Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/OiyzifZ4AjA8yoPqe8rKzdYL4TU.roa
File: OiyzifZ4AjA8yoPqe8rKzdYL4TU.roa (raw, json)
Hash identifier: HdfBBSEOVIsqh4hclhW8iJAHwOuhSZk1fkBQhToV2Us=
Subject key identifier: 3A:2C:B3:89:F6:78:02:30:3C:CA:83:EA:7B:CA:CA:CD:D6:0B:E1:35
Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial: 01856DAF575E4BA20897D7EADAA5EC216F17
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/OiyzifZ4AjA8yoPqe8rKzdYL4TU.roa
Signing time: Sun 01 Jan 2023 14:14:45 +0000
ROA not before: Sun 01 Jan 2023 14:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41061
IP address blocks: 185.222.182.0/24 maxlen: 24
185.222.182.0/23 maxlen: 23
185.222.181.0/24 maxlen: 24
185.222.180.0/24 maxlen: 24
185.222.180.0/22 maxlen: 22
185.222.180.0/23 maxlen: 23
185.222.183.0/24 maxlen: 24
2a0c:9800::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:57:5e:4b:a2:08:97:d7:ea:da:a5:ec:21:6f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Validity
Not Before: Jan 1 14:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a2cb389f67802303cca83ea7bcacacdd60be135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9a:3d:eb:c6:08:30:9f:ac:f5:3a:2c:36:8a:
bf:da:d7:60:06:c6:de:46:7a:46:3a:d8:c6:90:58:
f7:91:3a:32:94:f2:5e:06:02:03:67:62:bd:63:a0:
83:4a:83:c8:b9:f4:4f:d7:c6:f7:c6:8b:f9:61:79:
75:4a:f2:b6:90:f7:d6:43:e5:73:51:05:f5:89:9e:
8d:e2:a7:a1:31:1b:03:83:4d:35:44:17:c8:5d:d5:
17:01:8b:05:23:51:04:40:5e:8f:9e:eb:5e:e4:66:
25:83:24:c7:42:20:27:7a:31:fc:aa:f9:27:52:31:
86:64:67:8f:a5:a3:e3:8d:e6:af:d0:66:aa:f9:78:
0d:55:13:4d:0a:ba:58:75:e5:b5:e6:3f:a0:25:f2:
fb:c4:ec:34:03:e0:ec:95:cc:cc:2b:b5:6a:3b:2d:
e4:c9:9a:6a:ad:4b:7e:87:f3:ee:6d:c2:42:83:aa:
fb:26:0b:36:9c:12:4a:00:c0:c1:ed:af:0f:ea:30:
4f:70:44:48:5b:9b:64:e7:1e:3f:6f:af:7b:c2:bb:
db:f8:1b:97:76:3a:3b:8e:04:92:a6:d6:77:8a:bd:
41:e2:db:6d:07:2b:62:c9:3b:12:4b:ef:52:ca:6b:
35:71:b0:6c:cb:2d:48:aa:dc:df:b4:b6:d6:6c:b6:
4e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2C:B3:89:F6:78:02:30:3C:CA:83:EA:7B:CA:CA:CD:D6:0B:E1:35
X509v3 Authority Key Identifier:
keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/OiyzifZ4AjA8yoPqe8rKzdYL4TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.180.0/22
IPv6:
2a0c:9800::/29
Signature Algorithm: sha256WithRSAEncryption
55:d0:a9:6c:93:c9:25:25:18:95:78:a4:71:c2:3b:fe:10:0c:
40:9f:ee:f1:ec:05:17:09:d4:52:b6:1b:f5:e6:3a:de:85:34:
fc:d7:3e:ca:bb:df:c2:9a:2f:a9:c4:cf:3c:85:50:25:86:2c:
8d:0c:ad:fa:5b:a4:63:82:6c:23:f4:88:81:c2:c5:f0:f0:43:
33:41:f5:f3:ec:a8:f6:cb:01:0d:2d:3e:50:c2:8c:dc:61:ec:
8b:d7:6b:3a:ac:41:b6:55:af:30:9e:35:ec:f5:f8:b3:ba:4d:
a3:b7:30:d1:3d:81:ec:90:79:e7:c5:b6:69:fa:32:d6:ab:d7:
ab:fd:ef:39:fe:45:34:2d:d8:a4:cd:4c:d6:0f:c8:9f:9a:a3:
f3:89:7e:1c:48:d7:f5:b7:26:94:82:61:30:33:69:3c:70:16:
07:9c:8e:c8:31:37:de:00:de:56:81:cb:d9:9e:e4:5f:b7:17:
ff:c8:06:0f:cd:01:bb:62:6d:94:12:8d:87:50:25:56:f2:cf:
eb:ad:1b:bc:e9:81:85:cc:53:ed:92:5a:05:e3:f4:fb:48:01:
69:34:04:20:eb:85:60:b5:90:ae:44:aa:75:89:90:5b:d3:e5:
12:17:b2:8f:56:fb:16:db:e8:f2:06:d0:b2:fa:a4:3b:83:b5:
67:39:c4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 13:19:51 2023 by rpki-client on console-fra.rpki-client.org