Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/wHbK0_6rqgm3vtcj_Ivgkhx8DUk.roa
File: wHbK0_6rqgm3vtcj_Ivgkhx8DUk.roa (raw, json)
Hash identifier: aovOWHf/5FEqOE+BKpOKzj0I5llPeRjDxuxI6auUqgc=
Subject key identifier: C0:76:CA:D3:FE:AB:AA:09:B7:BE:D7:23:FC:8B:E0:92:1C:7C:0D:49
Certificate issuer: /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Certificate serial: 0186A76B210B098088E072512482C1C40287
Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/wHbK0_6rqgm3vtcj_Ivgkhx8DUk.roa
Signing time: Fri 03 Mar 2023 12:21:01 +0000
ROA not before: Fri 03 Mar 2023 12:21:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212538
IP address blocks: 185.180.30.0/24 maxlen: 24
185.180.31.0/24 maxlen: 24
185.180.28.0/24 maxlen: 24
185.180.29.0/24 maxlen: 24
185.34.128.0/24 maxlen: 24
185.34.129.0/24 maxlen: 24
185.34.130.0/24 maxlen: 24
185.34.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a7:6b:21:0b:09:80:88:e0:72:51:24:82:c1:c4:02:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Validity
Not Before: Mar 3 12:21:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c076cad3feabaa09b7bed723fc8be0921c7c0d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5b:f3:bd:74:cd:0a:51:f4:e0:c6:67:ee:d2:
19:df:66:65:4e:c1:95:e4:e0:6b:f4:1f:0c:40:b5:
e6:01:e4:27:f5:74:5a:94:49:4a:de:c0:b9:13:72:
bc:7b:a3:5e:f7:19:2c:60:07:f4:39:6a:17:76:29:
46:47:68:80:a0:42:f4:22:39:00:4d:eb:c4:2f:b8:
19:e2:70:56:fe:e4:43:1d:7c:1a:4e:f8:1b:bd:f9:
a5:5e:d3:98:a3:da:6d:9f:f5:14:55:5e:ff:9e:e2:
02:56:32:81:a6:49:97:85:3b:a5:fb:86:e0:ef:b2:
e4:ca:4a:ff:52:da:41:d4:d2:69:41:f8:21:50:fd:
a7:f4:31:5c:69:37:a5:15:78:29:44:c4:99:3c:87:
08:00:68:94:01:6f:fd:90:84:84:02:5c:33:f7:e5:
2f:c9:23:f1:4d:44:d9:31:68:46:ee:b8:e0:83:58:
04:0c:81:c2:87:30:f4:15:ad:6d:78:c8:5a:84:c4:
43:54:62:29:0a:b1:57:cd:99:d0:e7:ac:f7:d3:3f:
aa:51:b2:e8:85:1e:37:ab:1a:b7:47:c2:0c:9d:76:
f1:5c:4b:da:8f:6f:df:75:52:bd:3a:2d:b9:6a:89:
f9:77:66:e2:77:18:d2:b0:b5:b3:5c:d2:d4:50:f3:
b0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:76:CA:D3:FE:AB:AA:09:B7:BE:D7:23:FC:8B:E0:92:1C:7C:0D:49
X509v3 Authority Key Identifier:
keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/wHbK0_6rqgm3vtcj_Ivgkhx8DUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.128.0/22
185.180.28.0/22
Signature Algorithm: sha256WithRSAEncryption
44:68:23:51:b1:52:9c:6f:04:25:79:66:97:cd:c9:ce:50:f2:
49:7c:6a:c0:df:54:0a:86:45:fb:8e:97:8e:4a:e8:89:8e:83:
9b:4a:e0:d2:f1:d3:99:f7:eb:f7:7a:19:45:54:d2:98:88:eb:
ab:4c:10:17:c3:37:c3:9b:07:df:76:0d:5c:71:c5:e1:7c:57:
f5:4d:fe:d1:c3:f7:07:3c:c0:75:ff:c9:60:6a:00:8e:9c:a5:
31:d7:d1:3d:61:45:5d:3d:1b:d0:42:56:9c:05:a8:07:d5:e8:
51:8d:3b:e1:03:ee:64:5c:f9:c4:84:ca:06:70:56:bc:68:9f:
62:10:4e:fd:42:91:08:d4:a4:c9:82:de:27:01:97:6d:81:91:
10:d1:cc:a9:d6:47:66:cc:0e:4f:c5:85:e4:d2:43:d2:d9:30:
24:1d:50:4b:5e:d5:fa:f9:6b:81:89:2d:cc:34:6c:a6:05:cc:
5c:47:a0:14:69:ed:27:77:a1:b9:87:1a:a9:19:68:3c:79:66:
23:30:dc:29:d1:a2:c8:bf:2a:bc:0e:48:26:97:2a:01:c8:bc:
12:37:68:f3:36:6a:75:a7:9b:72:21:b5:21:07:e1:ee:57:19:
f9:4f:f4:97:a6:f2:3e:4e:37:ed:fd:3a:e3:eb:a7:6a:b9:59:
05:db:b4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:08 2024 by rpki-client on console-ams.rpki-client.org