Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/X-k0-SurlwA8qV6MN2TnO_U4Gxc.roa
File: X-k0-SurlwA8qV6MN2TnO_U4Gxc.roa (raw, json)
Hash identifier: zqBg/fUp20z8/QhFRIom6lH9aTM9K0tl9VeJgQB4cN0=
Subject key identifier: 5F:E9:34:F9:2B:AB:97:00:3C:A9:5E:8C:37:64:E7:3B:F5:38:1B:17
Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial: 01857227E637A4EA35B65B40F99AD9BC39F2
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/X-k0-SurlwA8qV6MN2TnO_U4Gxc.roa
Signing time: Mon 02 Jan 2023 11:04:55 +0000
ROA not before: Mon 02 Jan 2023 11:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204834
IP address blocks: 185.237.84.0/24 maxlen: 24
185.237.86.0/24 maxlen: 24
185.237.86.0/23 maxlen: 23
185.237.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:e6:37:a4:ea:35:b6:5b:40:f9:9a:d9:bc:39:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Validity
Not Before: Jan 2 11:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fe934f92bab97003ca95e8c3764e73bf5381b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:e8:85:c3:7e:1f:e3:fc:a5:9f:48:92:b8:
e6:8f:0a:ac:05:89:f5:6b:df:ec:0e:bc:30:01:f2:
b0:1f:22:7d:51:59:e4:ec:9c:5e:c6:0a:2e:0b:7d:
14:d4:1d:88:21:d2:89:85:d1:e2:e5:c6:de:8a:6e:
d9:91:02:5c:5f:eb:47:44:40:66:45:31:21:2e:cb:
df:1e:76:67:5a:f9:c0:68:4d:8b:c0:68:02:1b:d3:
95:3c:85:a0:93:6b:fe:e1:ee:21:48:2a:94:af:58:
88:53:87:e5:3c:9a:11:63:ac:fe:f9:6e:bc:53:dd:
0f:8f:a7:0a:48:e7:26:02:33:59:85:17:39:36:9b:
b7:0b:a2:b9:08:79:e3:2e:a4:22:b6:1b:be:a2:40:
10:d5:19:4d:08:3f:5e:b4:db:3c:f8:f6:0d:99:80:
66:dc:34:cb:fd:92:db:0d:7a:a6:a0:03:66:7d:2a:
1d:7f:e7:69:b4:91:46:75:6c:53:60:0c:28:a1:b7:
0f:d6:85:a9:d6:17:c1:ec:08:03:f0:35:74:b1:4e:
a7:7e:7f:67:85:b8:38:37:8f:1f:72:b2:84:36:0a:
96:59:80:5b:e3:1c:91:1b:f5:38:d2:78:70:58:3d:
87:70:73:02:0b:8a:33:da:ee:f1:9e:6d:74:59:a8:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E9:34:F9:2B:AB:97:00:3C:A9:5E:8C:37:64:E7:3B:F5:38:1B:17
X509v3 Authority Key Identifier:
keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/X-k0-SurlwA8qV6MN2TnO_U4Gxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.84.0/24
185.237.86.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:75:13:bd:5f:98:11:80:15:3c:bd:a4:d6:b8:82:a3:2d:29:
2a:74:ea:bf:cb:f9:cf:c5:74:3e:cd:85:e4:39:27:53:e6:ad:
19:cb:a1:56:91:cc:07:12:1c:1e:e1:0c:d2:ff:26:48:69:6f:
c3:98:dd:9f:20:af:78:b4:11:69:5c:56:f3:0a:67:84:65:52:
93:a9:a3:11:e1:22:7f:27:0e:e0:66:95:5d:59:cb:a1:c1:a8:
72:49:52:ab:18:e3:24:e1:19:84:84:a1:82:71:c0:ab:ca:71:
6c:40:4c:b2:56:62:7a:36:10:57:58:7d:9a:36:16:7e:65:24:
0c:49:3d:0b:20:c8:3f:03:7d:1e:8a:44:2c:7a:0e:86:85:af:
c9:30:7b:85:ff:fe:2d:b6:fe:1d:df:8d:06:d6:75:5f:c3:fc:
dd:79:61:d9:dc:b5:43:c0:86:8e:f2:e3:a2:75:12:d8:5e:cd:
57:77:3f:51:43:31:64:79:2a:b8:0f:9e:db:3d:66:7c:6f:f6:
28:3a:25:5f:21:30:c7:1e:90:58:cc:a6:c0:4a:ed:4f:68:7b:
93:7c:7a:1f:0a:c5:c9:d6:45:d8:66:6c:4f:85:7e:31:1a:ff:
2a:7c:90:98:bb:5c:ae:63:f1:fe:9f:94:8a:2e:a0:7a:7d:46:
a3:0f:7d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:06 2024 by rpki-client on console-ams.rpki-client.org