Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/C0LcNOI40lnJmYVUDPSGiUtWxnI.roa
File: C0LcNOI40lnJmYVUDPSGiUtWxnI.roa (raw, json)
Hash identifier: z0ew941gmvMCyTWVn/E/rVrUfyKa2sD97iMiy3pKGRc=
Subject key identifier: 0B:42:DC:34:E2:38:D2:59:C9:99:85:54:0C:F4:86:89:4B:56:C6:72
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 0187E203A85DD6C28028B978810137E04B46
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/C0LcNOI40lnJmYVUDPSGiUtWxnI.roa
Signing time: Wed 03 May 2023 14:28:23 +0000
ROA not before: Wed 03 May 2023 14:28:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 185.189.35.0/24 maxlen: 24
185.189.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e2:03:a8:5d:d6:c2:80:28:b9:78:81:01:37:e0:4b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: May 3 14:28:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b42dc34e238d259c99985540cf486894b56c672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:b7:17:8e:09:fb:23:1e:9f:4d:1e:d5:ca:
ec:87:75:2f:34:63:09:1a:a2:e6:04:3c:0c:51:58:
f8:c4:d2:74:78:ae:18:08:ff:f1:86:34:ae:8c:69:
5b:c5:06:74:d8:a3:80:96:6d:59:6d:6c:fa:1c:5e:
64:d3:d0:aa:f3:b2:e1:5e:55:4c:8d:6d:f7:f4:0e:
9b:6e:8f:d9:57:17:79:7d:84:6e:d9:ec:2c:8c:24:
ef:58:b5:79:9f:3f:bb:8e:38:01:7a:f2:ef:cd:50:
ec:2f:84:06:c7:30:ec:50:7d:7f:e4:f6:76:33:43:
b8:22:08:66:44:87:ee:28:dc:b4:d2:34:a3:d3:e4:
e5:a6:7e:90:68:52:ee:46:21:13:fd:34:cf:c4:a2:
a2:be:13:15:43:da:41:f0:7c:f0:cb:ae:a8:14:af:
9a:3b:94:19:27:da:74:df:d9:a8:ec:94:61:30:ce:
f4:82:fd:d9:4e:2d:02:2e:99:27:fd:ca:61:3c:12:
fd:b8:88:e8:ff:17:5a:8c:e5:ba:3d:7f:ce:47:4f:
81:41:38:38:bf:c3:2b:54:26:e6:3d:ea:14:e6:e4:
58:74:80:f5:e0:08:a7:2b:b3:21:3b:05:3b:03:0b:
6d:02:f2:dd:b1:a2:d4:77:f5:e4:de:94:49:e8:e3:
f2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:42:DC:34:E2:38:D2:59:C9:99:85:54:0C:F4:86:89:4B:56:C6:72
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/C0LcNOI40lnJmYVUDPSGiUtWxnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.34.0/23
Signature Algorithm: sha256WithRSAEncryption
23:25:aa:4e:3b:9e:19:e8:ac:82:48:de:d3:f1:dc:ef:bc:95:
39:f0:84:09:1f:93:c8:58:9b:a6:d1:17:3a:00:29:5b:30:b6:
9c:c0:97:8d:92:89:9b:e3:8d:62:cc:0f:ac:16:20:9c:10:f3:
e6:98:75:74:5e:98:43:b3:35:ef:af:7f:31:fa:f8:e6:7a:b2:
db:b2:d0:c2:85:c3:2f:b2:00:a9:87:3e:5f:d8:f2:32:f2:c9:
55:ac:a1:4d:12:f3:13:e4:07:57:d2:61:37:9f:13:7e:e1:96:
27:8b:0e:49:d6:d1:71:8e:2b:9b:82:1b:5a:c4:8c:b0:a6:ce:
0c:12:6f:ec:36:5c:88:0e:80:b3:f9:e5:c4:9f:11:b9:93:e2:
1b:d7:83:09:d3:79:fd:44:0c:a1:34:08:67:d7:2c:cd:2d:d1:
0c:3e:47:14:60:2e:05:ea:de:1e:e4:9e:67:42:ae:42:0d:c4:
3e:d9:73:88:3d:45:12:72:9d:90:ae:05:02:f8:11:29:e5:6a:
8a:4e:59:0b:66:f9:cd:2c:10:6a:68:82:84:e2:b7:b2:70:6c:
4f:6d:5b:68:10:d3:9e:d7:33:0d:ca:2b:1e:ef:88:23:65:7c:
c9:3b:c2:0a:fc:5f:ad:5a:52:cf:f5:7b:4e:3d:30:67:8b:73:
df:16:35:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:20 2024 by rpki-client on console-fra.rpki-client.org