Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/wrRkaqsUbwOO7sWbu9tOA4m25eg.roa
File: wrRkaqsUbwOO7sWbu9tOA4m25eg.roa (raw, json)
Hash identifier: VG7JAsuCI6CLUXk3U3wRlm5KWvZaJs9A84SUqH/o9Wk=
Subject key identifier: C2:B4:64:6A:AB:14:6F:03:8E:EE:C5:9B:BB:DB:4E:03:89:B6:E5:E8
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 0185DED01890D8091B9A29EC61E42B38F0F9
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/wrRkaqsUbwOO7sWbu9tOA4m25eg.roa
Signing time: Mon 23 Jan 2023 13:27:37 +0000
ROA not before: Mon 23 Jan 2023 13:27:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.1.230.0/25 maxlen: 25
185.1.230.128/25 maxlen: 25
212.237.192.0/24 maxlen: 24
212.237.193.0/24 maxlen: 24
195.69.118.0/24 maxlen: 24
195.69.117.0/24 maxlen: 24
195.69.116.0/24 maxlen: 24
195.69.119.0/24 maxlen: 24
195.245.240.0/24 maxlen: 24
2001:7f8:122::/49 maxlen: 49
2001:7f8:d::/48 maxlen: 64
2001:7f8:122:8000::/49 maxlen: 49
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:d0:18:90:d8:09:1b:9a:29:ec:61:e4:2b:38:f0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Jan 23 13:27:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2b4646aab146f038eeec59bbbdb4e0389b6e5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ce:f8:f4:2e:ce:12:85:48:ad:a9:3d:e9:ad:
3c:52:65:25:e4:aa:c1:b6:7d:76:fe:3c:a6:1d:18:
dd:e1:ae:74:f6:b4:2d:0e:e3:e1:e4:65:ff:7b:0f:
08:a4:3d:1b:87:68:72:d0:99:b7:db:36:5b:c9:99:
f4:c9:28:df:b7:0b:8c:a6:53:db:53:7e:45:cc:25:
e9:86:13:e5:1f:6f:b8:73:03:05:74:2f:53:9f:14:
79:b2:96:5a:7b:f3:8d:9f:6e:49:0f:36:35:e8:39:
ab:6f:1b:07:73:e6:06:10:f0:1e:b4:c8:af:ec:9e:
66:82:fa:db:bd:7d:31:11:ff:73:e0:01:5c:c6:04:
20:0f:bd:bb:31:50:97:77:1a:0c:51:d0:d1:75:d6:
61:7e:01:a4:fe:f4:9c:02:39:43:51:88:5a:6d:e7:
46:e4:71:42:a5:d5:67:90:b6:6c:63:0e:48:47:77:
a7:43:33:f9:0d:49:2d:95:03:4d:76:a5:87:32:ff:
e4:22:91:05:21:45:5e:12:80:23:f3:8e:fb:42:53:
f1:af:a5:1d:68:33:0b:9e:eb:b7:37:e4:82:87:f3:
44:f8:a6:31:a4:87:ac:1b:05:2c:4e:6a:75:90:bd:
ba:e9:31:41:45:d8:05:84:76:24:7a:a8:b2:5c:42:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B4:64:6A:AB:14:6F:03:8E:EE:C5:9B:BB:DB:4E:03:89:B6:E5:E8
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/wrRkaqsUbwOO7sWbu9tOA4m25eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.230.0/24
195.69.116.0/22
195.245.240.0/24
212.237.192.0/23
IPv6:
2001:7f8:d::/48
2001:7f8:122::/48
Signature Algorithm: sha256WithRSAEncryption
4e:32:90:44:46:87:0f:d3:c8:36:8f:9e:9f:33:22:a6:2c:84:
a8:a3:88:d6:2b:04:78:78:4e:bc:50:04:1e:af:0a:94:85:68:
b7:2c:01:f0:f8:7f:c7:a9:c4:83:c4:25:19:ee:ab:08:2d:0b:
48:2a:0e:b4:46:e4:0b:ad:d6:7e:59:9d:4c:8a:41:3b:3e:8d:
69:6d:29:ef:54:ea:f4:e1:a1:a1:08:54:f0:84:0a:b2:8e:90:
90:d9:9e:6e:0b:96:e2:d8:b2:1a:c9:94:bf:59:8b:b6:8c:6f:
b2:1b:34:29:b3:f3:7d:3d:c4:2d:13:e6:63:e7:78:26:04:0f:
91:87:a2:45:55:51:c8:84:7e:c0:78:01:4b:a5:2d:03:2f:87:
34:f1:4c:8d:eb:98:92:bb:9b:7f:12:95:6f:8c:c8:99:e0:67:
ce:3b:f1:78:07:1b:7a:ae:27:4d:b7:97:c5:24:20:6f:6a:54:
58:45:bc:d1:80:eb:46:58:66:2c:30:9c:51:d7:f0:a7:36:ec:
12:72:25:f6:1f:4a:40:92:32:eb:58:e2:50:00:f8:4f:09:58:
bb:87:a3:33:39:72:8a:9d:15:31:85:34:fa:4b:45:d1:97:06:
bb:e2:fc:94:e7:ad:a7:01:21:9f:8b:f5:d2:90:00:32:e6:c7:
d3:1b:ac:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:35 2024 by rpki-client on console-ams.rpki-client.org