Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/ExWwrqrDqJ8n_lPcVwQ7oycPa6k.roa
File: ExWwrqrDqJ8n_lPcVwQ7oycPa6k.roa (raw, json)
Hash identifier: ViajjyXLqeJFNnwun/P34tHee8Ul/08ZkrDL+12vyCw=
Subject key identifier: 13:15:B0:AE:AA:C3:A8:9F:27:FE:53:DC:57:04:3B:A3:27:0F:6B:A9
Certificate issuer: /CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Certificate serial: 018571B0DCD28892099F583DCC335F964AF7
Authority key identifier: 41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/ExWwrqrDqJ8n_lPcVwQ7oycPa6k.roa
Signing time: Mon 02 Jan 2023 08:54:54 +0000
ROA not before: Mon 02 Jan 2023 08:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206391
IP address blocks: 185.187.204.0/24 maxlen: 24
185.187.206.0/24 maxlen: 24
185.187.205.0/24 maxlen: 24
185.187.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:dc:d2:88:92:09:9f:58:3d:cc:33:5f:96:4a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Validity
Not Before: Jan 2 08:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1315b0aeaac3a89f27fe53dc57043ba3270f6ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:33:04:5e:ea:c2:88:cd:ea:7f:c2:85:e9:
37:e5:13:73:e6:dd:d9:bb:f7:e1:59:05:63:9f:0b:
74:38:2a:e9:52:dd:a4:42:b1:62:f2:1d:8f:5c:8f:
7a:e9:5b:a0:80:e3:90:e9:00:32:5e:cf:46:76:88:
e8:ee:eb:e9:76:9e:b5:58:11:13:70:8b:30:df:d5:
62:5c:3e:ef:52:3a:68:35:ab:f3:ae:69:cf:3a:1e:
b5:d1:da:0c:0f:df:db:7c:2f:11:a2:2c:a8:e5:ae:
16:d6:ec:e0:a7:f3:38:01:7e:43:66:59:13:65:a1:
d7:08:ea:c7:4f:42:b7:5a:f7:15:dd:ba:04:24:8a:
ad:b1:3c:7b:d3:fa:9e:af:f0:04:2d:be:ee:bd:26:
00:de:d8:22:e3:82:71:ed:74:6f:1b:eb:76:52:d6:
12:6a:a8:63:56:a6:58:40:91:ee:9d:bc:ab:32:e9:
5b:d2:7d:f3:c5:13:b5:82:e8:ab:8a:9f:37:ba:17:
71:48:4a:d1:55:c1:5c:d9:13:50:49:88:2c:e5:d8:
21:dc:a7:4a:e8:85:35:7e:14:5b:2e:ec:42:31:50:
82:1a:46:72:af:b0:38:9d:bc:1d:25:6d:d6:cb:47:
71:f1:24:2e:33:58:fa:6e:84:2c:8f:7b:4d:f2:4d:
c2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:15:B0:AE:AA:C3:A8:9F:27:FE:53:DC:57:04:3B:A3:27:0F:6B:A9
X509v3 Authority Key Identifier:
keyid:41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/ExWwrqrDqJ8n_lPcVwQ7oycPa6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.204.0/22
Signature Algorithm: sha256WithRSAEncryption
50:1d:2d:cf:d5:ce:54:47:84:96:4f:77:a9:79:90:29:9c:b7:
70:c6:a9:2b:35:97:e3:49:87:de:01:fc:8b:d6:33:a1:6b:2c:
90:17:24:3d:68:85:77:ae:99:5e:4f:c7:5c:f4:11:7a:2e:aa:
2e:34:fe:ca:07:2d:1c:6f:dd:79:be:01:90:ce:5c:7a:89:04:
40:ed:59:26:5a:1d:d0:2b:e9:4c:69:19:21:d5:f8:63:34:d7:
84:11:75:f0:f2:7b:7f:fa:52:61:e3:f5:e2:bd:93:c4:7e:54:
9f:d3:e1:fc:80:77:1c:1c:08:d3:21:ab:f3:42:50:01:87:78:
d2:63:53:16:f0:49:57:96:ca:17:1b:99:38:5e:7b:09:50:51:
40:50:35:55:d8:7d:a4:cb:d9:8e:7d:f6:81:90:63:58:01:0b:
43:aa:f2:6e:1d:ac:c5:d0:09:86:b4:ea:33:e3:05:13:cc:14:
ad:32:7b:a2:d5:86:8d:1a:b2:0e:de:b9:2b:63:bb:b9:97:1b:
72:c4:1d:66:f7:b5:4f:2f:22:44:3b:5a:e9:95:b6:ab:52:cd:
6f:29:4e:35:0e:3f:2e:3a:02:46:3a:5e:a0:6b:ce:61:78:b1:
e6:e6:b6:c1:3a:6e:5b:e1:e3:fc:b3:5c:4b:dd:f3:98:d8:92:
8b:41:7a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:19 2024 by rpki-client on console-ams.rpki-client.org