Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/guIp82dnA8RDWCNq8qDkFueZYbc.roa
File: guIp82dnA8RDWCNq8qDkFueZYbc.roa (raw, json)
Hash identifier: uZWfTaFStVLpLLiZWL14NloO14ta+SWfHCSbbEzP/X4=
Subject key identifier: 82:E2:29:F3:67:67:03:C4:43:58:23:6A:F2:A0:E4:16:E7:99:61:B7
Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial: 01857183224F68A9FE7EF0782C94901B5442
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/guIp82dnA8RDWCNq8qDkFueZYbc.roa
Signing time: Mon 02 Jan 2023 08:04:57 +0000
ROA not before: Mon 02 Jan 2023 08:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210776
IP address blocks: 185.242.220.0/24 maxlen: 24
185.242.222.0/24 maxlen: 24
185.242.221.0/24 maxlen: 24
185.242.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Aug 2023 20:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:22:4f:68:a9:fe:7e:f0:78:2c:94:90:1b:54:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
Validity
Not Before: Jan 2 08:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82e229f3676703c44358236af2a0e416e79961b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b5:d3:2c:cb:d4:18:ba:00:77:b0:9c:08:ad:
9a:da:d3:99:e0:0a:17:06:f9:3c:ab:02:80:d5:5e:
79:af:b6:71:46:ee:03:95:75:9d:d8:ba:85:07:eb:
b0:36:3a:a6:46:09:38:b8:8b:5c:3b:56:63:33:0a:
16:72:fc:eb:52:db:69:f7:3c:9e:97:3c:de:2c:62:
6c:e7:c0:d2:d1:e5:46:d4:03:b8:08:bc:2c:44:90:
14:48:14:22:e7:0d:96:e7:55:b3:fd:37:7b:0b:ac:
a6:c5:c1:3e:a2:e7:13:01:a9:5c:6b:77:f8:e0:e6:
39:73:9c:6b:a6:fc:ac:60:c2:7e:d2:86:d5:39:c4:
87:43:db:14:d7:c6:b9:dd:31:0a:77:73:c1:2f:d7:
94:3c:4d:0b:fa:7f:cd:9f:a6:87:0d:30:cc:41:a9:
dd:b2:b0:a7:0b:86:e4:9e:c2:b2:de:c6:b1:29:97:
d1:78:c1:11:91:fd:b3:e6:69:bd:61:b9:e3:83:a6:
5d:90:3c:cc:2b:ce:25:b1:74:ef:4d:06:73:e1:bd:
5b:38:d7:91:f2:f1:5c:74:96:0d:32:b4:a5:a2:14:
bf:fe:b0:e8:22:ea:1c:cb:fe:82:1d:18:05:82:11:
9c:66:6e:e7:c8:3b:49:72:d2:3c:1d:19:c2:d3:39:
5e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E2:29:F3:67:67:03:C4:43:58:23:6A:F2:A0:E4:16:E7:99:61:B7
X509v3 Authority Key Identifier:
keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/guIp82dnA8RDWCNq8qDkFueZYbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.220.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:e9:12:42:ba:47:80:70:ad:2a:8a:ee:94:a4:bd:08:d1:0a:
d5:1f:4f:17:51:6e:51:c3:16:76:0c:7b:a3:a6:46:85:93:50:
2b:97:91:ef:f6:51:45:42:d7:d7:7a:7c:7e:e8:e9:f6:70:5f:
eb:86:71:75:52:75:ea:37:e4:65:92:9b:6f:74:7d:69:00:c3:
a1:a8:1b:64:f1:57:fb:90:ed:32:2b:21:ef:34:39:2c:5c:1b:
44:b7:b4:0c:64:c6:ea:a4:09:c0:c2:8d:e6:fe:17:1c:b9:04:
e3:9e:52:37:9d:4d:cf:e9:f3:df:3a:b7:06:fa:d7:5d:70:41:
21:68:ba:c0:f6:de:c4:f2:17:80:41:dd:34:c1:87:28:61:38:
4e:11:1f:cb:22:c7:02:5e:81:36:af:55:12:12:55:c9:a7:39:
ec:30:a7:7c:56:20:3b:18:29:cf:6e:0e:18:1e:1f:7b:23:f1:
d5:4f:9c:8e:11:6c:79:c5:dd:54:16:a6:db:ae:eb:ed:12:ae:
fc:3d:87:eb:c5:be:13:5c:b0:eb:20:a9:ad:97:3b:2f:c4:8a:
3c:27:e2:54:3f:0b:8f:3e:e3:6a:68:d4:32:01:fd:63:83:c0:
8c:9c:fa:03:19:52:df:49:55:2e:4b:ff:50:59:4c:d0:9d:1b:
ab:59:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:03 2024 by rpki-client on console-ams.rpki-client.org