Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/wmOySkeDkjFBEKMwv9M7zfhPkyQ.roa
File: wmOySkeDkjFBEKMwv9M7zfhPkyQ.roa (raw, json)
Hash identifier: Bc9eVOrk0j9rLJPqRJ6xr0+hBbP+NmCVVSy/nbhkoAs=
Subject key identifier: C2:63:B2:4A:47:83:92:31:41:10:A3:30:BF:D3:3B:CD:F8:4F:93:24
Certificate issuer: /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Certificate serial: 01856EC20B760A12917603470394049E011B
Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/wmOySkeDkjFBEKMwv9M7zfhPkyQ.roa
Signing time: Sun 01 Jan 2023 19:14:48 +0000
ROA not before: Sun 01 Jan 2023 19:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201026
IP address blocks: 185.85.223.0/24 maxlen: 24
185.85.220.0/24 maxlen: 24
185.85.220.0/23 maxlen: 23
185.85.220.0/22 maxlen: 24
185.85.221.0/24 maxlen: 24
185.85.222.0/24 maxlen: 24
2a05:aec0::/44 maxlen: 44
2a05:aec0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:0b:76:0a:12:91:76:03:47:03:94:04:9e:01:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Validity
Not Before: Jan 1 19:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c263b24a478392314110a330bfd33bcdf84f9324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2f:d3:45:6b:d4:c2:58:3f:a1:19:9a:d6:e1:
41:0c:34:3b:1f:06:b6:30:05:b9:de:25:2d:f6:d9:
d0:06:6a:23:a7:64:ff:ad:33:91:e3:ab:3b:af:80:
65:40:ea:1c:ea:4b:4f:5b:03:54:dd:2e:3e:e7:48:
0f:1d:a0:56:37:30:3e:16:19:e9:d9:da:2f:1a:cd:
13:72:9a:95:b5:1d:df:4a:6a:07:78:b4:a7:92:d4:
4d:3c:27:0c:a3:5f:a4:d0:4a:4d:b6:c0:e6:08:49:
89:97:84:e6:98:09:95:84:0e:93:6b:07:77:70:6a:
99:d1:ec:fd:58:25:ad:26:a1:f5:34:61:37:43:b8:
d9:19:d0:0a:31:83:28:2d:96:3a:94:06:18:87:0f:
c8:74:d7:a1:34:17:19:84:21:c8:80:ad:6c:98:91:
e5:e5:21:ad:4c:e7:99:fd:1d:85:d0:ff:f2:2e:1e:
37:e6:e5:ae:bd:ae:ff:97:7d:9c:01:df:f3:ba:83:
41:43:d0:d0:4a:76:70:23:79:d0:02:30:d1:e3:0b:
dd:70:fe:39:92:94:ac:7f:d5:3e:76:f8:e1:ae:41:
a9:e9:d6:da:e3:ce:43:99:1e:78:91:23:29:aa:f5:
ed:6a:ef:6a:9a:e2:9a:de:18:93:31:c4:28:3c:14:
01:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:63:B2:4A:47:83:92:31:41:10:A3:30:BF:D3:3B:CD:F8:4F:93:24
X509v3 Authority Key Identifier:
keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/wmOySkeDkjFBEKMwv9M7zfhPkyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.220.0/22
IPv6:
2a05:aec0::/29
Signature Algorithm: sha256WithRSAEncryption
a2:70:35:db:dc:e6:27:f5:3c:37:88:91:c8:f1:a9:76:e9:be:
36:39:95:aa:24:e4:26:8a:46:47:c6:35:5c:92:92:0a:a3:7a:
f0:7e:b8:75:df:ea:e0:2d:8a:3a:e6:c3:15:b5:8d:d8:b2:54:
d3:aa:98:00:a5:c0:46:9d:db:c5:d2:30:9d:15:1e:83:6a:cd:
5e:fa:bb:e3:15:eb:47:11:83:59:f7:c1:ec:36:52:88:c0:bc:
1b:33:dc:90:52:fe:c3:ca:1a:c0:7d:da:70:6d:b5:79:08:31:
ab:5e:0b:ff:1a:b5:86:c5:10:2a:75:72:90:0c:8d:be:9d:d7:
9c:21:70:75:b8:2d:d3:c2:3b:47:3c:9b:8e:94:1c:2d:d6:d8:
1d:8e:76:76:f8:5e:43:a3:7e:d5:cb:9c:31:32:9e:54:a9:20:
7e:44:b8:18:4c:c6:26:7e:07:a9:77:8d:9a:b2:f4:27:5a:83:
e7:1a:60:93:5b:23:67:71:d4:44:81:16:49:99:c8:42:1e:f3:
bc:a4:44:cc:2c:fa:b5:46:f4:b5:ac:3d:50:eb:64:cc:b6:db:
b5:03:57:5e:c3:97:f8:2d:3d:d8:5f:0e:ad:73:59:24:59:cb:
3a:af:c5:06:26:48:aa:6e:71:01:9f:fb:40:bc:ff:f1:da:0a:
65:1b:27:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:36 2024 by rpki-client on console-fra.rpki-client.org