Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/1-g8zCZj_HXzoH4ld8k4WvVfhBDw.roa
File: 1-g8zCZj_HXzoH4ld8k4WvVfhBDw.roa (raw, json)
Hash identifier: 6S6YfhwvNbqMrcYJfZ1Uh+90kg/eh7lPnZ8mu/29lmY=
Subject key identifier: FA:0F:33:09:98:FF:1D:7C:E8:1F:89:5D:F2:4E:16:BD:57:E1:04:3C
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 018964A9696F5657583147451BF6480AA9E6
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/1-g8zCZj_HXzoH4ld8k4WvVfhBDw.roa
Signing time: Mon 17 Jul 2023 16:22:51 +0000
ROA not before: Mon 17 Jul 2023 16:22:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31727
IP address blocks: 185.113.188.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:a9:69:6f:56:57:58:31:47:45:1b:f6:48:0a:a9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Jul 17 16:22:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa0f330998ff1d7ce81f895df24e16bd57e1043c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:b0:1f:2f:a8:61:58:99:c2:ce:05:a7:2a:
d6:9a:ca:a3:84:35:5a:df:92:1d:22:0a:ec:e7:2e:
0e:fe:e0:59:9b:31:ba:f1:ca:ce:d1:93:56:55:4f:
03:37:2b:fb:b6:6d:54:13:0e:f9:c3:f0:18:92:41:
e3:dd:66:0b:8b:70:af:6c:70:fe:d9:07:57:d3:ee:
cd:4e:f9:67:f4:68:1c:46:e4:35:33:40:2b:b1:67:
d6:48:61:16:a2:58:39:a8:00:60:86:34:60:14:fe:
2e:5d:81:64:94:8d:2a:05:01:19:a4:00:1e:69:de:
f7:de:58:f9:22:4b:a2:7b:35:7b:eb:b7:9c:43:b2:
17:34:2e:e9:62:69:8f:19:d0:5b:a1:4f:0c:08:d7:
e9:60:d8:0e:a0:fd:47:55:13:59:ec:d6:57:4e:37:
77:53:bd:82:96:52:87:a8:ce:ab:11:b1:ca:0b:e0:
0e:04:83:bc:6f:cd:6f:85:f9:18:eb:d5:0c:79:1e:
0e:d9:aa:c2:20:12:b5:23:a3:49:a5:26:d2:c6:45:
b8:e7:9a:3d:8b:43:a6:6c:48:88:54:f2:2b:83:a4:
88:c7:80:04:c3:dc:d3:2a:26:06:9b:1b:b2:fe:0d:
1b:5e:6b:a2:61:c7:91:0a:ab:a5:0d:c4:94:49:42:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0F:33:09:98:FF:1D:7C:E8:1F:89:5D:F2:4E:16:BD:57:E1:04:3C
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/1-g8zCZj_HXzoH4ld8k4WvVfhBDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.188.0/22
Signature Algorithm: sha256WithRSAEncryption
51:71:eb:f8:b4:dc:89:af:c5:2a:52:78:da:b8:87:c2:d5:16:
2f:8a:82:99:61:52:fe:c4:a5:be:03:30:75:c8:5b:a1:ce:03:
5d:ce:c1:db:5c:5b:1b:84:5b:87:84:d1:f6:5d:cc:14:9f:84:
ff:f9:47:c6:fb:6d:38:36:f4:47:2f:b8:44:b1:f6:c0:6b:ec:
62:3e:32:5a:e3:11:d5:fb:84:6a:cf:9d:9a:bf:cc:07:be:3c:
99:d9:05:24:99:0d:0f:d2:ab:b4:07:f9:9c:85:bf:3f:d9:a3:
75:b7:d6:d1:f5:8d:7e:10:46:f6:fd:4a:c4:e0:82:5c:c1:e5:
ea:cf:c9:e1:4d:45:ec:02:fe:b8:42:c4:c4:bf:03:6c:df:e7:
28:5d:6b:a9:2f:69:04:71:c1:2b:92:15:7a:cb:d1:10:68:6c:
34:f9:45:0a:a3:22:0a:46:34:76:4b:96:a8:a6:82:fc:4c:78:
7f:99:a2:0f:f0:65:18:37:ac:10:1a:c9:42:70:ad:f4:9a:79:
b9:30:a4:01:d5:c6:d7:91:ef:bf:63:d6:35:54:08:64:ba:84:
82:83:09:15:8f:8e:21:b4:30:dd:20:c1:4f:08:80:7f:fb:50:
c9:d1:6c:ce:cb:7a:f3:fd:7f:18:2e:11:1e:f6:24:3a:f9:e5:
0e:b3:36:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:43 2024 by rpki-client on console-ams.rpki-client.org