Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/rE3aJ4_Sqi1fXf6NqtYqizHDl-g.roa
File: rE3aJ4_Sqi1fXf6NqtYqizHDl-g.roa (raw, json)
Hash identifier: lUGEzqZ3DXpSJllKG1uqw5AYif3cuCnRAG0oWvn2o5Y=
Subject key identifier: AC:4D:DA:27:8F:D2:AA:2D:5F:5D:FE:8D:AA:D6:2A:8B:31:C3:97:E8
Certificate issuer: /CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Certificate serial: 0185707079289DC2610618CBCB46BB7EFF22
Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/rE3aJ4_Sqi1fXf6NqtYqizHDl-g.roa
Signing time: Mon 02 Jan 2023 03:04:57 +0000
ROA not before: Mon 02 Jan 2023 03:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47164
IP address blocks: 185.174.181.0/24 maxlen: 24
185.174.182.0/24 maxlen: 24
185.174.180.0/24 maxlen: 24
185.174.183.0/24 maxlen: 24
185.174.180.0/22 maxlen: 22
185.227.104.0/24 maxlen: 24
185.227.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:79:28:9d:c2:61:06:18:cb:cb:46:bb:7e:ff:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Validity
Not Before: Jan 2 03:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac4dda278fd2aa2d5f5dfe8daad62a8b31c397e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:fb:db:57:21:12:b3:b7:0a:57:bf:13:1e:
3c:28:1d:cf:30:e2:49:ce:ff:6a:f3:0d:82:c1:f5:
85:33:0a:b2:82:1c:a6:9e:32:2c:6b:0e:e1:53:a6:
03:f4:f4:54:6f:13:46:8e:19:b4:6e:36:6e:ec:e5:
46:5f:f2:ca:9d:97:99:13:e9:2a:7f:67:28:2b:8a:
c3:41:76:5e:4e:6d:0b:65:ec:38:b5:ee:b8:96:b4:
20:6a:3d:29:03:34:6a:7e:1d:cb:98:17:b6:5d:f5:
3e:a6:e1:13:2d:f2:1d:71:cf:41:66:1f:b5:ba:e1:
b0:a6:56:27:71:af:e6:8d:f2:46:7f:fc:3e:a5:8c:
d9:f9:75:ef:92:6d:2f:61:6d:d2:8e:dc:c4:3d:e8:
02:b4:0d:d7:1f:1e:1c:90:25:03:63:c8:a8:b3:92:
ad:c1:94:63:df:09:19:54:2f:6b:66:72:cc:f5:01:
8c:58:fd:6c:b8:49:90:03:aa:9a:be:ba:e8:22:0b:
4b:1b:d0:28:6e:09:57:71:28:80:f5:f3:2c:bc:0a:
3c:86:6d:1a:3b:dd:7c:8c:d8:6b:15:a5:83:fd:1f:
79:b3:33:31:08:1c:80:c9:5c:84:06:98:f6:43:47:
33:ff:da:79:bc:b3:b8:2e:2e:e6:38:99:30:ea:91:
d5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4D:DA:27:8F:D2:AA:2D:5F:5D:FE:8D:AA:D6:2A:8B:31:C3:97:E8
X509v3 Authority Key Identifier:
keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/rE3aJ4_Sqi1fXf6NqtYqizHDl-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.180.0/22
185.227.104.0/22
Signature Algorithm: sha256WithRSAEncryption
21:81:b8:d8:ea:95:fe:be:f1:5e:53:8d:6d:8d:ad:f2:bc:43:
0b:20:50:63:34:76:42:80:39:ed:b1:df:69:47:f7:85:20:2c:
53:31:df:3b:13:fe:23:31:d9:6d:79:f3:9d:18:9d:8b:43:07:
9c:3f:27:35:c5:6c:60:4a:0f:75:e8:98:b9:7e:02:94:09:2c:
cb:79:f8:5f:db:a2:13:c6:b0:55:f0:29:db:0f:78:91:95:5e:
b5:3a:ce:08:02:f8:6c:ec:7c:9c:94:bb:c3:23:33:bb:4c:50:
da:79:bc:53:ac:51:ae:9a:fc:39:7d:64:64:16:7b:49:4d:95:
0a:63:49:c2:b7:c4:4b:44:8c:8e:71:a2:68:c4:28:79:96:f9:
1b:15:35:0a:14:45:e6:a3:ff:98:c7:68:96:29:8b:f7:4b:f5:
ff:99:05:30:fd:65:a1:e9:dc:3f:b6:b7:e8:6b:4e:4e:68:0a:
e6:23:bb:a5:f1:76:b1:8e:cd:0b:2e:5a:fa:21:60:8d:b5:e3:
ca:5f:04:2a:0f:63:05:86:96:e1:af:4f:ad:02:a2:0a:86:af:
e2:1a:ed:95:8e:6c:08:16:96:5d:e2:9c:e9:80:c7:72:57:a0:
fc:d4:76:f6:ed:1c:8a:3c:82:00:ce:7b:f7:ad:3c:10:a3:b8:
8d:e8:bf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:29 2024 by rpki-client on console-ams.rpki-client.org