Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/iyFD-PXGgyQlNhfE2UJs6q_T03c.roa
File: iyFD-PXGgyQlNhfE2UJs6q_T03c.roa (raw, json)
Hash identifier: A4fnxL6vX9DgOCP9ZORPajXt/cgO3UufC94u1UpqiDk=
Subject key identifier: 8B:21:43:F8:F5:C6:83:24:25:36:17:C4:D9:42:6C:EA:AF:D3:D3:77
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 018FF0EA732B06D104E5A6465F2EDA99CDAD
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/iyFD-PXGgyQlNhfE2UJs6q_T03c.roa
Signing time: Fri 07 Jun 2024 04:17:27 +0000
ROA not before: Fri 07 Jun 2024 04:17:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.224.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jun 2024 17:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f0:ea:73:2b:06:d1:04:e5:a6:46:5f:2e:da:99:cd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Jun 7 04:17:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b2143f8f5c68324253617c4d9426ceaafd3d377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d7:4e:f4:cc:f3:cf:0d:2f:f8:4d:af:90:19:
b7:cb:2d:3f:b9:18:e2:b3:d8:ad:28:7a:2e:de:18:
7e:e7:7b:da:1a:4e:38:c5:8d:a7:fd:00:28:cc:a4:
06:19:b5:09:ab:a7:22:00:f7:27:86:b8:c9:b1:5b:
7c:d4:1d:bb:c4:ea:c1:f3:c9:6a:12:10:ea:c2:90:
0c:d8:2e:2c:f1:6e:a4:de:1b:89:66:e9:e3:95:16:
0f:5f:f6:89:4b:0f:18:4f:69:bc:e1:71:48:22:86:
63:10:62:f3:a5:6b:7e:b4:a7:95:18:c1:2d:dc:1d:
af:b0:2c:88:bd:46:aa:0a:13:e8:fc:32:b3:c8:e6:
9c:55:5e:7e:d6:9a:fd:21:a4:ef:92:df:22:11:99:
e8:33:b4:33:cb:5d:d2:39:bc:55:99:35:0d:8b:50:
2c:b0:87:66:35:ea:3f:1d:c7:50:3c:af:34:c1:88:
dc:45:1b:7d:77:62:5a:07:c4:e6:cd:fa:aa:59:43:
38:23:09:a3:45:87:68:9f:1f:6d:e3:64:cc:8b:8e:
b9:d3:46:ad:31:38:98:db:9c:20:a4:9c:93:2c:02:
6e:96:7c:06:07:4b:d5:74:4d:a6:10:7e:57:ec:25:
91:ce:22:37:6e:18:22:95:08:23:a3:71:52:8a:d4:
f9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:21:43:F8:F5:C6:83:24:25:36:17:C4:D9:42:6C:EA:AF:D3:D3:77
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/iyFD-PXGgyQlNhfE2UJs6q_T03c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.3.0/24
Signature Algorithm: sha256WithRSAEncryption
64:6e:e9:53:45:f3:3c:ec:33:27:57:05:9d:d0:1d:4f:ab:43:
83:b2:e3:02:e9:07:bc:9f:5d:46:ba:8e:ab:45:9f:a3:98:b0:
f7:7f:6c:a8:94:5a:a3:5d:3c:cd:d5:96:c4:89:2a:82:5d:d3:
f8:22:2b:b5:56:36:49:4e:6b:bc:b9:59:b6:6b:78:13:08:6f:
f6:03:79:43:6b:de:71:c7:8e:74:84:da:f9:f8:29:37:b1:b2:
43:b3:55:62:62:ef:dd:ad:ff:22:cb:95:92:9a:3f:0b:3d:aa:
dd:2f:ed:87:74:04:a8:11:a9:7a:26:52:51:9b:26:59:15:b6:
b7:ae:10:5b:35:e6:e2:40:9f:18:ea:33:7d:01:18:a7:82:85:
b9:0a:62:86:20:b9:b3:67:ac:49:dc:4c:eb:c1:ae:8e:d5:9a:
7d:79:9a:59:bb:0a:6f:c2:ac:4d:e4:fc:26:c2:09:2d:5c:ef:
ac:38:87:cd:d9:44:3b:ce:b9:e6:f3:d6:3e:16:e6:67:71:5f:
6b:3c:ac:b0:f2:69:a5:5f:5b:87:9f:37:38:ad:90:0f:b3:d9:
98:8e:5a:03:05:49:4b:02:00:6a:8c:3c:7d:fe:82:2f:a1:cb:
91:1f:f6:90:41:87:38:05:cf:bd:0c:e9:f8:e6:16:9b:19:1e:
4a:e3:d1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:49 2025 by rpki-client