Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/cvthGANQiyTH7ByjmsfYP54YDA8.roa
File: cvthGANQiyTH7ByjmsfYP54YDA8.roa (raw, json)
Hash identifier: xEKwyT4awphVZTfkURIZNiNQYfzkvZypv2D7VZWDQr8=
Subject key identifier: 72:FB:61:18:03:50:8B:24:C7:EC:1C:A3:9A:C7:D8:3F:9E:18:0C:0F
Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial: 0188FCA38D55B3005C4277DB829380F1BFB4
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/cvthGANQiyTH7ByjmsfYP54YDA8.roa
Signing time: Tue 27 Jun 2023 11:35:56 +0000
ROA not before: Tue 27 Jun 2023 11:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34370
IP address blocks: 185.164.78.0/24 maxlen: 24
185.164.76.0/24 maxlen: 24
185.164.77.0/24 maxlen: 24
185.164.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 11:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:a3:8d:55:b3:00:5c:42:77:db:82:93:80:f1:bf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Validity
Not Before: Jun 27 11:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72fb611803508b24c7ec1ca39ac7d83f9e180c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:07:91:2b:37:50:c1:b1:89:ee:e0:ce:8b:3b:
05:4a:d2:87:bc:c5:3c:98:bd:c0:3f:c5:9b:a0:be:
ee:2a:88:68:ee:85:c8:7e:23:7b:c0:03:bc:98:81:
00:8a:56:25:1d:49:78:54:f5:d7:fa:57:c2:01:35:
45:65:dc:2e:88:48:ed:6e:c5:12:73:a6:14:67:3d:
cd:2d:65:37:a2:52:33:32:1f:d0:ee:35:d5:8b:3b:
e6:7b:48:21:b0:f3:9c:ae:ab:83:e6:1b:e0:8b:49:
e6:40:2b:30:09:76:e0:86:65:58:4c:c8:99:a2:a0:
87:b1:92:69:63:5f:0e:40:77:13:80:e3:7d:7c:b5:
4f:22:62:bf:9f:cb:4c:38:6f:92:2f:16:1c:7a:2e:
e2:17:0e:04:4e:44:d6:7d:cb:14:92:d0:2f:da:27:
09:b8:c2:df:d6:44:7b:a8:7a:d5:30:39:30:dd:9a:
84:75:57:23:59:3b:ed:57:88:ca:58:d6:d5:e8:0b:
7a:05:09:34:5a:1a:a6:16:17:2f:53:d7:8e:f6:b4:
33:14:f8:1c:bc:d0:fa:9c:7f:0a:2f:bb:16:5b:32:
2a:d1:b1:2b:ff:39:63:be:af:ab:56:99:c8:64:ea:
76:a5:80:8c:bf:21:bd:a9:50:66:f7:d1:35:ee:62:
0d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FB:61:18:03:50:8B:24:C7:EC:1C:A3:9A:C7:D8:3F:9E:18:0C:0F
X509v3 Authority Key Identifier:
keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/cvthGANQiyTH7ByjmsfYP54YDA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.76.0/22
Signature Algorithm: sha256WithRSAEncryption
07:67:d6:e5:69:b8:bb:88:ca:f3:59:4a:ec:38:fa:e1:35:63:
e1:65:e3:8e:46:fa:4e:73:5a:70:b5:a1:bb:64:27:ec:15:52:
b8:ad:4f:92:05:60:66:45:1f:6e:57:55:77:ad:eb:11:e3:5b:
e5:92:c1:7e:55:78:8d:d6:69:67:ae:c1:bf:bc:d3:17:52:88:
b0:a5:84:94:25:7c:a2:a4:7c:18:c1:3a:51:92:85:bf:22:1c:
2f:5e:7f:c1:26:16:0a:49:67:89:93:25:f3:9b:20:b1:1e:a6:
0f:32:35:fd:75:0d:ea:ba:b5:f5:36:f5:f9:d2:21:f5:84:47:
ec:46:5d:04:de:ac:33:01:27:5b:84:7a:bc:81:96:e1:88:0c:
8d:cd:64:73:e5:89:d6:81:87:bd:35:24:6d:bc:74:da:48:60:
09:34:ed:05:ab:96:29:69:5b:dd:38:d5:24:58:39:e5:b6:09:
18:c5:af:aa:b2:5a:a9:9a:9c:d1:a7:6f:ab:27:25:fd:1c:6c:
b9:a8:24:a7:ea:f7:db:79:bc:63:96:46:cf:d9:47:91:26:1b:
ed:11:ea:85:3a:a0:36:a8:72:98:17:c5:94:f8:96:71:ed:1f:
03:0e:41:31:29:01:c6:4b:b3:93:dd:43:52:11:73:55:e5:94:
5f:31:1f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:28 2024 by rpki-client on console-ams.rpki-client.org