Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/fdyEVU_7uW0igfjmmO-QWVFZbIo.roa
File: fdyEVU_7uW0igfjmmO-QWVFZbIo.roa (raw, json)
Hash identifier: u+9X4VWrrsGMs4+PGxDi/mjgNnkLsKbmHvEmYs7SCGw=
Subject key identifier: 7D:DC:84:55:4F:FB:B9:6D:22:81:F8:E6:98:EF:90:59:51:59:6C:8A
Certificate issuer: /CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Certificate serial: 01856E14485FCD85CD92999AFEBA0885C86F
Authority key identifier: 93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/fdyEVU_7uW0igfjmmO-QWVFZbIo.roa
Signing time: Sun 01 Jan 2023 16:05:01 +0000
ROA not before: Sun 01 Jan 2023 16:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42989
IP address blocks: 185.231.4.0/24 maxlen: 24
185.231.7.0/24 maxlen: 24
2a0c:3500:2::/48 maxlen: 48
2a0c:3500::/48 maxlen: 48
2a0c:3500:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:48:5f:cd:85:cd:92:99:9a:fe:ba:08:85:c8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Validity
Not Before: Jan 1 16:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ddc84554ffbb96d2281f8e698ef905951596c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:70:30:e7:c5:17:c4:1d:2f:d6:b3:2b:02:31:
e6:28:5d:b2:8d:53:f1:12:7e:e4:df:cf:6e:9c:13:
02:29:d6:1a:ff:fb:c3:3b:c2:b9:25:69:5c:a9:ed:
43:c1:99:9d:32:6a:88:73:e8:8b:e5:e4:3e:e3:6d:
4d:b5:09:14:49:a9:41:38:f9:97:64:b5:dd:cf:92:
1b:c5:f8:17:98:46:35:01:f3:a5:b6:1d:5d:9c:4a:
a8:29:b6:af:61:66:77:dc:9e:87:64:10:44:65:e5:
d9:6b:54:51:b3:1a:2d:86:e7:45:50:a3:f0:25:c5:
e3:58:b2:d4:5e:17:6d:d1:6c:67:81:29:69:10:a3:
a1:b5:82:23:85:2b:6b:ad:80:d7:93:ea:b8:f7:aa:
83:07:a2:aa:83:b8:60:52:04:04:e0:79:f5:fd:c2:
71:a6:7e:9d:be:5f:15:4c:d9:85:14:3f:9a:43:45:
bf:33:93:18:7a:db:0d:cb:0e:ee:29:0e:1d:e5:f9:
dc:aa:d2:4e:9e:99:d3:e9:dc:71:0c:7a:a8:df:c6:
7c:f9:f8:6f:65:eb:48:c8:e1:cf:f6:5a:59:86:18:
f0:2b:04:85:7f:65:ae:d8:88:52:af:99:5e:ff:0e:
30:1f:54:88:f1:e1:62:65:23:09:0d:72:2b:fd:33:
5d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DC:84:55:4F:FB:B9:6D:22:81:F8:E6:98:EF:90:59:51:59:6C:8A
X509v3 Authority Key Identifier:
keyid:93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/fdyEVU_7uW0igfjmmO-QWVFZbIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.4.0/24
185.231.7.0/24
IPv6:
2a0c:3500::/48
2a0c:3500:2::/47
Signature Algorithm: sha256WithRSAEncryption
6a:84:61:75:26:8c:91:50:65:a6:00:90:3a:c8:84:8e:7e:7c:
26:9f:6c:16:10:f2:7f:eb:88:fc:a6:da:5e:57:c1:5f:35:0c:
bd:a5:ce:79:cc:82:8e:2d:af:b0:19:1a:d0:8f:19:da:ac:0c:
09:c3:cc:3b:ea:07:86:39:59:44:13:5c:7d:dd:8b:cf:d0:72:
3c:7e:d8:e8:9a:27:0a:db:bc:05:6a:7f:77:b8:24:d3:30:16:
c7:66:78:ae:d1:06:c8:65:3a:cd:d9:c6:a2:95:85:ba:ca:4c:
28:22:4b:ae:65:52:19:58:03:88:c0:01:06:fa:53:d8:2b:3f:
36:3b:7a:45:5f:9e:41:25:9b:e1:f2:ae:f0:5d:3a:9f:54:87:
8a:c1:c3:f7:31:1e:27:22:f6:56:1c:c4:92:e0:2e:77:5d:ae:
4f:f3:b5:87:df:a7:ff:14:1f:a9:28:43:d6:2e:7e:bb:17:ca:
21:e3:81:4b:60:da:7d:d2:4b:bc:d4:ed:de:32:5b:c3:8e:8b:
c5:52:2d:e7:02:59:9e:18:52:7a:a6:d9:4a:05:c7:af:b4:71:
90:55:c6:25:ad:8b:bd:38:0c:6d:95:f9:bb:a0:54:20:b4:f6:
d8:ac:a4:19:d3:fc:a7:a8:fe:fa:67:8e:e5:d8:5a:dc:41:d2:
d0:b1:47:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:48 2024 by rpki-client on console-ams.rpki-client.org