Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/ol9vKVqa5AbmUXahexVLPIgbzFo.roa
File: ol9vKVqa5AbmUXahexVLPIgbzFo.roa (raw, json)
Hash identifier: /4GK3/FPJMxyc3gTSHWk2fa83f0bzjSg/Is9+RZdH0w=
Subject key identifier: A2:5F:6F:29:5A:9A:E4:06:E6:51:76:A1:7B:15:4B:3C:88:1B:CC:5A
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 018F12593AAA5AC879F87DE0F13E12189E5E
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/ol9vKVqa5AbmUXahexVLPIgbzFo.roa
Signing time: Wed 24 Apr 2024 23:03:08 +0000
ROA not before: Wed 24 Apr 2024 23:03:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204986
IP address blocks: 185.233.180.0/23 maxlen: 23
185.233.180.0/24 maxlen: 24
185.233.182.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 24 Apr 2024 23:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:12:59:3a:aa:5a:c8:79:f8:7d:e0:f1:3e:12:18:9e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Apr 24 23:03:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a25f6f295a9ae406e65176a17b154b3c881bcc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:3d:d4:5c:88:a8:7d:c9:a9:c2:78:89:6e:
59:be:d2:73:4e:3b:88:06:44:ee:0d:b2:a0:3e:23:
00:aa:e9:4b:53:ff:a2:54:7f:2f:12:c2:85:41:af:
b7:e1:84:c8:64:08:df:ed:68:2e:8d:ab:b4:6e:2d:
a6:98:7c:ea:5e:d1:ec:87:b8:a5:37:13:cd:81:50:
56:57:a1:34:bf:c3:19:f2:94:9c:c5:46:ab:2e:ed:
45:41:96:85:4f:90:c6:7d:39:ba:7c:44:eb:16:d0:
93:8e:70:5a:ee:fd:d0:70:67:b4:2d:73:4a:a3:82:
61:41:4a:9b:75:0a:85:3b:6d:ff:a8:ce:69:73:2b:
70:ad:1a:fd:ff:c4:30:b0:4a:18:32:04:f7:a6:f1:
bc:a8:3e:05:fb:5c:39:5d:e2:8f:df:34:f3:ed:18:
7b:c0:82:79:fe:30:1c:2b:f0:67:e7:1d:8e:08:c1:
67:03:3a:7d:a6:b3:a1:bb:55:60:34:18:fd:a8:c7:
ad:bb:7a:b7:fe:aa:da:19:84:48:65:33:41:9a:7e:
a8:80:46:12:6d:11:17:99:4a:d6:85:15:16:09:e1:
f8:21:35:44:00:6a:c6:6b:b7:08:a9:c1:55:34:ef:
70:f4:1f:2b:40:e0:07:a8:79:b8:99:96:5b:54:f8:
a7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5F:6F:29:5A:9A:E4:06:E6:51:76:A1:7B:15:4B:3C:88:1B:CC:5A
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/ol9vKVqa5AbmUXahexVLPIgbzFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.180.0/22
Signature Algorithm: sha256WithRSAEncryption
65:73:11:1f:bf:43:90:e2:b1:8d:7d:4e:96:35:29:e0:c4:4a:
a3:11:85:9a:3a:d6:9d:57:85:88:0d:5f:b9:42:ae:c9:aa:f0:
56:2f:9e:8e:98:05:c8:0d:f0:44:b7:51:e5:97:3a:ba:68:e0:
c7:38:0e:d1:66:dd:8d:22:24:b1:27:02:53:0d:c2:99:ac:ad:
a4:8f:e7:6f:d9:57:e1:c2:90:00:69:b4:80:ef:a0:44:cf:1b:
37:9a:4b:81:21:27:31:33:40:4b:e6:b6:6e:65:7f:15:66:75:
1e:aa:9c:2d:2b:a1:b1:50:d5:41:17:56:3d:60:ec:90:22:d6:
9e:71:57:dd:7b:43:dc:fc:d1:4b:d5:63:a3:88:b7:6d:04:fa:
18:bc:a1:64:80:38:a6:17:3f:e2:bb:09:b3:e9:c1:b9:84:28:
ef:df:4d:d2:dd:cc:b0:ac:52:fb:94:ef:60:7c:6f:2d:03:b7:
24:94:84:74:9b:d8:0a:7d:87:2f:bb:ee:38:3f:a6:7d:e5:f3:
67:17:71:2c:50:57:c8:f0:91:2d:60:e2:2b:07:1a:cc:f5:aa:
d7:fe:ae:ce:03:2e:25:42:c3:e0:90:d4:af:96:f0:01:a4:fc:
21:25:b8:f3:13:f5:44:1c:18:b8:45:ab:64:d2:10:e0:db:87:
03:98:35:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:03 2024 by rpki-client on console-ams.rpki-client.org