Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/buI6Yotsewi3bzi7_WtQd5ZRhLM.roa
File: buI6Yotsewi3bzi7_WtQd5ZRhLM.roa (raw, json)
Hash identifier: 0HzOejJr0BJMTLRs/yzwkJdCWV2jr4TMw02xI608rzU=
Subject key identifier: 6E:E2:3A:62:8B:6C:7B:08:B7:6F:38:BB:FD:6B:50:77:96:51:84:B3
Certificate issuer: /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Certificate serial: 018570CBD6F14D258E0F770D675047E13A98
Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/buI6Yotsewi3bzi7_WtQd5ZRhLM.roa
Signing time: Mon 02 Jan 2023 04:44:45 +0000
ROA not before: Mon 02 Jan 2023 04:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201211
IP address blocks: 185.73.16.0/22 maxlen: 22
193.178.118.0/24 maxlen: 24
185.82.24.0/22 maxlen: 22
2a05:3e80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:d6:f1:4d:25:8e:0f:77:0d:67:50:47:e1:3a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Validity
Not Before: Jan 2 04:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ee23a628b6c7b08b76f38bbfd6b5077965184b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:98:5c:8d:5e:bb:7e:19:c5:24:ba:88:14:
1b:22:d1:eb:a2:8c:6a:1d:ce:ca:e0:0e:78:5c:8c:
db:17:fe:0c:d3:41:75:ce:2d:0e:96:15:55:7e:6d:
54:d0:6b:bb:82:bf:37:4b:43:ef:09:f1:68:03:06:
da:1a:4f:b6:0c:07:be:34:20:4c:1d:27:8a:a7:2e:
d3:3d:89:de:7f:71:ad:e3:63:b1:95:60:45:ad:48:
00:66:15:cb:70:3f:f0:5b:93:b5:ab:4b:93:51:41:
14:8d:46:12:38:23:56:85:a4:d4:a7:d3:05:dc:b3:
ae:70:9f:27:b1:52:68:75:2e:fd:8e:46:3e:c0:99:
de:b3:5b:b9:59:1d:47:b5:97:c8:95:f6:1d:2c:96:
d8:00:e3:20:78:7d:3e:22:42:88:31:c8:e5:b4:1a:
09:dd:94:40:bf:fe:1e:31:ef:89:3b:eb:2f:c4:dd:
d5:b9:a3:6b:8f:f6:83:18:f8:2b:ef:39:1f:30:4f:
7e:13:f7:ff:12:7f:05:bd:8a:dd:26:39:aa:d1:7c:
fa:51:54:7b:5a:61:40:cf:a0:6f:67:60:a6:b2:41:
3e:ba:03:6b:14:a8:69:31:de:93:6c:d1:d3:41:6e:
cb:0c:d8:78:38:79:ed:e4:56:9c:67:d7:7a:dd:bc:
51:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E2:3A:62:8B:6C:7B:08:B7:6F:38:BB:FD:6B:50:77:96:51:84:B3
X509v3 Authority Key Identifier:
keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/buI6Yotsewi3bzi7_WtQd5ZRhLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.16.0/22
185.82.24.0/22
193.178.118.0/24
IPv6:
2a05:3e80::/29
Signature Algorithm: sha256WithRSAEncryption
38:b6:70:96:33:aa:be:63:2c:e1:07:55:a2:dd:d5:69:17:78:
89:f2:47:53:34:51:cf:a3:32:db:88:cf:a0:fb:49:e8:40:bf:
ef:27:3e:5d:33:ee:1a:e1:bc:45:c9:9b:cd:3e:63:37:27:06:
0b:93:29:22:33:f4:a2:32:32:8e:d6:f9:92:0a:20:9e:b7:9c:
a5:c3:fc:81:ca:73:33:88:9e:e3:32:03:b6:72:85:48:7c:00:
ce:84:77:14:0f:fc:3e:31:d3:4d:fa:13:5a:bc:af:dc:e6:19:
68:a5:b0:08:94:b5:f6:1b:1d:73:20:ab:1c:e4:b0:81:da:18:
c3:60:a2:c0:f9:36:e1:09:18:1b:35:1b:e4:32:9d:63:1f:d3:
13:d9:b2:19:34:90:ae:f2:54:c1:95:2a:50:cd:ee:7b:74:44:
ef:8e:d3:c5:64:76:de:ef:6b:95:c6:e2:af:0d:70:cf:43:66:
6c:ca:8b:d6:fd:3b:b3:7c:e3:95:19:89:26:3e:a5:43:2c:09:
6b:20:84:91:f1:22:29:81:56:c8:81:66:90:44:e1:c5:45:27:
c7:2c:17:8c:11:32:7d:ab:b5:17:b0:f4:de:d9:d0:47:56:17:
a4:4d:1f:d0:0d:7d:a5:c2:62:45:c7:99:5c:b0:7b:9d:be:59:
dc:4c:25:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:56 2024 by rpki-client on console-fra.rpki-client.org