Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/J1vMz71hCH5AAS_IHuiwpOR_uAs.roa
File: J1vMz71hCH5AAS_IHuiwpOR_uAs.roa (raw, json)
Hash identifier: sPFueoCF676sG62OyWCA+ovUgDaT17rPRwA2rtJ+FHY=
Subject key identifier: 27:5B:CC:CF:BD:61:08:7E:40:01:2F:C8:1E:E8:B0:A4:E4:7F:B8:0B
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 0188F40A9FADB190F6F9E41926FC44366635
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/J1vMz71hCH5AAS_IHuiwpOR_uAs.roa
Signing time: Sun 25 Jun 2023 19:31:56 +0000
ROA not before: Sun 25 Jun 2023 19:31:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206746
IP address blocks: 185.176.100.0/24 maxlen: 24
185.176.102.0/24 maxlen: 24
185.176.103.0/24 maxlen: 24
185.176.101.0/24 maxlen: 24
2a0a:1181::/32 maxlen: 32
2a0a:1183::/32 maxlen: 32
2a0a:1180::/32 maxlen: 32
2a0a:1182::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f4:0a:9f:ad:b1:90:f6:f9:e4:19:26:fc:44:36:66:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Jun 25 19:31:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=275bcccfbd61087e40012fc81ee8b0a4e47fb80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9c:16:5f:db:49:99:7a:ea:9f:e2:dc:71:2f:
d4:f4:00:e6:47:16:4a:94:2e:c6:c5:b9:c2:45:28:
ad:08:2e:f6:2d:b3:d0:4b:dd:0d:5d:94:e7:a9:6a:
29:5c:8b:c1:17:f2:e9:1a:ba:f2:81:12:fa:c6:c1:
fc:49:13:12:ec:84:41:43:dc:d0:7f:23:fe:ec:c8:
d0:33:2e:83:8c:f2:2e:e3:98:8b:2f:7b:26:f2:76:
dd:e1:c5:ff:7e:c7:6c:38:0e:91:a1:1f:70:53:c1:
be:da:6d:52:d5:32:3f:ad:4a:8b:b6:9d:ed:1c:d9:
8a:b7:f6:f5:8e:01:62:02:5a:e8:39:62:f6:07:ef:
aa:e8:c7:86:98:85:34:4a:90:8e:fe:81:da:e5:72:
dc:52:ca:99:c6:0a:11:41:0f:d1:56:30:28:9d:07:
11:32:fe:74:1a:3c:72:07:9e:e5:29:b1:dd:ad:fd:
3c:40:3a:ae:40:27:4c:b3:de:62:e4:cc:6d:e4:34:
e9:56:82:7d:d4:5e:09:d1:a8:96:23:78:4e:65:08:
38:ed:4e:9b:ab:15:56:9b:a7:cf:71:44:51:e2:b4:
ec:2f:bf:2d:d9:dd:91:cd:86:fc:42:cb:5b:bb:ec:
f6:eb:8e:3f:33:9b:4b:f6:5a:4e:d5:8a:61:36:fc:
61:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5B:CC:CF:BD:61:08:7E:40:01:2F:C8:1E:E8:B0:A4:E4:7F:B8:0B
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/J1vMz71hCH5AAS_IHuiwpOR_uAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.100.0/22
IPv6:
2a0a:1180::/30
Signature Algorithm: sha256WithRSAEncryption
50:31:39:9f:d9:44:30:3d:f2:7b:42:d1:2b:55:8a:6c:af:ac:
d4:04:da:0a:00:07:75:70:5e:53:55:c5:aa:ad:10:14:6d:49:
c3:17:c0:4d:86:54:39:cb:c3:d7:14:83:ec:7f:2e:a0:81:3a:
30:bf:d6:5d:67:73:d7:b0:d9:3c:5c:5e:07:11:f8:87:ba:19:
4b:cd:a3:24:3b:35:9f:a2:12:04:c5:a9:45:9c:c2:87:ca:df:
70:ce:55:f4:27:c4:59:31:d9:cc:d6:44:e3:75:3e:63:19:98:
46:af:96:0d:9a:f1:76:0f:ca:24:fd:f7:5b:0b:bd:56:9f:41:
83:56:5d:9e:49:8a:9d:1f:22:1b:17:75:55:ed:a6:f9:1b:3f:
a6:28:89:dc:cc:ea:07:d5:1d:39:c0:7d:fc:e5:43:08:fa:f0:
c9:d2:b7:60:64:80:65:5d:25:69:9b:72:9e:84:7f:5e:2a:c4:
3e:85:99:0a:22:da:3e:40:84:41:f5:0f:7b:be:5c:d2:8f:e1:
59:af:b0:66:c3:d6:df:06:99:f6:41:0b:f9:cb:8d:1f:c1:84:
50:b4:2a:aa:46:ad:7b:fc:c9:ee:62:43:48:f9:02:ab:3d:e8:
d7:61:cb:a9:54:a5:e3:cc:81:4d:1f:3d:d4:51:86:f2:28:95:
ff:4b:9e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:02 2024 by rpki-client on console-ams.rpki-client.org