Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/1-0vm0-Tn6H8zxp5tKFI-ldCWCBI.roa
File: 1-0vm0-Tn6H8zxp5tKFI-ldCWCBI.roa (raw, json)
Hash identifier: itI0JlQDsFRvfTgoSczv4vmIYDZvgK4yT9CfGdOcvdI=
Subject key identifier: FB:4B:E6:D3:E4:E7:E8:7F:33:C6:9E:6D:28:52:3E:95:D0:96:08:12
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 0191C638471EFD6FB2E7B5946937B89FD8F6
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/1-0vm0-Tn6H8zxp5tKFI-ldCWCBI.roa
Signing time: Fri 06 Sep 2024 07:24:22 +0000
ROA not before: Fri 06 Sep 2024 07:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12426
IP address blocks: 185.28.144.0/22 maxlen: 22
185.69.48.0/22 maxlen: 24
217.145.192.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 13 Nov 2024 11:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:38:47:1e:fd:6f:b2:e7:b5:94:69:37:b8:9f:d8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Sep 6 07:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb4be6d3e4e7e87f33c69e6d28523e95d0960812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:09:bf:80:05:9f:e2:d9:b7:55:46:ee:31:
01:cf:fe:0d:69:12:3c:c3:a4:02:65:58:90:3b:18:
9b:13:30:2c:a9:6e:f7:a5:b1:81:03:a4:e3:f2:39:
78:41:9b:95:1e:f2:a6:62:53:86:86:96:54:30:69:
36:14:0c:f6:f2:e8:bc:23:bf:9a:c7:b2:56:d4:e4:
98:ec:d1:71:06:73:32:46:5a:f3:55:39:5e:de:a1:
22:f2:f1:f9:9b:b4:87:e9:ff:63:e7:97:b4:be:4e:
ab:1f:04:ba:bf:dd:e5:77:76:05:67:b4:5a:3e:43:
67:98:67:8d:3d:ae:7d:3c:1c:2f:e7:ed:8e:b7:00:
ab:6a:e6:e5:9a:ec:2a:81:8f:db:52:89:02:0d:60:
1c:1f:59:34:d2:af:12:de:66:e2:bf:86:e8:40:67:
f6:41:12:70:a2:ed:72:be:29:16:7e:cc:6d:83:99:
79:fd:71:b8:15:81:60:e6:b1:95:62:c0:c7:db:44:
46:b2:ef:26:41:d6:47:10:5c:38:25:20:b4:ed:0e:
3b:38:91:b1:0f:ba:bd:06:44:26:7e:d8:b1:06:97:
c2:0d:67:3e:e6:c9:c8:9e:f6:32:03:a4:81:0d:97:
ed:93:43:e0:2f:b2:de:2c:db:af:f7:eb:b6:4a:02:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4B:E6:D3:E4:E7:E8:7F:33:C6:9E:6D:28:52:3E:95:D0:96:08:12
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/1-0vm0-Tn6H8zxp5tKFI-ldCWCBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.144.0/22
185.69.48.0/22
217.145.192.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:c1:ec:ac:6a:ce:75:59:d8:57:41:5a:64:c9:80:ec:2a:af:
14:6b:03:1d:aa:b1:dc:fd:b1:68:7d:97:e4:73:65:5a:43:73:
8a:2e:de:18:4a:dd:1b:12:73:31:48:5d:1c:e6:aa:fa:8c:a7:
0e:10:d0:d9:02:4e:aa:98:0f:f0:2f:f3:f1:65:74:83:bb:6c:
89:12:22:ec:2f:ab:2c:7c:2f:0c:20:82:4b:5a:9e:7e:bd:2c:
0f:bc:f7:13:3b:d9:69:eb:08:15:7a:a0:da:d5:45:95:14:0d:
63:ab:3f:23:be:d1:93:7d:b1:ef:21:12:4b:1d:9f:d2:59:58:
67:e8:ac:04:bf:59:8e:49:23:d8:8b:fe:8f:a9:f5:65:83:4a:
2c:4c:3e:3d:34:18:74:d0:05:81:ac:fb:66:53:78:c5:2d:73:
de:4c:19:36:67:1a:9c:60:28:8d:e3:18:64:bd:a6:f8:4a:6f:
a5:d6:32:f2:29:a2:2f:c5:fb:a6:93:79:aa:aa:a3:70:38:21:
0a:38:55:fd:60:3b:4d:df:75:ec:80:5c:d2:94:0a:4e:b0:f4:
6d:57:e8:af:6d:b0:55:14:ea:b2:fe:f0:64:59:b2:d4:81:da:
17:19:f6:ca:66:fb:ea:3b:f0:00:01:c0:f9:87:07:47:42:db:
e3:ba:15:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 13 13:01:08 2024 by rpki-client on console-fra.rpki-client.org