Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/c0zdezgWZuo-P-XyQNrkGbuJLRE.roa
File: c0zdezgWZuo-P-XyQNrkGbuJLRE.roa (raw, json)
Hash identifier: aTBazYMP5TkIW3GYZ77ncD0xscwfqDDAucVUxZ62GCs=
Subject key identifier: 73:4C:DD:7B:38:16:66:EA:3E:3F:E5:F2:40:DA:E4:19:BB:89:2D:11
Certificate issuer: /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Certificate serial: 0185723A4060AE18B7ACBE418A4C410ECA09
Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/c0zdezgWZuo-P-XyQNrkGbuJLRE.roa
Signing time: Mon 02 Jan 2023 11:24:58 +0000
ROA not before: Mon 02 Jan 2023 11:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203435
IP address blocks: 185.135.2.0/24 maxlen: 24
205.201.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:40:60:ae:18:b7:ac:be:41:8a:4c:41:0e:ca:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Validity
Not Before: Jan 2 11:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=734cdd7b381666ea3e3fe5f240dae419bb892d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:de:d9:ba:03:5d:8d:99:6b:11:9e:92:f8:
43:da:a6:5a:85:1f:7e:c0:4e:e7:ca:41:08:fb:8b:
92:2d:f4:ae:80:8c:c5:2a:5d:85:be:e2:d1:a6:e2:
f8:16:2a:06:56:83:cf:60:42:93:f5:15:56:42:b8:
e5:cf:cf:30:7b:f6:c5:3b:db:f6:bc:59:a2:a1:d1:
59:c8:ef:50:b1:7f:34:6a:0b:99:39:5d:40:4e:74:
bb:74:2f:13:b5:6d:21:f2:38:d2:64:56:86:94:3c:
37:a2:60:9a:d9:5b:f5:64:56:8c:c9:71:c3:f2:cb:
c4:f5:e8:8e:6e:49:e7:3f:cb:dc:8d:bc:c4:54:2e:
c0:2c:59:f1:75:6d:6f:90:9a:be:63:5d:5b:5d:13:
7b:5c:91:df:22:78:1f:f9:e7:2c:a6:9c:2c:83:ee:
3a:36:1b:5e:af:e0:32:5d:6f:f1:16:e2:f0:3b:3a:
6a:19:ac:d5:dc:40:98:d7:61:4c:6a:5f:44:49:71:
58:50:85:ee:6d:57:42:8a:36:36:a4:70:88:06:c7:
56:83:27:e4:30:7b:be:9a:b4:bf:4a:a2:eb:84:d5:
2d:79:33:cd:2c:0f:98:03:4f:b6:b4:72:df:52:03:
c5:c4:2d:11:e9:e3:7b:b8:a5:ee:2f:15:d3:5d:33:
4c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4C:DD:7B:38:16:66:EA:3E:3F:E5:F2:40:DA:E4:19:BB:89:2D:11
X509v3 Authority Key Identifier:
keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/c0zdezgWZuo-P-XyQNrkGbuJLRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.2.0/24
205.201.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:3f:66:6e:b9:18:c0:03:ed:68:4a:4f:1b:37:04:bf:ee:63:
3c:2c:7d:7c:e9:c6:ff:6f:18:33:ea:b6:59:f9:23:e4:f0:20:
98:3c:8e:e7:c3:a0:6c:11:69:ba:6f:66:49:0d:5f:97:5c:c0:
23:23:9c:f7:6b:60:3f:62:56:eb:b9:f0:3b:31:f1:2f:87:b0:
a9:2f:8f:4e:2a:58:1b:3e:4e:84:cc:4c:ca:f0:66:10:a1:77:
d2:e7:b6:28:3a:ba:85:96:6e:de:41:ad:63:c1:a0:55:d1:f9:
bc:6c:07:60:65:1e:c1:ee:87:fd:0b:e6:d1:77:7e:cb:92:3b:
38:8e:69:4a:15:33:7d:28:d7:29:21:cc:31:cb:ac:20:40:7c:
eb:43:44:e1:8f:e5:d8:a6:b6:7b:6f:18:7d:c7:88:a6:ad:95:
43:21:a3:34:0b:a4:25:a9:d7:db:cf:1e:f7:92:0a:b9:d1:dd:
2b:50:b8:2d:03:ed:9a:ed:9b:e8:2c:e2:1a:da:31:eb:44:87:
f5:0c:22:68:a8:84:ce:b0:a9:4d:d7:10:fd:dc:3e:69:78:e4:
ac:11:f0:5c:13:61:f8:43:0e:e4:86:e8:4f:51:83:64:dc:00:
f1:75:bc:c0:72:83:67:e5:3d:f6:25:af:e3:c4:38:3a:2e:fe:
58:34:e3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:47 2024 by rpki-client on console-ams.rpki-client.org