Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/amnh0Gvu8Xrq3dSDPrJ6IvNPmhk.roa
File: amnh0Gvu8Xrq3dSDPrJ6IvNPmhk.roa (raw, json)
Hash identifier: y0VXR7g163jzS8peru+tFMQq41RQ69Cl2YFsdQ3nQHM=
Subject key identifier: 6A:69:E1:D0:6B:EE:F1:7A:EA:DD:D4:83:3E:B2:7A:22:F3:4F:9A:19
Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial: 018CC7936D38E8B81CAD910C267FD235211E
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/amnh0Gvu8Xrq3dSDPrJ6IvNPmhk.roa
Signing time: Tue 02 Jan 2024 00:29:36 +0000
ROA not before: Tue 02 Jan 2024 00:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212605
IP address blocks: 185.184.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:6d:38:e8:b8:1c:ad:91:0c:26:7f:d2:35:21:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Validity
Not Before: Jan 2 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a69e1d06beef17aeaddd4833eb27a22f34f9a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4d:15:e8:ec:3a:f3:62:dc:6e:4d:0d:e4:4a:
8b:98:b5:7e:cb:6a:d4:b7:bf:a6:ac:3b:a5:06:c4:
a6:17:52:c8:42:53:01:fc:fc:6a:02:75:59:6e:3b:
96:bc:c2:6d:1b:e3:4c:b8:38:be:3e:dc:eb:0d:40:
53:69:90:a1:da:16:49:d7:fc:5e:de:1f:7e:7a:1b:
bd:e7:1a:2d:bb:dd:12:02:7c:d9:9a:ed:c8:e6:d1:
06:d5:d0:e1:2a:68:88:5b:dd:dd:47:21:f1:59:5d:
1f:e5:6b:66:fd:28:a7:5a:ec:93:c6:35:5a:1b:ab:
23:12:10:a7:b2:40:c0:b0:27:51:08:58:43:8d:ce:
88:0e:d1:f6:39:ff:0a:eb:9c:9b:95:5e:2b:0d:8b:
3a:69:24:27:37:ed:35:d1:aa:f5:b4:6a:a8:ad:05:
a4:1c:d0:ea:f9:77:f6:54:be:2b:9a:e8:b7:7f:71:
62:d5:73:62:32:50:29:92:27:ee:f7:6e:fa:37:ab:
49:ac:83:3e:5f:0c:4b:e0:e1:b3:12:27:d1:41:3b:
5d:d6:7e:f5:71:db:bd:55:31:4b:27:da:4e:4e:f6:
c4:84:95:73:9e:a9:36:ad:1f:b6:e8:13:c0:f1:d9:
9c:69:79:f2:b0:bc:22:d7:01:d6:27:f1:8b:85:e2:
f6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:69:E1:D0:6B:EE:F1:7A:EA:DD:D4:83:3E:B2:7A:22:F3:4F:9A:19
X509v3 Authority Key Identifier:
keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/amnh0Gvu8Xrq3dSDPrJ6IvNPmhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.230.0/24
Signature Algorithm: sha256WithRSAEncryption
83:5c:f4:18:1e:3d:e0:a1:38:fa:03:d8:e7:38:e6:8e:8c:85:
b3:16:2a:02:a2:92:85:de:bf:13:83:0c:6f:80:91:13:12:3f:
1c:21:53:46:1b:91:18:59:4c:ce:0f:c8:d1:76:a1:3c:55:c1:
85:68:79:a0:c2:63:e1:3a:bc:88:82:e4:25:55:1e:96:e2:f5:
88:90:25:b6:f2:d1:f2:50:39:8e:41:95:62:6f:23:e0:3e:53:
fa:49:41:12:87:46:f4:af:81:24:4e:b7:2e:4f:8e:8d:3e:b2:
7a:e3:a9:4a:e7:6c:d5:27:99:3a:4d:ea:d4:50:e2:9e:71:78:
09:b6:53:e9:a5:a7:d5:25:cf:c4:e5:2f:2b:9e:0b:af:fe:90:
d5:d8:bc:c9:27:a7:17:20:70:73:97:f9:f0:69:59:e5:e2:8e:
e0:ed:e8:b6:ca:c5:ed:cd:72:c1:1c:ef:98:fe:a0:5f:63:b2:
ec:e1:9b:27:d7:2f:12:eb:3b:71:4d:c5:e8:8f:7c:fc:4f:7e:
06:d1:da:18:f1:f1:01:b8:14:d4:39:c0:d8:9c:95:c4:70:1c:
79:40:98:70:3c:90:9b:d2:17:b4:4c:54:f8:2c:2d:84:86:29:
6d:95:75:f5:21:66:99:e3:ea:43:76:2c:94:68:5d:62:1a:01:
16:58:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:58 2025 by rpki-client