Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/d80MqJTD1TAtFWRKLK6JLzByTmY.roa
File: d80MqJTD1TAtFWRKLK6JLzByTmY.roa (raw, json)
Hash identifier: 6I5PitLcoOvFaClQ1MeAjbYKjTwSB8mzhYQEByiUI/I=
Subject key identifier: 77:CD:0C:A8:94:C3:D5:30:2D:15:64:4A:2C:AE:89:2F:30:72:4E:66
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 01856ECB6F3C103833D632296086E8D6744D
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/d80MqJTD1TAtFWRKLK6JLzByTmY.roa
Signing time: Sun 01 Jan 2023 19:25:03 +0000
ROA not before: Sun 01 Jan 2023 19:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204781
IP address blocks: 185.229.1.0/24 maxlen: 24
185.229.0.0/23 maxlen: 23
185.229.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:6f:3c:10:38:33:d6:32:29:60:86:e8:d6:74:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: Jan 1 19:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77cd0ca894c3d5302d15644a2cae892f30724e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:15:41:e0:0e:3c:a1:fb:7e:21:be:5d:ee:
1f:9d:03:99:fa:5b:5b:43:f3:21:0e:b3:a6:bb:b7:
16:d2:89:d2:14:22:8a:0a:2d:88:8e:d0:42:3a:ed:
ac:dc:f5:dc:10:7b:b0:26:7a:83:79:15:58:2f:fe:
82:90:96:de:7a:33:4f:87:01:ec:ef:0e:a4:f5:3f:
22:45:d2:3e:d5:29:57:46:bd:b3:7e:a1:e7:e8:b6:
0e:38:0c:7f:f3:d7:89:05:28:b6:ed:9c:c4:64:97:
2e:3f:44:e1:5f:c6:4b:5a:44:8a:4c:ee:17:43:58:
36:e2:a1:c0:27:2a:17:0f:50:c2:4e:14:e5:6e:4e:
a6:55:d5:3a:73:57:33:a8:8e:64:ec:47:61:af:23:
d5:21:cf:ad:fb:34:d7:d8:58:08:35:3e:6f:73:eb:
b4:d6:f8:32:c9:75:38:e7:87:a3:4a:35:2f:d2:c8:
10:16:f4:19:b5:11:b7:4b:d2:c4:3d:9f:3e:33:96:
c9:03:ba:d6:11:57:af:4a:27:bc:d7:03:e8:8a:57:
0d:a8:60:1a:3f:b1:14:f6:15:2b:ce:bc:c3:de:94:
1f:9d:d2:d6:1c:14:43:b9:e5:db:a4:a0:b5:f9:09:
27:2f:11:72:d3:ff:34:4e:57:86:27:2d:51:90:ca:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CD:0C:A8:94:C3:D5:30:2D:15:64:4A:2C:AE:89:2F:30:72:4E:66
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/d80MqJTD1TAtFWRKLK6JLzByTmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.0.0/23
Signature Algorithm: sha256WithRSAEncryption
20:f6:36:78:dc:0c:05:16:95:01:31:81:b2:11:43:6d:f0:82:
03:53:79:74:a2:65:c1:1a:ae:86:74:52:c7:1a:61:79:98:16:
e3:c2:0b:89:0d:c6:12:fc:d2:09:63:9c:fa:ef:08:22:da:25:
1b:20:1e:b6:2d:4f:22:c3:24:28:c6:b6:2c:13:e8:b5:da:89:
e5:07:c0:b0:3f:f4:e2:76:80:68:c4:f1:47:40:95:dc:b4:80:
df:da:d8:f6:37:6d:78:8c:63:03:1d:78:4f:96:9c:86:da:3f:
7d:28:98:f6:be:0e:c4:10:46:d1:54:ce:bd:1c:99:35:4b:35:
8b:39:57:c7:f8:1e:ed:d9:b5:2d:b3:83:c0:55:26:c9:fc:65:
d4:28:9a:92:b2:f6:4d:43:05:e7:39:f7:4c:02:55:44:31:1e:
02:8c:0f:df:de:3b:a6:c6:c8:b7:0a:5e:ca:48:ca:33:cc:41:
13:71:a3:49:b8:07:2b:17:00:dc:70:bd:71:a0:f0:ae:7c:d9:
19:a1:f1:81:17:71:e2:02:53:f5:53:ad:f9:64:66:80:1a:86:
aa:8f:9d:28:80:cf:b0:1c:5f:71:80:4f:b8:bf:b6:7c:fe:57:
f6:76:72:a5:08:bd:28:e2:df:07:45:93:8d:cf:4d:32:39:dd:
5c:10:6e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:03 2024 by rpki-client on console-ams.rpki-client.org