Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/3UrvjHQnX7dAPkOdr2OpJP02CXo.roa
File: 3UrvjHQnX7dAPkOdr2OpJP02CXo.roa (raw, json)
Hash identifier: i9KbTu440cZxzhwInnsD1QR2Ce9QMrqKPT9q1gV32vs=
Subject key identifier: DD:4A:EF:8C:74:27:5F:B7:40:3E:43:9D:AF:63:A9:24:FD:36:09:7A
Certificate issuer: /CN=c0f0ee9842627031eca264dac65e5fef63943f98
Certificate serial: 018571151B204929F1C70B5FCE9F71EC26B0
Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/3UrvjHQnX7dAPkOdr2OpJP02CXo.roa
Signing time: Mon 02 Jan 2023 06:04:46 +0000
ROA not before: Mon 02 Jan 2023 06:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28952
IP address blocks: 185.103.144.0/22 maxlen: 22
90.176.0.0/19 maxlen: 19
90.176.13.0/24 maxlen: 24
2a06:2c40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:1b:20:49:29:f1:c7:0b:5f:ce:9f:71:ec:26:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98
Validity
Not Before: Jan 2 06:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd4aef8c74275fb7403e439daf63a924fd36097a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:ee:af:66:e6:8e:e1:ee:7d:03:d5:c9:1e:
e1:ae:29:66:fc:48:66:98:d8:1d:be:30:e8:dd:9f:
44:57:cd:28:94:70:3b:89:58:b6:8b:4e:ed:32:99:
84:c8:53:bc:15:b7:ae:31:9e:ff:16:d3:93:15:37:
b9:e8:98:de:fa:f8:bd:a1:0a:8b:3a:b3:0b:c2:63:
76:82:fb:eb:66:83:3d:9f:af:23:c8:d1:e0:de:be:
2d:49:d9:6b:9d:ea:db:9d:04:22:a2:26:f2:60:70:
f3:63:cb:4a:86:17:f4:64:87:a2:5c:5e:28:48:5a:
2f:e1:bb:6c:b0:34:76:2f:2f:a7:9f:de:a2:4f:c1:
58:ee:44:7b:fb:45:89:cf:ee:3d:7c:a0:fd:93:95:
f5:5b:59:25:78:35:50:0f:34:47:df:3e:71:56:ac:
7f:4c:98:3c:40:e0:fd:8f:d4:76:9b:c7:02:e6:b1:
6a:04:75:2f:59:c8:7d:98:b6:c8:ef:df:53:31:39:
a1:6a:6a:0d:dd:0b:f5:d0:a1:cd:8a:1e:46:45:4a:
3f:9d:d1:e4:46:8e:b4:92:51:e4:7a:fc:ae:97:6a:
71:fd:da:25:30:87:d7:d3:cc:00:a5:2d:fc:c2:0e:
52:16:59:97:6e:17:82:65:4d:69:72:a7:5b:f9:48:
3f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4A:EF:8C:74:27:5F:B7:40:3E:43:9D:AF:63:A9:24:FD:36:09:7A
X509v3 Authority Key Identifier:
keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/3UrvjHQnX7dAPkOdr2OpJP02CXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.176.0.0/19
185.103.144.0/22
IPv6:
2a06:2c40::/29
Signature Algorithm: sha256WithRSAEncryption
78:4c:b6:61:6d:bf:a8:62:b0:20:ae:4b:cf:dc:fc:f5:49:b3:
23:95:6f:01:7a:9c:3c:bb:1f:7a:08:03:55:7e:b9:22:28:c5:
9c:64:04:26:72:d2:e5:f8:e5:5b:55:c7:dd:78:49:3c:d3:84:
90:d8:3c:1d:5e:f5:9e:1a:87:b7:4a:a1:50:05:59:9d:91:6f:
cb:71:19:49:06:53:1f:fe:a7:58:93:1a:e5:4b:9f:d9:c3:bc:
76:8e:a5:98:22:50:f1:7f:d9:6e:c1:95:61:e2:f2:dd:cf:0f:
f8:f7:83:08:bf:89:50:0d:1f:06:6e:01:ed:95:9a:21:12:af:
66:41:08:96:32:30:22:46:87:54:33:be:67:8e:cf:f2:81:75:
eb:d9:df:e2:ad:49:19:0a:4f:22:f6:56:fb:d4:84:19:25:42:
e4:df:88:4d:9f:83:00:da:ca:28:cf:49:0a:ab:e8:9b:e8:df:
3f:75:ec:38:cb:96:7b:10:53:7d:42:22:7a:5d:24:47:d2:fe:
55:10:84:09:0c:f4:ef:1c:9f:b4:02:9f:9b:50:c2:64:0b:a1:
04:05:79:50:29:35:e0:1c:68:1f:dc:66:29:7b:d0:95:3a:1c:
fc:cc:5b:14:ba:38:0a:6a:d0:69:11:f7:13:de:9e:2e:4a:7c:
a1:c2:2c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:44 2024 by rpki-client on console-fra.rpki-client.org