Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/dr4O8C9DunWJb9UVOaIhE1OoZNc.roa
File: dr4O8C9DunWJb9UVOaIhE1OoZNc.roa (raw, json)
Hash identifier: 6iL98DDkHjVi/vjekqLVup51CuGCJX3od9KqJPzH4Eo=
Subject key identifier: 76:BE:0E:F0:2F:43:BA:75:89:6F:D5:15:39:A2:21:13:53:A8:64:D7
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 01856C4A4E801E412987CB8308BC456E4E45
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/dr4O8C9DunWJb9UVOaIhE1OoZNc.roa
Signing time: Sun 01 Jan 2023 07:44:47 +0000
ROA not before: Sun 01 Jan 2023 07:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208492
IP address blocks: 185.54.94.0/24 maxlen: 25
2a00:8640:b000::/36 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:4e:80:1e:41:29:87:cb:83:08:bc:45:6e:4e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Jan 1 07:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76be0ef02f43ba75896fd51539a2211353a864d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:37:5f:32:9b:f4:33:38:f8:89:a6:8d:e7:
3d:cd:4e:8b:7f:9b:18:84:e1:4f:be:fa:ae:bc:db:
fd:be:2a:a2:0f:e2:a4:22:44:5c:46:26:06:d4:f4:
4b:d9:71:63:7e:58:4d:b5:b6:9e:00:90:49:3b:1d:
ba:68:ed:62:91:4d:88:35:93:a9:4b:0f:f7:a5:22:
a2:fc:82:f5:bc:60:1b:39:60:d4:6a:9b:8e:cc:a2:
0c:ba:11:bf:17:96:df:22:ae:34:7d:8e:f1:ce:cb:
17:18:c7:91:55:b6:8a:7f:6d:b2:bd:47:b9:38:08:
ad:f9:d2:40:a4:23:49:f6:90:f2:b2:53:0e:ff:f8:
dd:5e:c0:e1:3d:14:1e:94:40:c6:82:c5:ee:2c:53:
6a:4e:77:60:4b:43:57:1c:e6:0a:9a:de:9b:07:bb:
91:73:84:a8:a0:a3:97:1c:03:31:2e:0e:ff:ae:7d:
06:a6:ca:32:b0:9e:8b:83:a0:10:14:52:3a:41:e4:
92:82:6a:5c:46:87:85:83:5b:78:e1:57:ee:e8:e8:
82:de:fd:e7:bc:58:c3:76:10:ae:3f:df:39:57:05:
d3:cb:b9:de:3c:8d:d0:87:b7:c0:1b:f4:de:18:57:
cc:e7:a8:44:4e:1c:6a:be:14:5d:86:f1:37:44:c4:
7a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BE:0E:F0:2F:43:BA:75:89:6F:D5:15:39:A2:21:13:53:A8:64:D7
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/dr4O8C9DunWJb9UVOaIhE1OoZNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.94.0/24
IPv6:
2a00:8640:b000::/36
Signature Algorithm: sha256WithRSAEncryption
c7:8e:37:99:9b:c2:fa:bc:65:13:ab:ed:66:17:68:38:39:70:
35:5d:f4:bf:70:69:9b:26:9e:d5:f5:b8:d9:e0:3d:19:db:2c:
0e:3d:8a:88:9f:e6:f0:f3:9c:42:26:fb:7a:5b:69:7b:4f:db:
e7:0c:30:4d:a3:2b:1f:94:43:d7:b1:4b:6f:9b:08:06:ba:5a:
40:4a:15:92:ea:c7:45:5b:4a:5c:c1:21:03:08:8d:22:36:43:
eb:13:28:ce:af:72:ce:51:f8:20:2f:69:b7:32:c7:ce:e7:e8:
86:07:ae:51:4a:92:40:5f:c7:5b:58:c2:0c:ac:06:6f:6e:5f:
26:c5:fb:41:1c:b6:a5:c1:72:7c:13:ea:eb:3e:33:f9:bd:bd:
01:31:4a:27:9e:a4:c2:ab:42:d5:3b:d9:b0:38:be:84:80:cb:
f5:35:a9:5a:84:ea:88:b9:46:7e:05:f3:97:28:d9:6d:7a:a2:
d1:6e:8e:8f:d2:b6:22:ef:ee:06:32:67:80:9b:75:d1:30:b6:
77:69:c6:7e:3b:4d:05:87:5f:20:b3:0a:63:f6:1f:9e:0e:84:
0a:49:42:95:bd:7f:e0:da:63:a8:60:00:ff:dc:6e:01:a1:af:
79:96:f9:74:82:f8:36:78:36:7f:3a:25:b2:50:16:5e:0b:c5:
ed:ad:e1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:24 2024 by rpki-client on console-ams.rpki-client.org