Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/_VxKU38lvm8ZuKnYzJHEPqebqpk.roa
File: _VxKU38lvm8ZuKnYzJHEPqebqpk.roa (raw, json)
Hash identifier: GsWmlcEErMkNgi7WyL4KI/N+uLX3b47Bg8+q9QpSmBo=
Subject key identifier: FD:5C:4A:53:7F:25:BE:6F:19:B8:A9:D8:CC:91:C4:3E:A7:9B:AA:99
Certificate issuer: /CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Certificate serial: 01856DA65FF4846BFEFF80B8619392F78973
Authority key identifier: 99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/_VxKU38lvm8ZuKnYzJHEPqebqpk.roa
Signing time: Sun 01 Jan 2023 14:04:58 +0000
ROA not before: Sun 01 Jan 2023 14:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208611
IP address blocks: 185.122.10.0/24 maxlen: 24
185.122.8.0/24 maxlen: 24
185.122.11.0/24 maxlen: 24
185.122.9.0/24 maxlen: 24
185.194.240.0/24 maxlen: 24
185.194.243.0/24 maxlen: 24
185.194.241.0/24 maxlen: 24
185.194.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:5f:f4:84:6b:fe:ff:80:b8:61:93:92:f7:89:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Validity
Not Before: Jan 1 14:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd5c4a537f25be6f19b8a9d8cc91c43ea79baa99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a6:38:14:76:54:0a:c6:22:ad:30:ae:c7:8d:
30:df:bd:89:2e:b1:ec:59:2f:40:a6:6e:d9:af:c5:
36:ac:f6:90:f0:6d:9f:0f:bb:5a:aa:60:55:77:9e:
00:c8:b6:c3:48:4f:4d:d6:36:a2:5f:77:c0:98:41:
ca:e8:23:22:d5:29:41:64:03:2a:70:6f:b5:38:dc:
04:28:c9:14:4b:86:26:9d:e0:6c:1b:54:3a:24:50:
81:b6:d1:dd:72:54:35:9f:fa:86:7e:8d:15:c1:b0:
33:34:94:06:05:5c:bd:d0:57:ab:aa:91:b9:f3:55:
97:be:32:31:74:ce:c6:fe:a5:ad:87:f2:5a:fe:e6:
e7:fe:9e:93:96:c1:09:bc:9a:57:14:92:b4:bc:e5:
11:a1:e5:b9:17:98:b5:34:f3:da:7b:82:69:f9:0b:
d8:06:2b:d2:63:02:80:87:93:67:4b:a0:9e:ca:e0:
e1:c0:4b:ed:7d:78:6c:3e:43:ce:ff:e3:52:ec:b9:
66:c1:a2:85:ef:93:b1:6f:31:40:9e:9b:8c:9b:47:
4a:88:d1:87:c3:0c:6a:dd:e0:2a:04:95:e2:d0:92:
d4:07:a0:5e:f4:99:74:e7:4b:2e:e8:4d:ce:78:c0:
40:29:66:38:60:eb:b4:ef:40:30:df:40:ec:00:1e:
ff:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5C:4A:53:7F:25:BE:6F:19:B8:A9:D8:CC:91:C4:3E:A7:9B:AA:99
X509v3 Authority Key Identifier:
keyid:99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/_VxKU38lvm8ZuKnYzJHEPqebqpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.8.0/22
185.194.240.0/22
Signature Algorithm: sha256WithRSAEncryption
df:8d:37:d0:a1:95:a0:c5:76:bc:5c:3d:2e:71:7a:58:9b:1e:
a7:3d:82:48:11:6c:81:7d:af:d4:11:f1:dc:69:c9:01:a8:4a:
d2:3c:4b:54:74:d5:31:72:b8:64:3d:61:13:f4:3b:c2:22:71:
fe:3a:7c:1e:42:b9:90:1d:c4:10:86:7c:49:90:c2:32:2a:8e:
78:00:b1:c1:ef:1b:94:93:ef:38:b0:b7:96:a0:b3:6e:f7:a7:
6e:96:cf:91:b1:20:88:5b:36:4a:de:30:6a:e8:18:09:15:11:
5d:83:9c:7d:4f:af:24:66:2a:3f:f6:cc:5a:13:e6:b4:2b:7a:
e0:cf:18:2c:ee:e8:b7:60:89:a6:30:94:fc:72:20:c6:57:2f:
9f:35:65:5b:9d:52:a1:2a:7f:7b:92:10:05:99:0b:62:1a:7d:
1b:b1:b5:c7:f7:3a:1c:11:3d:35:60:d2:2c:d7:0f:f1:c2:a6:
9b:f6:c5:e2:1e:f1:d2:04:10:29:9a:c1:6b:6f:7e:ac:ca:59:
71:0d:c3:c3:ff:20:c5:a0:7b:80:77:c7:88:fc:f4:4c:5c:12:
19:16:9e:a3:40:72:b4:0b:ff:b3:26:2e:17:29:3b:56:e2:ac:
e2:8b:31:3e:e1:34:09:21:f5:a6:ef:d5:4e:61:58:2f:8c:91:
8d:21:b6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:14 2024 by rpki-client on console-fra.rpki-client.org