Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/AegGB70q4-LYVVSAkxh8g3l2yro.roa
File: AegGB70q4-LYVVSAkxh8g3l2yro.roa (raw, json)
Hash identifier: 482VyVcUCMMuZIs+iPdKkxy10+TFgwU9JKab+2QAGOk=
Subject key identifier: 01:E8:06:07:BD:2A:E3:E2:D8:55:54:80:93:18:7C:83:79:76:CA:BA
Certificate issuer: /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial: 0186843F20C6832DC64141CA699EAA461EAE
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/AegGB70q4-LYVVSAkxh8g3l2yro.roa
Signing time: Fri 24 Feb 2023 16:26:15 +0000
ROA not before: Fri 24 Feb 2023 16:26:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42956
IP address blocks: 185.81.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:84:3f:20:c6:83:2d:c6:41:41:ca:69:9e:aa:46:1e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Validity
Not Before: Feb 24 16:26:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01e80607bd2ae3e2d855548093187c837976caba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:36:a9:4e:3f:34:18:5d:a7:61:20:a0:cd:
45:04:10:f1:97:31:22:ba:f3:71:3c:76:5e:38:e7:
8e:f6:3f:a8:3c:5c:94:c8:76:d9:e5:2d:a5:4c:8c:
2d:43:54:9e:91:16:eb:82:f5:65:bc:65:da:38:a3:
14:2d:3c:39:65:cd:ab:a9:e6:90:da:b1:6c:bc:0a:
34:30:c3:f0:70:a3:8c:70:25:b8:a6:34:72:74:a3:
81:95:e0:e5:36:0a:f3:cf:d3:9d:cd:ff:5b:9b:7b:
40:6d:18:93:dd:ef:df:0c:a1:3c:45:d4:ed:45:87:
df:b3:48:18:b7:d0:df:c2:ff:36:fb:96:9c:d1:a9:
4a:86:ae:44:80:bd:fd:c7:d3:67:62:cf:c8:b7:8c:
58:e6:b7:08:e0:e9:0f:ce:8f:d5:e0:21:7e:02:f9:
e8:9a:c1:f5:04:03:7a:52:c7:66:13:c2:43:21:7d:
88:f0:35:0d:8f:ca:f3:37:1e:eb:52:a5:25:35:53:
22:7e:3c:c6:69:e2:01:eb:71:aa:f1:ea:43:73:fa:
7e:b9:ab:1c:9d:d5:11:5b:82:42:82:cb:56:a7:72:
93:5a:0f:a9:ac:df:f2:f8:c1:e4:ad:6a:74:04:66:
06:40:d8:fa:cc:0e:d0:af:7a:d3:5b:67:cd:7c:0f:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E8:06:07:BD:2A:E3:E2:D8:55:54:80:93:18:7C:83:79:76:CA:BA
X509v3 Authority Key Identifier:
keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/AegGB70q4-LYVVSAkxh8g3l2yro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.122.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e4:45:54:bd:8d:03:4f:2d:24:3d:96:58:c2:3f:0b:52:82:
86:74:ae:b5:2c:a1:c8:b5:62:55:d3:5f:c4:2f:ef:6e:24:36:
9b:6a:e6:f2:f8:b5:dd:77:e5:26:36:ad:ec:fc:2c:94:12:16:
35:02:78:8d:b4:a9:96:02:3e:e5:6a:ac:7e:06:78:4b:d0:08:
a7:0d:15:48:58:1a:e4:ea:e2:43:4a:66:89:0f:97:72:f8:bc:
92:ad:8b:0c:ed:1d:4b:56:2c:4c:ea:3d:b0:28:14:7c:da:53:
20:44:6c:46:94:96:6a:04:11:47:d2:44:ec:58:9c:c7:f7:8f:
90:a3:b2:6f:2f:be:02:e5:0b:69:83:10:ae:f4:ad:64:f4:31:
55:5e:42:7a:00:b8:f4:b7:1b:2c:2f:1b:ae:9f:38:eb:67:c8:
be:f8:2b:cf:51:e3:d7:c6:c7:f0:55:fd:88:cf:71:98:f9:b9:
3e:b0:21:e7:b7:20:02:3b:4a:1f:48:67:11:6e:e4:9f:d0:2e:
86:4f:45:d8:1f:6f:1b:3b:92:22:73:d2:e9:86:ac:b7:7a:8d:
97:46:21:f4:99:7d:c5:97:58:6b:21:f8:eb:d5:18:4b:34:aa:
0b:88:bb:b1:45:a8:d8:89:0d:e2:54:94:87:53:10:bd:d2:d3:
ff:d9:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org