Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/2EHWjUjRXncA7ZR8YiBM-Ylbraw.roa
File: 2EHWjUjRXncA7ZR8YiBM-Ylbraw.roa (raw, json)
Hash identifier: xdnJJBtura4wCzVZCgmmB5GL39JKMm1K0cyh/KAHZDI=
Subject key identifier: D8:41:D6:8D:48:D1:5E:77:00:ED:94:7C:62:20:4C:F9:89:5B:AD:AC
Certificate issuer: /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial: 018572CCB32C5D0A5322ADCA6A6912967FA7
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/2EHWjUjRXncA7ZR8YiBM-Ylbraw.roa
Signing time: Mon 02 Jan 2023 14:04:55 +0000
ROA not before: Mon 02 Jan 2023 14:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205272
IP address blocks: 185.221.71.0/24 maxlen: 24
185.221.70.0/24 maxlen: 24
185.221.69.0/24 maxlen: 24
185.221.68.0/24 maxlen: 24
2a06:bcc0:8::/48 maxlen: 48
2a06:bcc0:6::/48 maxlen: 48
2a06:bcc0:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:b3:2c:5d:0a:53:22:ad:ca:6a:69:12:96:7f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Validity
Not Before: Jan 2 14:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d841d68d48d15e7700ed947c62204cf9895badac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:fd:27:9f:3f:fa:b8:07:72:b0:60:09:e0:
5b:37:a5:c7:70:ad:fc:e0:ee:02:0e:d3:5d:7c:1c:
af:ba:59:d7:d3:30:85:1f:c2:2e:bd:bb:24:f6:cf:
76:03:82:50:cc:b9:ae:e9:92:b8:57:fc:c6:24:8e:
77:ca:23:4e:55:5c:f6:cf:4a:4e:ce:0b:00:f2:c2:
c8:11:fc:1f:b2:ae:41:ac:4f:8e:de:ec:70:d2:a7:
ff:40:da:9e:ab:2b:74:bc:b6:9e:11:a0:02:ce:8d:
01:15:b5:7e:fc:8c:ca:9d:be:25:09:38:49:af:30:
24:7f:7a:ae:19:de:a3:70:b3:bc:48:fa:16:8f:cb:
c2:62:9f:ac:f4:cb:51:2c:2a:00:6f:10:85:cd:02:
c1:57:45:a5:01:07:0d:8f:ec:52:7e:91:e2:0c:2a:
68:f7:51:85:f3:a0:b8:24:b1:b9:d6:fe:90:6c:25:
1d:49:5b:20:3f:1b:c7:9a:3b:fd:6c:00:82:25:24:
20:da:83:45:82:fe:1b:e2:41:4b:6f:59:50:14:c0:
ee:e7:90:bf:24:80:f9:35:d7:ba:a3:83:7a:8b:02:
2c:90:bc:11:43:bb:69:51:b3:36:ea:7c:c0:1d:19:
f1:67:70:42:29:a2:31:5b:e8:97:23:dd:bd:e4:ab:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:41:D6:8D:48:D1:5E:77:00:ED:94:7C:62:20:4C:F9:89:5B:AD:AC
X509v3 Authority Key Identifier:
keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/2EHWjUjRXncA7ZR8YiBM-Ylbraw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.68.0/22
IPv6:
2a06:bcc0:6::-2a06:bcc0:8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
82:50:ff:5d:95:d1:3a:80:0d:d5:72:96:c4:08:0f:90:c7:f5:
29:19:11:12:bf:5b:5b:52:43:97:bd:06:f9:d8:df:94:11:3a:
53:d8:49:b8:4d:69:51:39:6d:bc:21:12:0d:66:ae:88:db:5d:
c1:8a:46:cc:49:4e:d2:04:15:60:ce:41:ea:13:d3:d3:8a:2b:
15:ce:ac:67:44:c8:56:b5:33:6c:83:08:53:50:31:6e:ca:a7:
1e:cf:01:9a:de:16:46:74:77:05:00:0b:8b:81:00:d7:d6:02:
fb:16:b8:ae:74:98:21:c5:f9:8b:9c:05:7a:5e:cf:b2:4b:b5:
16:8e:e2:f6:42:e9:6a:32:37:ed:b9:51:d7:92:67:50:c3:41:
05:fb:e4:dd:dc:16:fe:3f:c8:f8:35:d4:0f:e4:b6:ce:31:cf:
70:e1:a3:79:4d:0f:fc:21:87:3a:c0:69:c0:ca:89:ed:55:c9:
5e:99:a4:98:93:5d:c7:89:2a:56:ac:22:4a:04:a0:45:07:27:
0f:ce:67:d1:f1:db:e7:58:dd:66:aa:e6:1d:2e:2c:e0:ba:ac:
ec:01:d4:54:8d:c8:5f:4d:fd:6c:59:b2:1c:17:57:46:d7:0c:
a6:c8:52:ef:11:b4:8c:08:d6:8a:2c:cf:41:03:02:d3:ea:bf:
46:45:b6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:45 2024 by rpki-client on console-fra.rpki-client.org