Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/1CLSho8UQT5c_Rr2Xo-yOiao-68.roa
File: 1CLSho8UQT5c_Rr2Xo-yOiao-68.roa (raw, json)
Hash identifier: 6vXZQGwMDEVztHlYG1MWO6+scy6wIAdHL4FlcxY0Trw=
Subject key identifier: D4:22:D2:86:8F:14:41:3E:5C:FD:1A:F6:5E:8F:B2:3A:26:A8:FB:AF
Certificate issuer: /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial: 0189C5F9A7D66CEDCC17BB2D7CCE5835DBB8
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/1CLSho8UQT5c_Rr2Xo-yOiao-68.roa
Signing time: Sat 05 Aug 2023 13:53:40 +0000
ROA not before: Sat 05 Aug 2023 13:53:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49188
IP address blocks: 185.163.245.0/24 maxlen: 24
185.163.246.0/23 maxlen: 23
185.163.246.0/24 maxlen: 24
185.163.244.0/24 maxlen: 24
185.163.244.0/22 maxlen: 22
2a10:9d00::/29 maxlen: 29
2a10:9d00:2::/48 maxlen: 48
2a10:9d00::/48 maxlen: 48
2a10:9d00:3::/48 maxlen: 48
2a10:9d00:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c5:f9:a7:d6:6c:ed:cc:17:bb:2d:7c:ce:58:35:db:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Validity
Not Before: Aug 5 13:53:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d422d2868f14413e5cfd1af65e8fb23a26a8fbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:29:a6:66:a6:9f:c6:c3:4d:be:1a:ba:77:
35:9c:d8:7b:80:c3:f5:80:0d:43:89:d8:ef:65:dd:
8d:e3:dd:ff:21:57:50:2b:c0:fa:5b:29:aa:f4:b9:
15:b9:94:bc:fb:e0:ed:d9:e3:5f:38:05:14:2c:0f:
9a:7f:23:75:22:2b:03:34:7f:87:94:20:2b:8b:4f:
d1:75:be:1b:72:dc:03:aa:0d:3f:e6:0c:5d:b3:8b:
5d:07:f3:44:ed:f2:54:8f:3a:b8:90:95:35:49:37:
5a:bb:f2:ee:33:fb:81:f2:bd:48:d8:43:b4:61:d8:
4c:ee:ea:30:0c:51:9c:e7:4e:fa:3e:6f:4c:97:bf:
c1:13:86:70:26:59:92:f4:39:49:be:c2:7d:c8:37:
40:6b:08:a8:22:ac:d2:cf:4e:64:65:53:34:70:64:
0a:30:fe:69:8a:83:fa:87:73:3d:c9:75:6b:c6:c0:
e1:fa:e4:39:ee:17:df:ca:02:b5:42:19:78:7e:3c:
5f:d5:b6:69:9a:7a:d2:fc:58:d2:9a:eb:c5:c2:5d:
a8:cd:2f:b7:f8:4b:4f:e0:12:de:18:b7:94:45:7f:
49:90:87:d3:dc:3d:a5:f8:e9:a3:9e:75:26:a3:34:
f0:b0:c4:14:45:23:e2:40:c9:4b:ed:8f:5b:98:37:
c7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:22:D2:86:8F:14:41:3E:5C:FD:1A:F6:5E:8F:B2:3A:26:A8:FB:AF
X509v3 Authority Key Identifier:
keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/1CLSho8UQT5c_Rr2Xo-yOiao-68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.244.0/22
IPv6:
2a10:9d00::/29
Signature Algorithm: sha256WithRSAEncryption
78:83:67:92:97:29:a6:63:4c:f8:86:f1:18:b3:7f:f4:24:c2:
cb:bd:0b:85:8d:68:96:92:ed:ff:39:7d:f1:42:08:dd:11:6b:
5c:5c:9b:f9:ff:b5:9a:5e:10:a5:b3:a8:8d:5f:8d:2e:3d:2e:
de:1a:97:5b:75:4c:d2:53:68:7a:e0:bb:a7:62:fe:c5:f4:2a:
0f:ff:88:04:df:75:43:06:39:d6:22:c4:14:d9:ad:ec:85:bb:
6e:be:d3:6c:f6:5c:42:09:d5:91:2b:4d:07:26:60:70:2d:f8:
41:dd:74:fb:56:a5:65:ca:39:23:50:54:a2:e0:f1:63:bf:c1:
ae:35:0f:d8:14:56:83:4b:41:78:a7:02:ba:b9:9a:40:40:ff:
75:ff:4c:5b:73:fa:45:61:1d:52:c4:8f:01:90:e9:80:d2:9e:
16:ec:57:3a:95:53:cb:62:88:33:ed:ca:2b:b8:0a:c9:40:ad:
ec:2a:a7:89:2e:bc:ea:ae:f7:5b:df:02:67:7e:78:16:a6:80:
98:c4:25:96:f2:78:61:51:a1:63:c3:95:e3:ca:6a:91:9d:a9:
dc:62:ad:57:17:bb:00:c7:35:f7:2e:08:04:63:18:b2:ef:24:
aa:42:99:d8:fa:cd:99:10:99:95:2b:04:6d:43:45:89:ae:e1:
56:27:43:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:07 2024 by rpki-client on console-fra.rpki-client.org