Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/IlVCk1Fgyq7_JrKzyCl3XCBW8gs.roa
File: IlVCk1Fgyq7_JrKzyCl3XCBW8gs.roa (raw, json)
Hash identifier: uaOGmEfk3ng/YlelMLB83ZAxej5tzB9G+Vq1MENmpoI=
Subject key identifier: 22:55:42:93:51:60:CA:AE:FF:26:B2:B3:C8:29:77:5C:20:56:F2:0B
Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial: 018A2BC97CD024844F30AB322CE5C6264B78
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/IlVCk1Fgyq7_JrKzyCl3XCBW8gs.roa
Signing time: Fri 25 Aug 2023 08:22:19 +0000
ROA not before: Fri 25 Aug 2023 08:22:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57814
IP address blocks: 185.229.108.0/24 maxlen: 32
185.229.108.0/22 maxlen: 32
185.229.111.0/24 maxlen: 32
185.229.110.0/24 maxlen: 32
185.229.109.0/24 maxlen: 32
188.93.90.0/24 maxlen: 32
188.93.89.0/24 maxlen: 32
188.93.88.0/24 maxlen: 32
188.93.91.0/24 maxlen: 32
188.93.95.0/24 maxlen: 32
188.93.94.0/24 maxlen: 32
188.93.92.0/24 maxlen: 32
2a0a:5000::/29 maxlen: 128
2a0d:8a00::/32 maxlen: 128
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2b:c9:7c:d0:24:84:4f:30:ab:32:2c:e5:c6:26:4b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Validity
Not Before: Aug 25 08:22:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=225542935160caaeff26b2b3c829775c2056f20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:49:29:2b:78:b8:e7:ea:7c:84:1c:34:a7:
27:39:4d:e3:11:97:fe:8a:a6:ea:d8:65:98:50:35:
98:2b:d9:e2:1f:61:ee:0d:a0:da:db:94:b5:17:87:
d8:3d:f9:81:37:d0:c3:ea:5b:b2:c8:3d:22:10:ce:
26:59:d4:e6:43:75:68:3d:14:ae:11:84:20:dc:1c:
61:af:6e:e8:2c:b4:b8:29:fb:90:44:35:24:d9:2d:
a1:2c:26:63:5c:2a:df:66:56:d9:4f:b0:a1:50:89:
28:40:f8:7f:9e:86:7d:c5:31:44:a9:44:85:f9:fa:
98:86:2f:2a:fe:de:cd:c5:fb:cc:d5:50:2a:6b:ee:
60:be:5a:f9:39:6f:c3:a2:37:b9:66:f6:33:90:44:
42:d5:7c:13:86:83:63:6a:60:d8:50:f8:46:22:b2:
47:3d:f0:3a:ee:dc:9e:70:ea:21:27:a7:1f:96:6a:
86:ab:fc:18:39:17:f9:20:32:f3:1d:74:24:f6:ef:
9e:b5:a9:c7:3b:30:44:9a:9c:bd:e8:9f:8d:8e:11:
72:08:99:fc:50:c2:40:ff:1e:86:d3:9d:4a:5d:7b:
46:9d:61:d2:03:76:0c:e4:cd:40:33:d9:9f:5e:07:
4a:3d:42:50:9e:d7:79:36:00:7c:0f:bb:52:80:bd:
01:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:55:42:93:51:60:CA:AE:FF:26:B2:B3:C8:29:77:5C:20:56:F2:0B
X509v3 Authority Key Identifier:
keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/IlVCk1Fgyq7_JrKzyCl3XCBW8gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.108.0/22
188.93.88.0-188.93.92.255
188.93.94.0/23
IPv6:
2a0a:5000::/29
2a0d:8a00::/32
Signature Algorithm: sha256WithRSAEncryption
1a:62:07:a4:8c:d1:94:aa:17:b7:6b:62:8d:11:68:c2:3c:e3:
2f:d9:1e:c7:bf:3f:bb:98:83:9d:21:45:74:15:ea:5a:ec:f8:
59:c9:ab:28:16:a9:96:7e:a0:1c:b0:fc:ba:1d:1e:e8:5f:e2:
67:e4:01:a9:6a:0f:ec:4b:77:48:70:d8:72:cd:de:3e:9e:dd:
5d:fb:3d:2a:a6:7c:cc:12:e6:12:22:65:87:2a:16:f3:a3:3f:
e1:a8:e5:74:89:45:fa:44:b6:19:60:c2:80:84:6f:46:9c:9b:
a1:e5:8f:60:9c:d9:3a:60:62:11:11:6c:5a:14:f6:2f:c3:8d:
9f:e9:d0:65:6a:fb:18:09:d7:2a:34:a0:16:d5:ac:a3:44:e4:
5c:a6:46:b9:8c:74:6d:57:25:b7:5f:3a:49:d8:76:9e:37:c2:
d0:00:17:c2:de:a6:08:18:8e:3b:f5:e2:95:f7:69:f4:2d:d8:
7d:7e:bf:38:57:45:b4:f9:d2:59:94:37:41:fc:33:da:be:ba:
67:2f:10:7d:17:93:8d:21:d4:28:e8:bb:e0:52:d8:a5:10:31:
8b:b1:27:dc:fc:bc:b3:47:93:c0:3a:0c:6f:91:4a:54:7e:6b:
56:25:6f:ff:46:d2:d3:fa:5b:ff:8f:13:21:93:27:d8:fd:f8:
8f:f6:11:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:17 2024 by rpki-client on console-fra.rpki-client.org