Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/PAssIfI7JsU_HWspvoARMebRyPk.roa
File: PAssIfI7JsU_HWspvoARMebRyPk.roa (raw, json)
Hash identifier: NoopSDFxOiGPtn2BIkLLHMIRahdewnvHLkru0rFpNFY=
Subject key identifier: 3C:0B:2C:21:F2:3B:26:C5:3F:1D:6B:29:BE:80:11:31:E6:D1:C8:F9
Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial: 018CC2DB003469A81626E978D56BAF7C87B0
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/PAssIfI7JsU_HWspvoARMebRyPk.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42106
IP address blocks: 185.231.222.0/24 maxlen: 24
185.231.223.0/24 maxlen: 24
185.231.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 08:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:00:34:69:a8:16:26:e9:78:d5:6b:af:7c:87:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c0b2c21f23b26c53f1d6b29be801131e6d1c8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:03:aa:18:f3:d3:8b:d1:d0:d1:c7:06:b3:
fe:29:76:49:cf:92:f3:7e:1d:97:ef:67:07:2f:0c:
71:74:be:a5:bb:45:88:1f:06:fb:19:d0:43:bf:eb:
a8:29:db:39:39:3f:88:10:b8:89:b1:46:70:36:cf:
37:48:d8:2d:88:78:4e:31:7e:3b:e2:a3:ba:3b:99:
72:26:2d:a7:46:b2:7d:50:61:bb:95:08:c8:16:35:
09:e4:ff:5b:1a:3a:87:13:a0:b6:1f:30:bc:08:f2:
3e:6f:d4:16:f4:c7:32:05:c2:97:f1:97:9f:43:27:
8e:fb:45:80:90:35:bc:6b:08:b8:ef:26:c9:27:77:
7f:0a:a6:00:ff:91:0c:ac:40:ce:c1:c0:36:6b:49:
52:b8:9b:f7:0a:7c:16:49:3b:ce:fb:43:ed:d7:12:
0b:78:4a:f7:b9:be:0a:75:a2:b4:86:24:a1:2a:d4:
56:c1:dc:60:5a:3b:40:10:55:12:a1:dc:c3:a6:75:
d8:f3:a7:cc:5d:c8:87:ce:bf:03:15:f5:8c:8a:ee:
a8:69:b0:3a:5d:99:97:68:26:be:81:40:44:24:46:
fe:c2:02:18:dd:55:f5:fb:ab:20:0c:df:c9:b6:88:
fe:08:76:c0:1f:6c:ff:3b:44:02:41:1b:a9:44:65:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0B:2C:21:F2:3B:26:C5:3F:1D:6B:29:BE:80:11:31:E6:D1:C8:F9
X509v3 Authority Key Identifier:
keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/PAssIfI7JsU_HWspvoARMebRyPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.221.0-185.231.223.255
Signature Algorithm: sha256WithRSAEncryption
20:b2:4f:59:0c:7e:56:6f:16:94:59:01:e4:f7:b9:cf:b0:58:
f3:1e:b2:25:6f:93:87:57:1b:55:c5:eb:3e:3c:6f:d1:4d:84:
67:9e:ef:50:fc:53:f6:9d:08:7f:24:98:73:49:01:87:57:f0:
5f:5a:bc:99:a6:48:b5:0e:6f:50:ae:90:ab:55:51:8f:e2:b3:
2f:bf:7d:b5:74:bf:a1:6b:d8:bc:ba:bc:12:7a:d1:7d:60:b4:
19:bf:a8:2f:75:ea:93:35:34:4d:19:3d:8b:2b:76:f7:0d:ad:
78:31:b5:05:21:4e:40:04:bd:12:70:02:61:8d:87:5a:a9:93:
e5:56:c3:2e:04:d2:57:03:ae:9d:d8:a7:fb:30:ff:71:65:31:
a7:db:37:c9:f3:83:57:f9:1d:fa:c1:e0:23:d3:8e:b7:5e:1d:
0d:f0:34:9d:29:f2:67:9d:26:60:cb:87:ec:b9:37:d8:42:82:
12:18:57:2d:5b:78:65:49:37:59:c4:b7:4b:ec:38:04:1d:c9:
f7:b5:ff:73:88:2c:29:5b:6f:d4:8a:b4:d2:c7:80:93:18:66:
22:4d:f5:77:9b:0d:64:55:91:e4:4c:bf:7d:97:aa:66:6a:15:
be:a5:f2:f9:f0:18:12:fe:8d:a5:0f:3d:f8:e8:bf:6c:a0:cc:
b5:a4:fe:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:54 2024 by rpki-client on console-fra.rpki-client.org