Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/hWgv2COCltYnbjMQ1cOvwYW8gRk.roa
File: hWgv2COCltYnbjMQ1cOvwYW8gRk.roa (raw, json)
Hash identifier: gQ86IEeeyEj6EwUXmRD9sGBrTWL61qz4q3hV+m/TKzY=
Subject key identifier: 85:68:2F:D8:23:82:96:D6:27:6E:33:10:D5:C3:AF:C1:85:BC:81:19
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 018CC72734C8E8E0BAD4DCC62A1E2B9071C5
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/hWgv2COCltYnbjMQ1cOvwYW8gRk.roa
Signing time: Mon 01 Jan 2024 22:31:24 +0000
ROA not before: Mon 01 Jan 2024 22:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206273
IP address blocks: 185.198.60.0/23 maxlen: 23
185.198.62.0/23 maxlen: 23
178.212.58.0/23 maxlen: 23
31.130.242.0/23 maxlen: 23
31.130.244.0/22 maxlen: 22
91.218.154.0/23 maxlen: 23
2a0a:15c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 05 Jan 2024 16:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:34:c8:e8:e0:ba:d4:dc:c6:2a:1e:2b:90:71:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Jan 1 22:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85682fd8238296d6276e3310d5c3afc185bc8119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:95:88:63:01:aa:d8:d0:45:e7:3c:45:f3:37:
ff:94:17:3c:a5:70:8a:0a:55:5f:da:a1:ec:5c:05:
e1:00:b9:a0:a6:6f:c3:22:7a:f9:62:9b:94:b4:ed:
24:a5:13:20:c8:ab:69:cc:7f:fa:e7:28:c0:5f:7d:
26:8f:14:77:2f:9a:56:9c:49:99:2b:31:78:70:dd:
ee:39:3a:2f:9c:00:02:69:0d:76:ec:bf:fd:23:db:
78:09:82:3f:d3:9b:4c:8b:09:fa:2f:fa:06:c6:b0:
fb:4b:7b:b9:5b:9c:ec:6b:bb:e5:5f:d3:27:31:68:
f4:60:aa:7f:b2:7c:2d:17:c7:d8:27:ba:de:87:dd:
f0:35:07:52:4f:f1:c9:56:d0:ee:23:46:7b:22:f5:
0a:6a:e1:98:0f:c1:4f:11:48:6f:38:5e:4f:7a:32:
dc:c0:93:be:fd:98:5b:95:8b:d4:3a:bc:bb:b3:de:
e2:41:85:5a:07:bc:c4:e5:84:e1:10:1e:b0:54:c5:
6d:de:76:e2:3d:5f:7f:e6:50:26:d5:9a:fc:b1:eb:
4e:be:50:37:52:0e:60:15:52:44:cb:1e:5a:dd:86:
fb:15:0e:4e:cd:e3:65:57:11:40:68:75:73:b1:1f:
ad:42:44:35:f3:68:26:59:6c:e5:a4:d0:80:f8:12:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:68:2F:D8:23:82:96:D6:27:6E:33:10:D5:C3:AF:C1:85:BC:81:19
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/hWgv2COCltYnbjMQ1cOvwYW8gRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.242.0-31.130.247.255
91.218.154.0/23
178.212.58.0/23
185.198.60.0/22
IPv6:
2a0a:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:5a:58:60:90:87:22:87:e1:42:a3:5f:80:c3:8d:b1:b5:41:
3a:83:39:9c:82:e3:f8:dd:2c:83:9b:f4:1a:64:d1:4f:44:c2:
ab:20:37:4e:06:2b:95:6a:32:5b:5f:66:bc:09:1a:f0:2c:2a:
7a:80:2c:17:38:84:5f:aa:03:6a:4c:69:62:58:41:ed:4b:9c:
85:6e:30:59:43:38:d9:93:82:14:68:b3:ce:a3:00:15:b0:76:
b3:f3:df:62:f8:11:99:56:b1:eb:5e:9c:01:92:83:d5:1a:aa:
e9:21:b9:ba:cc:10:31:2a:75:26:e6:98:28:73:f2:5d:63:1e:
a4:4a:c3:eb:85:05:bd:cd:e8:8a:44:a5:86:ee:eb:5b:4e:c6:
be:78:89:9e:dc:71:f2:38:aa:b3:ff:bd:6f:7b:05:90:82:c6:
0f:60:6d:78:ba:54:16:eb:fa:3d:97:53:e2:a7:9f:91:75:ae:
36:fb:8e:ba:91:69:ff:fb:0d:d4:45:a7:d2:62:0e:cf:da:e1:
e1:a0:c0:49:c8:44:47:aa:f9:6a:de:cc:10:b1:fc:7d:91:84:
a2:ad:1a:48:ce:cb:6a:87:28:3f:8a:73:ae:a2:d6:f2:c3:ad:
57:c2:3e:4e:47:0f:43:e7:16:9e:0b:87:67:22:f7:6e:a0:32:
a7:4b:e2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:23 2024 by rpki-client on console-fra.rpki-client.org