Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dbec1f-07c5-49f2-ba66-2b1fafccdd0b/1/0YS_XxRhj6-CJCOIo78ASO7V7_s.roa
File: 0YS_XxRhj6-CJCOIo78ASO7V7_s.roa (raw, json)
Hash identifier: 6MZ6rg/xlYr36BBKiTJFWG8azjcrFY/inzFL5JNT+Zw=
Subject key identifier: D1:84:BF:5F:14:61:8F:AF:82:24:23:88:A3:BF:00:48:EE:D5:EF:FB
Certificate issuer: /CN=dfa7e00738d3f7b8de48de38627567768e2f89b6
Certificate serial: 018CC5002E57FFD8EEB6AC8DFC03E95628E8
Authority key identifier: DF:A7:E0:07:38:D3:F7:B8:DE:48:DE:38:62:75:67:76:8E:2F:89:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36fgBzjT97jeSN44YnVndo4vibY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dbec1f-07c5-49f2-ba66-2b1fafccdd0b/1/0YS_XxRhj6-CJCOIo78ASO7V7_s.roa
Signing time: Mon 01 Jan 2024 12:29:32 +0000
ROA not before: Mon 01 Jan 2024 12:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199987
IP address blocks: 185.40.32.0/23 maxlen: 23
185.40.35.0/24 maxlen: 24
185.40.32.0/22 maxlen: 22
185.40.34.0/24 maxlen: 24
2a01:4ba0::/29 maxlen: 29
2a01:4ba0:2::/48 maxlen: 48
2a01:4ba0::/48 maxlen: 48
2a01:4ba0:3::/48 maxlen: 48
2a01:4ba0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jan 2024 20:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:2e:57:ff:d8:ee:b6:ac:8d:fc:03:e9:56:28:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa7e00738d3f7b8de48de38627567768e2f89b6
Validity
Not Before: Jan 1 12:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d184bf5f14618faf82242388a3bf0048eed5effb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:39:61:bd:b4:42:c7:bd:5e:65:92:95:2f:
0d:87:9c:93:5d:43:2e:df:d1:6f:f3:a7:50:d5:09:
50:a8:3c:f5:68:e6:4c:67:75:f7:2c:42:46:9e:18:
6b:86:d8:cb:ba:30:b7:c9:81:a3:4b:e4:59:5d:55:
b2:d5:a6:71:06:c0:33:6c:0d:7b:8d:33:70:72:62:
ef:b3:7e:b9:4d:dd:1c:2a:d8:18:76:f6:68:0d:b3:
ad:17:a9:90:0e:25:ca:07:1e:c6:30:80:c4:f3:f1:
5e:cb:3b:ac:5b:eb:84:57:0c:b4:8b:6c:2a:88:a5:
59:3b:3f:a0:8e:7c:62:88:3d:1d:d2:46:00:6a:c1:
bf:7a:16:60:1e:3c:cb:f8:98:30:84:60:a5:5e:94:
1e:3d:0b:cb:a2:8c:b9:45:5b:5c:7e:07:3d:d5:07:
02:d8:93:b7:ba:82:19:b6:02:61:fe:2f:df:27:ef:
a6:b9:01:93:84:d8:a4:3f:74:23:65:19:70:9d:26:
e2:02:e2:f2:32:d8:05:c0:ab:3f:dd:05:35:00:17:
7b:dd:b9:42:b7:45:7d:50:26:fc:93:4a:78:0b:50:
18:bb:a5:7a:34:07:b0:33:bf:58:d2:3a:e8:d1:e0:
30:ca:45:4e:65:fb:70:77:64:5b:50:54:63:ac:63:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:84:BF:5F:14:61:8F:AF:82:24:23:88:A3:BF:00:48:EE:D5:EF:FB
X509v3 Authority Key Identifier:
keyid:DF:A7:E0:07:38:D3:F7:B8:DE:48:DE:38:62:75:67:76:8E:2F:89:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36fgBzjT97jeSN44YnVndo4vibY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dbec1f-07c5-49f2-ba66-2b1fafccdd0b/1/0YS_XxRhj6-CJCOIo78ASO7V7_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dbec1f-07c5-49f2-ba66-2b1fafccdd0b/1/36fgBzjT97jeSN44YnVndo4vibY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.32.0/22
IPv6:
2a01:4ba0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:77:4a:80:fe:7d:5e:e7:5c:ce:fb:8d:e6:7a:cd:b3:84:52:
dd:23:79:15:8f:c2:37:c5:a5:34:de:e2:22:d5:45:f7:21:7f:
d0:01:5b:54:83:db:b0:b6:eb:4c:ac:cc:9b:08:65:d6:bc:56:
24:7b:b6:3b:91:19:79:84:a7:4d:3d:95:e4:6e:f2:ef:b0:84:
35:0f:83:74:8a:ad:dd:ad:b7:4b:62:05:dc:37:4f:75:a0:85:
5b:71:6f:fc:76:1f:3e:04:6f:ea:4e:07:12:ed:18:e6:f8:b1:
74:df:a8:49:ba:62:95:fa:8a:48:fd:c3:84:9a:98:bb:f0:46:
5b:7e:6f:56:18:70:c0:32:1e:b3:f2:ce:7b:32:1c:26:e6:ff:
ad:9c:b3:33:fe:59:6c:5e:a0:7d:be:4e:04:b1:6a:51:6e:bf:
44:aa:ee:f9:d4:93:35:d9:04:e7:f6:0f:a6:0b:48:9d:f7:2e:
ca:01:1a:d9:97:a8:f8:4e:83:e2:86:0c:c9:ec:f8:56:8d:71:
df:77:9a:ac:fb:f3:a5:ef:17:8f:09:10:fd:9c:fa:33:bd:4b:
44:23:05:e9:40:ca:5c:95:87:f3:fe:09:03:20:3d:2c:f3:d0:
f3:22:42:6a:6d:cb:11:f6:29:29:c3:c3:4a:4c:f7:c8:8f:72:
8e:a0:63:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 21:53:17 2024 by rpki-client on console-fra.rpki-client.org