Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/13alx6mV6IDQJSDYSp5np9mgtVc.roa
File: 13alx6mV6IDQJSDYSp5np9mgtVc.roa (raw, json)
Hash identifier: d/eT7scccjc4OsHi50tHDjIgy03VqXP4nS4VIedj3dg=
Subject key identifier: D7:76:A5:C7:A9:95:E8:80:D0:25:20:D8:4A:9E:67:A7:D9:A0:B5:57
Certificate issuer: /CN=7aa606117bb5f7e4160ef268f9f4aa0457380441
Certificate serial: 01856EB8EAA3321E41BB79680A4AEAEAA4BC
Authority key identifier: 7A:A6:06:11:7B:B5:F7:E4:16:0E:F2:68:F9:F4:AA:04:57:38:04:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/13alx6mV6IDQJSDYSp5np9mgtVc.roa
Signing time: Sun 01 Jan 2023 19:04:50 +0000
ROA not before: Sun 01 Jan 2023 19:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43228
IP address blocks: 185.190.104.0/22 maxlen: 22
185.190.104.0/23 maxlen: 23
185.190.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:ea:a3:32:1e:41:bb:79:68:0a:4a:ea:ea:a4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa606117bb5f7e4160ef268f9f4aa0457380441
Validity
Not Before: Jan 1 19:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d776a5c7a995e880d02520d84a9e67a7d9a0b557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:92:5e:06:1e:61:85:41:15:f2:fc:c3:0f:
e8:e3:95:4f:eb:38:7d:45:e5:9e:53:05:79:91:e6:
72:83:e5:44:db:15:ee:37:10:5d:83:5c:19:80:a6:
48:0b:da:2e:5b:c2:f1:55:86:dd:ef:f9:e5:1c:94:
e7:e0:d8:2f:66:cd:ea:1d:40:be:bf:f8:d2:fb:b6:
8a:12:b9:74:1a:28:61:0e:de:fd:c2:71:00:b8:ae:
80:73:40:3b:8c:75:8d:3a:b7:85:69:0e:09:f8:66:
49:10:5d:52:57:02:28:7b:71:cb:4b:66:fc:09:9a:
78:51:24:83:e2:08:3a:c7:ef:0d:6f:cd:d1:9f:fb:
c2:93:77:51:6e:18:a0:4c:11:b7:b3:56:ab:57:2a:
a2:75:5c:5c:4b:c9:0d:81:72:41:99:8e:3f:a5:c1:
f1:83:5f:0c:31:d8:b2:ab:64:78:3b:34:df:ed:6e:
b8:0a:c7:d7:a1:c7:00:50:9a:1a:0e:cb:b4:3f:bb:
d2:21:c5:3a:e7:7b:c9:ff:d8:93:01:eb:18:06:d3:
1b:8c:f7:a6:40:3a:61:45:f4:c9:c3:8d:f3:ec:14:
ea:8c:d3:85:55:80:56:32:54:1d:24:5a:88:b6:bb:
fa:b2:81:71:6e:c5:dd:92:ff:fd:a4:34:62:9d:17:
9a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:76:A5:C7:A9:95:E8:80:D0:25:20:D8:4A:9E:67:A7:D9:A0:B5:57
X509v3 Authority Key Identifier:
keyid:7A:A6:06:11:7B:B5:F7:E4:16:0E:F2:68:F9:F4:AA:04:57:38:04:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/13alx6mV6IDQJSDYSp5np9mgtVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.104.0/22
Signature Algorithm: sha256WithRSAEncryption
80:65:34:ef:9e:1e:fa:67:43:43:9d:5d:70:c5:82:f0:73:a2:
f4:e5:65:ac:87:7a:6c:2b:af:f4:03:15:2f:4f:10:fe:4e:81:
95:66:2b:de:ff:6f:19:e6:71:ee:de:63:f7:d0:1b:f5:65:c3:
08:fe:0c:1c:96:30:2e:9f:71:ac:4f:84:1b:6f:9b:9c:47:a9:
59:ef:54:44:ae:9b:ab:b6:73:19:d2:86:f3:76:03:e4:63:77:
3c:33:40:83:c7:d3:04:2f:74:34:e6:e2:c1:81:bc:dd:bf:9e:
e4:c1:52:b4:d8:1b:f0:d7:e3:f6:56:4f:ac:6d:55:79:b3:ae:
4d:d6:eb:73:af:f0:36:90:8c:92:80:f2:55:df:a0:37:cd:b9:
f9:aa:2c:05:37:df:6b:e4:96:ec:7d:cc:f9:fe:b2:14:38:08:
31:e4:e0:72:df:6b:03:22:96:d3:ec:5a:a3:02:e1:f2:88:db:
e7:b1:44:40:f3:6e:7f:87:cf:86:36:12:3f:69:1f:32:09:20:
4e:81:0d:70:99:8d:8d:27:b6:40:59:ca:bf:c4:7d:66:e2:08:
3f:da:11:ce:8f:63:ec:5c:0a:6b:82:69:9a:95:ea:77:44:d5:
28:0c:43:e5:50:f0:83:25:64:29:11:25:fa:f3:aa:28:68:58:
8f:d3:83:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:50 2024 by rpki-client on console-ams.rpki-client.org