Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/vvTWu1RqJwGz-Q7EgBhUfUyhyvU.roa
File: vvTWu1RqJwGz-Q7EgBhUfUyhyvU.roa (raw, json)
Hash identifier: DkHq05uwEU5g5HDJVur2ZPEpeW2z6A0RQvaYYDK1Tmg=
Subject key identifier: BE:F4:D6:BB:54:6A:27:01:B3:F9:0E:C4:80:18:54:7D:4C:A1:CA:F5
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 0191A769024E79D0CBBCE44C10DB8AE9A2B8
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/vvTWu1RqJwGz-Q7EgBhUfUyhyvU.roa
Signing time: Sat 31 Aug 2024 07:49:22 +0000
ROA not before: Sat 31 Aug 2024 07:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.233.164.0/24 maxlen: 24
185.233.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 06:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a7:69:02:4e:79:d0:cb:bc:e4:4c:10:db:8a:e9:a2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Aug 31 07:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bef4d6bb546a2701b3f90ec48018547d4ca1caf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:06:7d:a8:04:a9:63:6f:ca:b8:5f:b5:ad:
ca:65:ac:fa:19:78:93:a6:b1:03:b6:7e:4a:25:2c:
55:ad:b3:b0:76:49:7b:fa:c0:57:20:36:3c:bd:fc:
e8:95:74:2e:45:79:d6:50:5d:ad:85:96:e7:e4:da:
4e:78:99:77:49:38:9b:06:48:f1:cd:c5:73:4d:6b:
9d:a3:c2:af:7d:d3:cd:b8:98:38:de:ae:68:c0:50:
f3:b1:2f:df:cb:7e:29:36:8a:2a:1c:db:c3:bb:ea:
5d:9e:70:55:65:44:b7:1f:4f:b4:c0:99:ab:db:f9:
3e:0f:c9:e2:e8:e6:df:a0:59:3c:6f:65:96:82:0a:
97:e8:55:c0:c6:61:e9:c7:87:4d:6e:a8:04:f2:64:
94:0b:59:00:31:d6:fc:e7:97:93:9b:b5:06:8c:d1:
13:d6:a6:4f:59:f7:f9:09:0f:24:a5:cb:04:75:fa:
4f:86:49:69:bc:77:be:f6:ab:06:c4:fb:93:32:39:
95:d5:2f:ca:5a:d1:86:69:57:95:e8:14:72:76:95:
d4:6b:d3:38:ca:aa:46:8f:14:2d:ee:ee:e1:e4:52:
aa:2e:ed:c0:52:73:f7:60:4f:e9:26:a5:2c:b5:52:
b7:b4:2d:c2:b7:c2:a3:e9:ce:3e:84:44:13:c7:e5:
15:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F4:D6:BB:54:6A:27:01:B3:F9:0E:C4:80:18:54:7D:4C:A1:CA:F5
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/vvTWu1RqJwGz-Q7EgBhUfUyhyvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.164.0/24
185.233.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:7d:d5:1a:59:43:bc:65:dd:5b:84:c9:fd:83:0c:a6:ff:b8:
03:25:5e:7c:c2:9a:47:4d:e1:97:41:0d:3f:c2:7b:4d:db:97:
79:ca:ce:77:ab:75:c4:38:bf:12:46:42:f7:2c:d9:15:39:6d:
76:05:8f:f1:89:8d:ff:06:5e:6d:bb:b0:cc:38:c6:9c:17:37:
a0:98:7d:c8:ef:44:11:eb:fa:c5:61:98:d6:56:df:7e:8c:7b:
6d:ca:ec:9d:9d:c0:e5:76:4a:ba:8b:df:b1:c6:05:62:8d:41:
e2:63:c2:a1:91:1c:dc:dd:29:d5:09:b2:ea:c8:0b:43:84:dd:
3d:6e:9b:3c:d3:a5:86:1e:79:13:cf:1f:af:1c:86:a6:df:e2:
f0:87:2e:a9:e1:34:18:e6:9b:fd:6b:0a:09:21:de:e1:53:dd:
7c:43:bf:08:93:3b:d1:c4:f5:40:dd:16:15:04:b3:b0:5d:36:
93:db:79:a4:4f:19:a8:5b:88:9b:12:6a:46:9c:65:0d:77:10:
5d:96:c0:c5:f5:56:56:a2:3f:72:7e:66:4c:ef:2f:8d:f1:e1:
8a:0b:c4:84:aa:ab:2f:12:15:b3:e6:ea:fc:8c:d6:30:8b:b0:
d3:c2:d9:1c:f3:0e:a1:7d:e6:ae:90:43:16:7c:33:db:69:03:
0c:29:cf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 08:59:15 2024 by rpki-client on console-fra.rpki-client.org