Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/vDv3Qsi677S9XlZuv1PK0Lxr_2U.roa
File: vDv3Qsi677S9XlZuv1PK0Lxr_2U.roa (raw, json)
Hash identifier: ROIWG7fd89POe/Mc8DV/pA7jHmrqpjBhiThWco9MlTY=
Subject key identifier: BC:3B:F7:42:C8:BA:EF:B4:BD:5E:56:6E:BF:53:CA:D0:BC:6B:FF:65
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 018A1C2897FC1D4FE45C9F2224585383535F
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/vDv3Qsi677S9XlZuv1PK0Lxr_2U.roa
Signing time: Tue 22 Aug 2023 07:32:16 +0000
ROA not before: Tue 22 Aug 2023 07:32:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204499
IP address blocks: 185.219.112.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Nov 2023 07:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:28:97:fc:1d:4f:e4:5c:9f:22:24:58:53:83:53:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Aug 22 07:32:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc3bf742c8baefb4bd5e566ebf53cad0bc6bff65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:1d:76:67:c3:b6:46:79:f8:5a:c3:7d:65:
ae:3e:32:97:3f:47:f9:93:f6:c7:03:68:7b:95:04:
c6:c3:43:da:2b:c7:59:52:bd:15:f1:9d:2f:ba:d2:
55:7a:6a:a6:a6:51:cd:20:ef:b1:14:ff:26:f2:19:
79:8f:9a:79:91:ba:e6:0f:e2:61:e0:2c:cd:6e:c8:
01:2a:05:ee:82:a8:fb:31:47:86:9d:04:29:6c:40:
51:28:94:60:62:9f:23:64:03:6c:b1:74:2d:82:9a:
cc:c1:49:71:32:f0:e9:67:71:bc:56:f1:2e:3e:e8:
43:57:63:d0:11:f8:a8:fa:8f:b4:01:ea:56:52:bc:
3b:71:2a:95:06:b9:d5:b3:62:fd:e5:5e:ae:18:0f:
db:9f:68:a3:4f:7c:07:cb:6e:10:17:b7:96:e2:06:
be:d6:3a:66:63:a9:86:07:f7:e6:43:94:98:c1:3b:
d5:a7:75:72:0a:fe:08:08:15:70:61:d2:d5:39:2c:
f6:04:85:36:09:c0:5f:fc:c9:64:4c:3a:c8:82:f0:
ec:b3:16:10:10:dc:b9:72:94:3d:57:c0:fc:c5:da:
98:74:35:ca:4b:d4:7e:89:15:98:b7:20:74:f2:be:
3a:fc:e5:b6:21:81:22:38:80:19:e5:25:ba:96:75:
c0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3B:F7:42:C8:BA:EF:B4:BD:5E:56:6E:BF:53:CA:D0:BC:6B:FF:65
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/vDv3Qsi677S9XlZuv1PK0Lxr_2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.112.0/22
Signature Algorithm: sha256WithRSAEncryption
13:75:3a:91:00:72:72:88:40:09:7c:de:40:e6:c6:1f:6d:c0:
16:e0:3a:90:12:12:4f:3a:4c:90:f7:d3:12:7d:ad:6d:22:28:
e9:13:42:39:57:d5:12:d2:87:40:b4:24:07:47:c2:4c:31:59:
86:72:5c:a8:e8:83:48:40:1c:c0:56:66:80:00:c7:c2:38:03:
88:f6:f9:a6:50:eb:a9:99:54:59:e0:d2:fb:40:5e:3c:bc:af:
45:96:df:43:c0:60:28:1e:a6:11:af:60:22:63:6f:04:17:0b:
b8:8f:70:78:08:af:20:64:38:10:87:69:d8:b1:61:7c:1a:0c:
51:a5:80:ef:6b:e9:d1:a3:d5:fe:0b:28:bc:aa:ec:69:f0:cc:
0a:89:3c:2e:13:ba:40:e8:47:2b:63:cd:0a:0a:c9:29:e6:ab:
46:de:e2:75:7c:e4:cf:e9:db:a8:d0:9e:fa:8e:7a:fc:22:2f:
27:31:0c:43:7a:c7:fe:c4:c7:1a:2b:d2:e6:50:a3:e0:b6:0c:
c4:de:aa:06:fc:eb:c5:9c:57:a4:1e:4b:aa:82:db:29:bf:e6:
06:c1:d1:41:cd:49:49:35:60:dd:65:10:e2:ce:7e:97:4f:e1:
6f:dd:23:24:c9:ca:83:42:34:6d:9e:87:64:31:8c:b4:34:77:
23:ad:4f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:17 2024 by rpki-client on console-ams.rpki-client.org