Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/DQQjIm5XTWspwpCT7f1Zr2NtPU4.roa
File: DQQjIm5XTWspwpCT7f1Zr2NtPU4.roa (raw, json)
Hash identifier: oGakSAS94D+N1L0qV6xAhYRw0YL7xc2pi3V13kqvZ6A=
Subject key identifier: 0D:04:23:22:6E:57:4D:6B:29:C2:90:93:ED:FD:59:AF:63:6D:3D:4E
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 018F109236BA9DFC6862D26773399E01CFC6
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/DQQjIm5XTWspwpCT7f1Zr2NtPU4.roa
Signing time: Wed 24 Apr 2024 14:46:08 +0000
ROA not before: Wed 24 Apr 2024 14:46:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204986
IP address blocks: 185.233.180.0/23 maxlen: 23
185.233.182.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 24 Apr 2024 23:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:10:92:36:ba:9d:fc:68:62:d2:67:73:39:9e:01:cf:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Apr 24 14:46:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d0423226e574d6b29c29093edfd59af636d3d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:54:03:91:10:2c:df:cb:50:d9:0b:7f:09:fc:
47:a6:1d:29:d9:a2:e0:6e:52:11:d8:d6:75:e0:b6:
a7:72:b7:92:a6:41:ef:24:23:44:b3:bf:84:ea:00:
9c:0b:8f:a4:7a:36:d1:64:c6:10:a6:29:51:33:63:
9c:13:1a:73:5e:84:73:0d:5d:f7:c6:6d:99:09:ad:
e4:b2:ea:60:91:81:bd:77:af:34:38:01:55:87:f4:
b9:b2:65:3e:14:b7:12:78:35:e2:39:47:1f:41:92:
b5:4b:89:b7:77:b7:03:0f:37:2c:a3:49:b2:4c:1e:
b3:27:4c:86:15:93:be:43:f4:55:48:92:85:65:99:
9a:3e:4f:9d:9e:33:c7:cf:12:30:d6:8c:cc:af:f9:
70:cc:81:68:cc:84:ba:53:8d:3d:67:f6:6c:b5:c8:
9a:4f:68:73:b2:ee:8d:b0:46:9e:37:66:d4:4b:38:
84:1a:0f:2e:7a:07:47:35:68:27:12:06:e2:22:14:
4f:26:56:f3:99:16:d7:bc:74:80:2e:ce:12:96:d7:
a2:a0:f3:62:12:c9:4e:0b:18:3f:bc:d0:0d:d5:97:
7d:55:cc:98:5e:01:05:e6:5b:37:9c:47:af:05:f3:
b1:2d:cc:72:6c:f3:cb:ed:b6:60:d9:74:92:8b:95:
be:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:04:23:22:6E:57:4D:6B:29:C2:90:93:ED:FD:59:AF:63:6D:3D:4E
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/DQQjIm5XTWspwpCT7f1Zr2NtPU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.180.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:f7:52:7c:c6:54:a6:04:85:34:09:6f:6c:28:ce:73:83:32:
1e:8e:74:55:a6:40:0c:09:88:71:68:48:d8:77:a7:03:cc:e7:
37:06:21:6c:01:1e:b6:cb:20:a4:46:70:32:30:4d:53:26:57:
60:1c:63:16:5f:7e:ef:c9:cf:2e:b3:89:19:0e:92:9e:9c:6f:
ef:84:9d:4d:d7:77:35:67:1f:ba:16:7a:a5:21:31:53:b3:ff:
3f:7b:47:b5:99:b7:5f:22:68:cb:44:03:37:b5:90:c6:dc:90:
c0:f6:a6:c0:66:a2:74:6a:9a:59:85:42:8f:3c:79:11:29:b8:
3c:65:23:21:37:6d:1b:5d:1c:e1:0a:a7:53:26:70:8d:7f:37:
78:69:c0:a0:eb:d8:54:82:1c:0d:ab:1d:95:44:fa:52:c2:be:
dd:fc:61:30:b0:0d:15:ef:73:ce:7b:b6:dc:ec:6f:a0:d7:99:
54:65:d2:c4:76:ea:1b:d4:88:87:38:a1:37:5e:fd:cf:0a:c2:
ea:10:df:7c:00:0f:22:18:79:91:86:dd:d9:84:c8:90:5a:fe:
e1:3a:08:0b:05:f7:f5:42:3f:1d:49:4f:62:25:7c:ee:5f:4b:
57:48:f3:19:7a:da:a5:c0:36:f7:4b:fd:37:a3:d1:10:2e:15:
cd:fc:4c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:03 2024 by rpki-client on console-ams.rpki-client.org