Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/_WPfu25sNO6Z_0vt_lW_xQzacOQ.roa
File: _WPfu25sNO6Z_0vt_lW_xQzacOQ.roa (raw, json)
Hash identifier: xxas/0jJKeILf+tqjJtBTMdLWIoHhPLvbRAoUhWvOOM=
Subject key identifier: FD:63:DF:BB:6E:6C:34:EE:99:FF:4B:ED:FE:55:BF:C5:0C:DA:70:E4
Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial: 018CC86F1804BA8AF4FAD63CFC62809C4A94
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/_WPfu25sNO6Z_0vt_lW_xQzacOQ.roa
Signing time: Tue 02 Jan 2024 04:29:32 +0000
ROA not before: Tue 02 Jan 2024 04:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6724
IP address blocks: 185.122.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 12:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:18:04:ba:8a:f4:fa:d6:3c:fc:62:80:9c:4a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Validity
Not Before: Jan 2 04:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd63dfbb6e6c34ee99ff4bedfe55bfc50cda70e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:cd:06:ac:1c:c7:91:e5:82:44:86:a6:f0:
8d:f3:8f:3a:5e:f1:7d:40:46:69:90:39:9b:db:d7:
18:af:71:8b:16:6e:94:2d:c9:75:2e:23:05:e6:d7:
d6:46:b6:8a:b2:ae:7b:a6:5c:85:64:c9:83:30:38:
49:b5:70:e4:41:5d:10:54:47:19:0f:9e:04:52:c1:
6f:d0:ed:67:3b:ba:11:54:39:ee:dc:f5:59:bc:e9:
85:00:9d:60:5a:9b:35:e7:7c:75:50:47:fc:dd:18:
1c:49:2a:ec:15:c7:9f:07:12:2f:35:cd:60:40:ba:
f8:d3:27:64:9a:1f:94:b1:aa:b9:d7:1d:1a:35:94:
28:ca:3c:1a:26:eb:e7:dc:f4:5c:e5:b7:7a:94:ba:
69:a4:24:bf:44:f5:63:cd:b9:49:7c:05:c3:c9:e2:
48:60:e3:ca:fe:3b:eb:c3:32:f6:7c:4b:69:11:da:
4e:d6:f0:2c:2d:29:a0:ce:47:17:22:91:2c:bc:f8:
25:02:2a:0a:17:db:10:5e:ea:32:3c:72:0c:72:4a:
af:1c:d6:92:17:6d:fe:54:75:1b:93:d6:92:27:ab:
6d:0e:79:b0:39:1c:32:cc:1e:b9:82:50:04:b7:04:
39:98:07:65:bf:86:40:85:e4:33:ab:db:3c:ed:aa:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:63:DF:BB:6E:6C:34:EE:99:FF:4B:ED:FE:55:BF:C5:0C:DA:70:E4
X509v3 Authority Key Identifier:
keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/_WPfu25sNO6Z_0vt_lW_xQzacOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.183.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:11:28:eb:4c:d9:da:2d:b8:ab:39:7c:34:9f:80:78:3c:dc:
1f:8e:a2:3d:78:58:8f:76:43:59:35:23:80:1a:2e:c2:f7:e3:
d1:b6:ab:9f:23:66:6a:97:09:9f:18:9c:61:ce:51:a6:c1:13:
ea:6e:a3:30:e0:eb:3e:b1:b1:1f:bd:35:69:55:91:5c:0f:05:
b3:b4:0f:f5:0e:40:fd:d1:d9:fd:35:8b:67:85:ff:17:70:b5:
be:e5:8f:da:d6:27:9c:11:de:cb:74:22:d2:f0:0d:b9:65:5b:
39:4f:cf:05:63:c0:07:89:70:01:54:72:70:56:2e:21:c9:f6:
e0:86:ff:71:40:51:a3:3a:3e:7a:5e:c3:c9:5d:bb:48:ac:d8:
26:38:d2:de:28:7d:d6:e9:92:4e:cb:36:26:16:df:82:3e:59:
59:0b:a1:cc:a8:58:a0:8f:7c:10:5f:43:08:c6:6e:92:44:03:
85:ce:55:81:25:02:a9:91:41:a1:6b:73:93:74:69:96:80:95:
33:2b:a0:60:06:ee:77:56:ac:85:76:80:b8:64:22:7e:8b:fc:
2c:d5:25:90:3e:e0:19:d6:6f:5c:2c:bf:6a:dd:54:bc:f2:b8:
1b:83:83:9e:36:7b:67:c7:2e:3b:dd:d9:20:1c:da:c1:50:8a:
a9:a4:85:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 15:21:41 2024 by rpki-client on console-fra.rpki-client.org