Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/c89GyWQ-AHFUVt_vvk8V8hguweM.roa
File: c89GyWQ-AHFUVt_vvk8V8hguweM.roa (raw, json)
Hash identifier: UBrr3Rd2pXuMsqq2z7FtXouVZV2dZ1hxIH+fSBDrJHg=
Subject key identifier: 73:CF:46:C9:64:3E:00:71:54:56:DF:EF:BE:4F:15:F2:18:2E:C1:E3
Certificate issuer: /CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Certificate serial: 018572F13155347ADFA2CAC682141AC359AD
Authority key identifier: A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/c89GyWQ-AHFUVt_vvk8V8hguweM.roa
Signing time: Mon 02 Jan 2023 14:44:47 +0000
ROA not before: Mon 02 Jan 2023 14:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205222
IP address blocks: 185.225.58.0/24 maxlen: 24
185.225.57.0/24 maxlen: 24
185.225.56.0/24 maxlen: 24
185.225.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 13:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f1:31:55:34:7a:df:a2:ca:c6:82:14:1a:c3:59:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Validity
Not Before: Jan 2 14:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73cf46c9643e00715456dfefbe4f15f2182ec1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:ac:cc:6e:14:40:4a:9f:e0:38:ac:46:3d:
e2:54:7e:00:a5:8c:6d:8c:29:b3:0f:47:6e:9d:f3:
27:ea:f9:16:dd:21:7f:ca:0f:c2:9d:e4:ca:81:7d:
d9:07:22:bd:a1:67:0b:b1:fb:78:84:7a:87:a4:d5:
38:ae:4c:75:c3:ec:3c:c6:8d:e2:bf:cc:54:50:9f:
9f:7b:4e:d6:d4:a4:8c:e4:89:16:91:20:f8:4c:8f:
9c:0c:34:be:85:05:3a:b6:8e:7b:69:a5:00:37:d1:
e2:3a:e2:cd:5a:58:b8:01:90:e7:91:dc:d4:b4:73:
09:b5:ec:ec:78:9e:28:30:1a:8d:45:97:5f:70:40:
43:9f:77:e6:b9:48:13:79:58:7a:c1:c6:43:f3:83:
4d:ee:d7:ef:f0:79:c5:0b:fc:39:c6:52:40:2f:20:
08:e1:c1:ef:e5:0e:03:d8:7f:71:99:ef:26:2c:52:
bf:22:d3:62:3d:1b:43:a0:f7:28:64:98:70:b8:0e:
c1:e2:04:ca:26:25:f4:d7:0f:8a:9a:b9:fb:df:4c:
e8:f3:24:7d:6d:c4:be:24:30:d9:2b:52:98:5e:2f:
ca:d4:b8:da:0c:d1:3b:75:9d:63:a1:1c:2c:88:f8:
25:af:02:0a:fc:2c:23:8a:23:8b:23:40:8e:47:84:
d9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CF:46:C9:64:3E:00:71:54:56:DF:EF:BE:4F:15:F2:18:2E:C1:E3
X509v3 Authority Key Identifier:
keyid:A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/c89GyWQ-AHFUVt_vvk8V8hguweM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.56.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:8e:c5:c8:36:b8:e3:ff:4f:15:62:b8:c7:b6:91:6c:ca:a2:
ee:f4:0a:fe:28:eb:24:b6:ba:27:07:e8:37:72:10:c8:4c:28:
7e:28:f0:84:13:29:40:cd:66:e7:3d:ac:48:09:2b:34:0e:20:
6b:e2:67:91:f0:dd:8c:56:ef:d8:b8:10:cc:8a:95:44:9e:a2:
d9:8c:a4:82:4a:04:d7:20:62:b9:a9:c0:2b:b7:e7:18:37:72:
04:2a:c2:72:dd:39:64:42:28:eb:75:da:e2:13:50:6a:ef:55:
b1:92:dd:e6:0d:35:ba:8e:5d:8f:14:1c:4f:9c:5a:56:0b:f7:
a1:6b:40:d0:d3:06:c7:57:dc:e2:0b:7e:ad:90:65:a9:91:8f:
56:02:9b:44:0b:2e:0f:a1:b5:23:14:cf:23:47:00:5f:d2:d1:
b7:fe:d5:57:d1:9a:50:17:f5:c5:f0:40:9d:5d:ec:ee:79:44:
51:f8:f5:46:86:88:00:31:d5:35:d7:12:70:df:f6:b8:41:6b:
51:06:f9:b6:93:61:06:54:2d:4e:b3:0a:b5:19:b6:3f:90:0d:
24:c0:f3:37:c7:71:6d:69:ff:68:33:83:34:64:18:cd:45:40:
22:26:8d:8a:69:f5:66:92:90:b7:3f:cf:6b:e8:f5:46:b1:ce:
6f:46:c9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:16 2024 by rpki-client on console-ams.rpki-client.org