Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/bcKOg05Vj0cm9rtNPz7kLyT2b1o.roa
File: bcKOg05Vj0cm9rtNPz7kLyT2b1o.roa (raw, json)
Hash identifier: FY2oNElUkRfcjLYsfo3vEs+U339BcxoVdEWqgZW02/w=
Subject key identifier: 6D:C2:8E:83:4E:55:8F:47:26:F6:BB:4D:3F:3E:E4:2F:24:F6:6F:5A
Certificate issuer: /CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Certificate serial: 01856FCB80C39EE917B3AB97CE948B02281A
Authority key identifier: 78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/bcKOg05Vj0cm9rtNPz7kLyT2b1o.roa
Signing time: Mon 02 Jan 2023 00:04:45 +0000
ROA not before: Mon 02 Jan 2023 00:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5505
IP address blocks: 185.210.226.0/24 maxlen: 24
185.210.225.0/24 maxlen: 24
185.210.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:80:c3:9e:e9:17:b3:ab:97:ce:94:8b:02:28:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Validity
Not Before: Jan 2 00:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dc28e834e558f4726f6bb4d3f3ee42f24f66f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:9a:9d:8f:3e:94:5a:ff:30:af:52:cd:65:
78:c4:f5:7d:2e:e7:c6:63:11:d5:04:09:b4:eb:2a:
94:de:f8:83:e0:b0:37:37:15:ac:6b:49:93:cd:0b:
32:d6:9a:d8:95:6d:6c:3a:24:ea:ea:5e:bd:39:71:
ca:95:4f:68:cf:a4:9c:73:a5:dd:56:81:b7:b4:4a:
ed:5c:6d:48:8b:19:83:d0:d6:91:35:e6:8e:e3:5b:
47:d7:64:2d:6d:5b:71:0e:ee:d6:d2:76:0b:3b:0a:
95:f0:df:8d:8a:db:96:2c:52:e5:a1:7b:27:13:35:
a9:7e:81:2b:56:dc:a1:f9:1a:0f:55:ac:d1:71:35:
de:82:c2:d8:8d:40:84:bf:60:41:b1:c6:9f:cb:51:
de:0f:5a:31:de:eb:7a:1e:f2:9e:dc:3a:11:0c:89:
b9:9f:d1:d7:1a:b4:7c:9f:5d:00:5b:da:1e:bb:21:
2f:1b:dd:86:81:c8:68:91:36:b2:dd:97:35:3a:2d:
a8:52:bd:b3:13:ca:c7:a3:d4:5c:71:c6:cc:47:74:
ca:41:80:67:15:6e:94:84:13:8a:80:4d:dd:24:5b:
60:6b:04:5a:25:a7:48:05:2f:66:09:6b:c5:5d:f8:
0a:ca:0d:77:10:0e:20:4a:af:05:69:ad:1c:4e:9a:
cf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C2:8E:83:4E:55:8F:47:26:F6:BB:4D:3F:3E:E4:2F:24:F6:6F:5A
X509v3 Authority Key Identifier:
keyid:78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/bcKOg05Vj0cm9rtNPz7kLyT2b1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.225.0-185.210.227.255
Signature Algorithm: sha256WithRSAEncryption
d2:83:ca:09:63:a9:1b:a4:aa:44:33:0d:f1:c0:7b:e1:fd:7c:
2b:9e:d3:2a:b7:13:a8:ad:41:1d:2f:87:fe:9c:81:69:14:36:
28:9f:36:28:64:1b:93:b2:07:70:55:8d:77:4f:61:1e:d4:64:
be:ff:ed:bc:79:e1:cc:f7:a3:79:cc:2a:14:f2:6e:3e:5a:eb:
48:23:6f:3d:80:09:b6:ec:b7:ff:f1:94:e5:ad:fb:04:dd:8e:
6c:29:b2:0f:82:ed:0c:25:b5:7d:79:c2:33:4f:4d:e2:ab:b0:
7d:92:3b:c3:78:09:74:1b:83:36:e8:cc:1c:ee:24:7c:b5:40:
db:29:e0:17:8e:14:5c:f1:85:61:3b:df:b5:54:0e:5f:a0:b0:
81:91:74:fd:10:f7:b2:da:0c:e6:bf:25:d6:17:4a:a1:ba:13:
fb:37:c1:83:73:a8:bc:54:4e:45:7d:b4:cf:45:be:c6:de:76:
9f:16:73:93:00:b7:fd:28:82:55:0e:a5:1e:47:2e:b9:c5:e8:
5f:38:ab:f5:02:2b:14:b6:c4:e1:94:4a:b5:a2:f0:ed:80:a6:
8f:58:e4:3f:fc:1a:71:69:45:86:f8:b6:23:d9:21:bc:8e:85:
56:5d:33:87:43:33:9d:7c:09:8f:56:5c:be:06:bc:b7:51:19:
38:d3:a7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:53 2024 by rpki-client on console-ams.rpki-client.org