Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/33G3BtB05UlqMPiChzT2P7Lpy_c.roa
File: 33G3BtB05UlqMPiChzT2P7Lpy_c.roa (raw, json)
Hash identifier: wLIyxn92zpxhp5ygVRQxE97eyGm9b4FULq70atxgC2o=
Subject key identifier: DF:71:B7:06:D0:74:E5:49:6A:30:F8:82:87:34:F6:3F:B2:E9:CB:F7
Certificate issuer: /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Certificate serial: 018572FA5BC02858F403298FB2636DC8D926
Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/33G3BtB05UlqMPiChzT2P7Lpy_c.roa
Signing time: Mon 02 Jan 2023 14:54:48 +0000
ROA not before: Mon 02 Jan 2023 14:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.192.36.0/22 maxlen: 23
Validation: Failed, certificate revoked on Mon 18 Dec 2023 08:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:5b:c0:28:58:f4:03:29:8f:b2:63:6d:c8:d9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Validity
Not Before: Jan 2 14:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df71b706d074e5496a30f8828734f63fb2e9cbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:d8:6f:98:77:49:6a:39:95:09:d8:54:81:
74:47:d9:33:7a:fb:d3:b1:9f:c3:a4:05:db:1a:a2:
35:92:14:f4:fb:cf:2c:6f:c0:7f:98:47:88:74:36:
e7:f0:21:a9:3e:1b:44:bb:df:9e:90:9f:5e:67:f9:
0c:e4:9f:7b:f6:f7:6a:69:c1:72:c3:ff:51:f3:3b:
f6:02:a3:63:5f:2a:b3:94:de:bb:95:4a:7b:1f:61:
37:4b:32:d9:c3:a9:53:63:44:76:56:4d:74:65:0d:
37:15:d9:c6:44:23:5e:2f:da:6d:1f:01:4e:6e:78:
14:d0:9c:f1:5b:33:cd:76:c6:7b:7b:1a:7c:86:9e:
49:33:c3:00:90:4a:ef:9a:ab:2a:ab:a1:7a:0f:36:
ac:68:94:39:55:5b:86:a3:a7:df:fd:ed:54:c6:84:
63:b0:4d:34:9f:ca:ee:36:ca:62:b2:0c:04:88:fb:
5e:3d:60:fc:27:29:2a:81:4c:db:f2:54:47:b9:57:
2a:b4:96:a7:7d:b7:e0:63:14:93:a4:bd:76:7f:aa:
42:84:ad:dd:06:6f:94:a0:03:69:01:2d:96:c5:a9:
62:ee:91:05:93:a4:ba:f1:0c:d7:cf:48:a6:2a:54:
1c:53:32:f1:04:0b:8e:fa:4e:04:19:c5:a9:7b:7d:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:71:B7:06:D0:74:E5:49:6A:30:F8:82:87:34:F6:3F:B2:E9:CB:F7
X509v3 Authority Key Identifier:
keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/33G3BtB05UlqMPiChzT2P7Lpy_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.36.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:c9:31:f1:49:db:01:f5:43:ca:89:f9:3f:cd:ce:13:20:46:
88:61:51:a0:0c:6c:0f:ec:2d:90:9d:f0:c9:89:57:2c:d2:c8:
0e:52:23:a5:52:eb:8e:a3:7d:c2:5c:c1:52:3b:e1:65:96:3b:
8e:27:06:d5:cd:0b:29:88:7f:68:c4:a0:b2:59:77:26:6c:e3:
e5:5c:65:ee:b9:12:2d:cf:6c:14:31:34:19:a7:13:13:60:69:
91:3b:2a:50:b3:c9:37:03:58:e7:72:a0:11:dc:be:d9:be:bf:
9f:4f:86:5d:46:00:c6:8f:f5:b5:63:15:77:89:a7:12:32:58:
8b:c9:21:a7:f2:c9:f0:30:5f:43:04:1d:27:69:e2:b8:b3:5e:
e7:6f:5c:91:50:e3:33:ef:f0:65:40:8a:72:e0:84:fb:0e:09:
f2:13:3e:12:6c:d7:d7:82:b8:d3:ca:33:f3:f3:75:43:ae:55:
8e:0b:8f:57:7d:0a:c3:ca:d9:e3:81:89:4c:c8:bd:b2:c3:49:
81:17:26:3c:15:6a:08:78:5d:5a:c4:94:98:fd:cb:de:f0:24:
25:eb:52:e2:67:58:68:20:16:06:5b:3c:1b:e7:b0:6b:ac:91:
3c:8a:cf:a2:2b:81:3e:1b:5c:bb:1c:af:2e:e2:ab:da:1c:df:
54:58:4b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:05 2024 by rpki-client on console-fra.rpki-client.org