Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/ItrAcIWXR-Rzf0PUD6Cf1XSCyWs.roa
File: ItrAcIWXR-Rzf0PUD6Cf1XSCyWs.roa (raw, json)
Hash identifier: 62IFmeAEdyrx0yXPfAIMCvyQqfcjWadCizidu66u24E=
Subject key identifier: 22:DA:C0:70:85:97:47:E4:73:7F:43:D4:0F:A0:9F:D5:74:82:C9:6B
Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial: 01857102E923C593EF018A6AB1AC70C1E4C7
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/ItrAcIWXR-Rzf0PUD6Cf1XSCyWs.roa
Signing time: Mon 02 Jan 2023 05:44:54 +0000
ROA not before: Mon 02 Jan 2023 05:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42106
IP address blocks: 185.231.222.0/24 maxlen: 24
185.231.223.0/24 maxlen: 24
185.231.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:e9:23:c5:93:ef:01:8a:6a:b1:ac:70:c1:e4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Validity
Not Before: Jan 2 05:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22dac070859747e4737f43d40fa09fd57482c96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:1e:b9:eb:10:02:af:0e:cc:a1:6e:2d:a9:
ff:a9:ed:1c:7f:f6:47:8a:ed:f0:e9:2a:d7:e5:d8:
79:3e:f6:d3:29:2b:a4:35:8a:d6:c9:b0:5c:4b:5f:
4b:e0:33:f7:f9:89:7a:17:a0:0a:73:b4:6e:2f:5f:
bb:de:4b:14:6e:6d:ff:f6:32:18:96:8a:ab:4f:91:
f5:9b:d1:62:a6:f5:f0:4d:73:55:42:99:1a:2b:01:
fd:49:2e:3a:06:74:77:d0:a5:4d:d6:c4:5d:a9:ef:
48:31:d5:af:a7:af:7b:05:ee:a5:d9:17:32:fc:1d:
9e:ae:ec:8f:c5:06:fa:ea:32:1d:33:f1:13:43:df:
fd:c0:60:f5:1b:93:9a:3a:d9:00:2b:18:61:f9:a2:
fe:a7:2b:aa:5a:22:c0:b4:94:a7:2e:46:6b:60:6a:
97:72:8e:fb:95:58:a2:a9:ee:e5:1f:4a:9a:c8:ab:
6a:43:37:cd:b6:54:af:75:7d:3c:5f:eb:25:46:f2:
26:f9:e4:c9:c6:87:05:7b:48:56:7c:2a:28:d2:c3:
df:95:d9:92:e9:d4:11:fb:a9:5d:4a:31:06:db:c4:
a5:4e:0e:08:94:7b:19:a4:1a:f6:cd:bb:77:44:f9:
d2:2b:22:93:f7:16:11:12:0d:5c:91:ca:6c:35:a0:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DA:C0:70:85:97:47:E4:73:7F:43:D4:0F:A0:9F:D5:74:82:C9:6B
X509v3 Authority Key Identifier:
keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/ItrAcIWXR-Rzf0PUD6Cf1XSCyWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.221.0-185.231.223.255
Signature Algorithm: sha256WithRSAEncryption
40:ef:1d:96:9e:62:3d:94:50:ed:f7:3a:54:cd:9c:a8:61:40:
18:58:ec:21:bf:05:15:6f:fe:e5:93:09:9f:a5:d4:f4:40:2c:
40:f1:8b:57:fa:6d:8a:bb:e5:11:19:43:03:34:42:83:44:68:
63:a3:5b:a5:21:8a:fc:fc:5f:cd:7b:c6:b6:b4:c2:27:8b:ed:
46:16:09:88:0c:bb:45:1d:22:1c:3d:2b:8a:87:49:54:2c:ea:
99:66:91:d2:b3:16:45:9e:14:7f:df:ab:1f:7a:ce:45:71:c6:
86:55:e6:95:a7:73:03:cf:75:33:c6:e8:55:a2:09:10:38:1f:
e0:05:c6:5e:da:5f:7a:14:8c:1e:46:51:3a:c3:fb:55:4b:3e:
69:cf:fc:5e:5f:1a:86:19:62:a8:1d:6f:44:b6:38:18:ea:a7:
1f:e8:c2:9f:3f:e8:88:6f:c0:2e:4c:33:ba:8a:6e:ce:b0:d6:
61:b7:26:cc:aa:8d:72:db:40:95:84:12:aa:ae:ac:6d:73:ba:
19:2a:f1:f3:7f:69:8a:c5:5f:38:78:23:be:1a:e7:49:c5:bb:
5d:78:11:c7:d0:48:d4:28:89:a3:4d:e0:b8:40:a8:3c:21:df:
aa:29:db:74:d6:a8:ad:2e:6a:1b:b9:f9:8d:70:be:bf:6f:1b:
60:7d:0c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:11 2024 by rpki-client on console-ams.rpki-client.org