Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/AQdGe7coMTaCVpONs-qPHkaolFQ.roa
File: AQdGe7coMTaCVpONs-qPHkaolFQ.roa (raw, json)
Hash identifier: BqPdlHsTP+46ouM8YmxGIz6QdeEd4Rk9mkXVGKYya1c=
Subject key identifier: 01:07:46:7B:B7:28:31:36:82:56:93:8D:B3:EA:8F:1E:46:A8:94:54
Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial: 0186306C7F4E30F1092795EBEB759A47829F
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/AQdGe7coMTaCVpONs-qPHkaolFQ.roa
Signing time: Wed 08 Feb 2023 09:47:42 +0000
ROA not before: Wed 08 Feb 2023 09:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201668
IP address blocks: 185.65.252.0/24 maxlen: 24
185.65.253.0/24 maxlen: 24
185.65.254.0/24 maxlen: 24
185.65.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:30:6c:7f:4e:30:f1:09:27:95:eb:eb:75:9a:47:82:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
Validity
Not Before: Feb 8 09:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0107467bb72831368256938db3ea8f1e46a89454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:af:c3:5e:ce:23:4d:ae:6d:b4:ea:93:9c:
ba:41:a1:ba:d9:d8:ee:3a:d1:67:52:49:39:45:4d:
d8:26:a9:54:96:22:37:cb:42:72:d0:1c:9c:df:94:
7c:05:61:da:65:84:d9:42:56:41:70:39:cd:66:db:
9c:fe:94:d1:9c:43:34:1c:23:70:f2:9c:52:42:e6:
0a:d3:b4:8b:25:9a:3e:12:de:f0:8e:3f:28:e6:d6:
46:45:18:6c:dd:f4:d8:1a:e1:89:22:b4:a5:c0:e9:
6a:87:98:f5:95:2a:db:5a:bc:79:07:e1:b0:e4:e3:
69:cb:67:78:d9:ee:84:76:59:a8:d6:0f:29:c9:f4:
e7:15:41:ff:4d:89:81:b7:0d:5d:29:7f:44:aa:6c:
94:0f:37:58:f2:17:07:5c:fc:95:04:01:b5:3a:9f:
91:7b:b6:66:35:75:66:b2:d5:8a:55:6e:86:3c:c6:
6e:0d:72:cd:2c:93:be:e8:f8:06:86:03:1c:48:28:
b6:c2:72:a6:21:3d:14:26:15:15:ba:0b:21:1f:c0:
a4:28:49:04:d4:a0:9d:80:33:e2:04:0b:0e:80:f0:
b1:08:a1:bc:64:f0:fd:1b:b8:57:14:5b:e6:d9:cc:
87:ad:64:a3:bb:8a:7f:cf:df:9d:a4:2a:ff:be:a7:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:07:46:7B:B7:28:31:36:82:56:93:8D:B3:EA:8F:1E:46:A8:94:54
X509v3 Authority Key Identifier:
keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/AQdGe7coMTaCVpONs-qPHkaolFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.252.0/22
Signature Algorithm: sha256WithRSAEncryption
20:d6:d2:09:26:7c:03:16:09:29:fe:4d:11:1b:59:77:20:0d:
04:bd:d6:d9:7f:9d:ca:bc:85:6c:1d:e6:fe:6e:25:30:b5:96:
0e:08:a9:ee:f0:58:94:24:e8:91:4a:fb:59:e8:eb:a0:78:07:
9b:eb:4d:d4:c0:1e:6f:2a:1c:99:23:c9:c1:09:d1:7c:a5:62:
2e:af:f3:cf:08:cc:fc:58:26:e4:ab:c6:cd:35:d5:49:e7:f6:
cc:63:5b:7b:a4:22:de:56:29:ed:6a:6c:2e:aa:90:0c:f5:e8:
ae:0c:29:f9:43:f9:b8:a0:c6:6c:eb:74:a4:69:b0:3e:b6:12:
d2:bd:bc:11:8d:bd:99:3d:52:85:c0:cc:bb:ff:4e:2f:60:16:
a0:67:6d:d6:0e:65:68:9c:2f:c1:6c:13:75:b3:4a:ee:e0:07:
ab:14:23:aa:33:e1:e5:c9:fa:cc:d3:05:d9:c3:95:a2:07:fe:
1e:91:98:cd:8c:ae:91:d1:1d:f7:94:a3:a0:b4:9c:28:cf:b0:
4a:06:75:7f:77:87:cd:7f:c7:b0:c2:52:61:12:67:82:6d:82:
68:90:df:81:49:08:26:ba:90:ed:cd:f4:50:56:3d:e5:db:73:
8a:10:71:4d:b2:77:14:18:b4:87:b0:96:c6:99:f8:2d:06:80:
e7:c3:d1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:18 2024 by rpki-client on console-fra.rpki-client.org