Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/iUuJFh9DT81Vf-Dwi5T4lXnjgvY.roa
File: iUuJFh9DT81Vf-Dwi5T4lXnjgvY.roa (raw, json)
Hash identifier: r/6oEH2IcsRubkkwhu0a5O9vIDFhpdPugQmut0Y78gM=
Subject key identifier: 89:4B:89:16:1F:43:4F:CD:55:7F:E0:F0:8B:94:F8:95:79:E3:82:F6
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 01856C4A4BD38C457E2619B8E85C429EA4F5
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/iUuJFh9DT81Vf-Dwi5T4lXnjgvY.roa
Signing time: Sun 01 Jan 2023 07:44:46 +0000
ROA not before: Sun 01 Jan 2023 07:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57771
IP address blocks: 185.54.92.0/22 maxlen: 24
2a00:8640::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:4b:d3:8c:45:7e:26:19:b8:e8:5c:42:9e:a4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Jan 1 07:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=894b89161f434fcd557fe0f08b94f89579e382f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:83:a7:57:b9:93:83:9a:80:24:2f:15:93:b2:
81:d9:24:4d:fa:f7:bb:9a:45:75:8a:42:24:87:83:
8d:23:38:b9:f0:74:83:0d:0d:f7:64:f7:59:88:87:
44:48:40:5e:ae:a4:ea:58:c6:02:67:5e:21:d1:a3:
a1:cd:66:15:8e:26:c5:51:63:35:d7:dc:d7:ea:6c:
38:44:ea:b2:59:e1:32:c9:1b:c0:a5:45:df:df:0a:
3e:a6:ce:94:1f:85:ad:e5:ea:eb:ba:7f:9f:5d:1b:
b5:d9:32:a1:71:20:0a:dd:fa:8d:78:b6:0a:ac:8d:
64:e8:70:56:ac:16:a4:49:f8:35:d7:98:ed:88:d6:
bf:59:2c:6f:66:e2:32:5d:0f:93:03:77:92:d6:d0:
c9:db:48:68:d3:a3:9f:96:7f:3d:2b:fe:df:5a:dc:
b2:34:89:bf:8b:aa:b4:1b:4d:61:6e:af:26:aa:26:
bb:d3:ce:04:a7:61:de:59:0b:e4:8b:9e:74:3d:99:
5d:dc:7e:32:95:f6:2b:b5:63:81:86:a5:8b:62:40:
e3:3d:57:4e:48:bf:ef:4c:5c:81:2a:4a:7d:23:a0:
32:6f:dd:4d:12:c2:23:9c:64:48:59:06:25:2b:38:
42:f8:ed:ff:3b:5a:e2:04:c5:a4:c9:50:38:9f:81:
05:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4B:89:16:1F:43:4F:CD:55:7F:E0:F0:8B:94:F8:95:79:E3:82:F6
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/iUuJFh9DT81Vf-Dwi5T4lXnjgvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.92.0/22
IPv6:
2a00:8640::/29
Signature Algorithm: sha256WithRSAEncryption
38:f3:22:85:1a:08:f0:d2:57:03:4e:db:e2:21:69:16:aa:30:
4b:12:34:9b:ef:19:aa:dd:66:10:3c:f9:df:fa:e9:e2:2b:c9:
5c:cb:22:3d:df:86:86:9b:9c:0b:54:db:ff:aa:e7:13:38:3d:
08:6c:e4:eb:6b:83:93:6d:a6:36:c6:ae:08:df:f1:d9:ab:45:
3c:e5:ae:00:47:84:9e:a0:18:62:a6:2b:5f:37:50:c8:5c:59:
33:8c:c6:19:fd:95:c4:ed:90:74:2f:2c:eb:17:8c:b3:7f:32:
fd:21:d9:3f:bb:5b:da:f5:8f:36:ac:73:7e:6d:ea:48:96:8f:
d4:63:11:72:60:9f:37:da:8e:fe:44:20:be:8f:63:ab:ed:a6:
8d:1e:86:bf:e8:ff:d1:52:35:84:ff:63:4a:b4:fc:7c:0c:43:
64:ab:e8:3f:c5:6f:77:45:0e:37:cb:2a:e5:b8:97:8c:a6:d9:
32:5a:32:23:dc:37:7d:0b:00:99:e9:92:f8:02:6b:4b:80:c0:
1d:21:a8:c9:09:58:ac:60:c1:87:47:f0:7e:3e:23:a9:09:20:
7d:62:b7:69:c1:bc:ef:10:44:10:92:7c:a3:3d:ff:d0:27:fb:
8b:58:1b:a6:2c:65:34:2d:17:75:66:ad:76:91:f8:80:c7:d0:
1d:2c:94:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:49 2024 by rpki-client on console-fra.rpki-client.org