54:77:3a:a8:53:87:06:de:4a:
94:7d:32:6c:2d:c0:1a:a1:3c:f5:1d:8f:d4:3b:4b:be:d3:f5:
87:67:c6:83:c9:6b:ff:8a:61:ae:3b:fc:f3:b0:af:20:b2:ac:
25:ea:81:e7:2e:e8:64:ad:a0:0b:cb:26:d3:7d:2e:4f:b6:91:
7f:11:94:ab:b1:03:0c:36:3f:86:7f:76:22:cc:c4:8f:71:7f:
83:0f:58:94:23:9e:29:85:ac:08:4b:c3:5c:68:3b:4b:da:e5:
62:fc:a2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:59 2024 by rpki-client on console-ams.rpki-client.org