Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/1-kF_sTprA7ilZhJNfyHSLmdZ6Lk.roa
File: 1-kF_sTprA7ilZhJNfyHSLmdZ6Lk.roa (raw, json)
Hash identifier: 3oBY6ZIbaRGG0G2DAPF6QsLtdvl7fKai6ZkXSSQ17Xg=
Subject key identifier: FA:41:7F:B1:3A:6B:03:B8:A5:66:12:4D:7F:21:D2:2E:67:59:E8:B9
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 018CED95B56B0AF095FC6202AEE515FD054D
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/1-kF_sTprA7ilZhJNfyHSLmdZ6Lk.roa
Signing time: Tue 09 Jan 2024 09:37:40 +0000
ROA not before: Tue 09 Jan 2024 09:37:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 185.113.64.0/23 maxlen: 23
185.113.64.0/24 maxlen: 24
185.113.65.0/24 maxlen: 24
185.113.66.0/24 maxlen: 24
185.113.66.0/23 maxlen: 24
185.113.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 06:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:95:b5:6b:0a:f0:95:fc:62:02:ae:e5:15:fd:05:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jan 9 09:37:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa417fb13a6b03b8a566124d7f21d22e6759e8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8d:4c:bf:b9:1a:2e:6b:f8:3e:d4:2f:51:3e:
c2:8f:28:45:91:f0:49:f0:3c:61:7a:aa:22:2f:4a:
8b:fe:87:ef:09:b1:3e:58:1d:49:67:b6:8b:7e:39:
ef:e0:6f:56:8e:95:cf:31:4a:91:5d:f2:33:f8:b7:
30:4b:77:66:67:54:ff:c4:48:7d:5a:30:f2:9a:b9:
f1:ca:1d:77:e2:c6:35:e8:5a:8e:5f:f8:86:f6:c7:
09:d3:eb:42:5a:45:11:61:a1:81:b6:a9:35:0c:9a:
ab:c0:0c:39:ca:cc:76:c7:c7:13:e3:8b:5b:e5:a6:
43:7f:41:99:31:35:a2:dc:72:62:ad:06:5e:77:3d:
60:a6:5a:80:49:e7:c1:17:11:d8:ee:0e:d2:ae:5e:
28:72:f6:90:f4:ae:12:9b:aa:f7:07:37:aa:3b:84:
cb:34:15:12:af:b5:a9:3d:60:00:28:98:04:ef:74:
cb:db:27:e0:a7:7a:67:5e:fc:12:a6:de:fb:07:bd:
40:02:36:7c:c6:1e:cb:bf:d8:25:95:74:ef:51:31:
11:9a:01:be:5c:a9:33:b9:f3:48:87:85:3d:b7:fd:
94:59:67:7c:a5:ef:c5:1d:52:4b:0e:85:91:c1:61:
48:52:32:30:19:a8:57:f4:ee:bd:99:c2:43:a8:b1:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:41:7F:B1:3A:6B:03:B8:A5:66:12:4D:7F:21:D2:2E:67:59:E8:B9
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/1-kF_sTprA7ilZhJNfyHSLmdZ6Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.64.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:c1:f3:b2:43:58:b2:23:14:7a:ae:b0:89:fd:db:d9:9f:c0:
fe:23:28:f5:94:50:a6:b1:0f:2f:1e:ca:0d:75:17:27:62:ee:
f9:2d:60:1f:b2:8a:ee:c1:94:76:17:e0:d7:f0:35:52:41:1e:
42:ad:ed:a4:70:00:13:e6:8c:8a:25:38:aa:e4:47:86:fd:c7:
96:88:9e:37:df:62:3c:f4:da:76:be:fd:38:37:1f:f9:af:7f:
2b:df:c7:e4:b6:48:89:15:23:39:53:be:94:89:ec:a4:14:72:
75:b6:36:ce:bb:14:eb:17:e2:e8:e7:8a:b2:c1:d9:1c:7b:d6:
6d:af:e2:90:64:e6:79:e7:f9:10:22:0a:bd:8c:e7:f3:f4:6a:
b2:7d:b2:84:a3:94:13:46:81:c7:13:04:84:70:af:c2:a5:4d:
57:11:bb:37:d0:0d:b5:b7:3f:c5:db:d7:93:23:ca:9b:e9:2e:
85:b0:fe:5d:5d:e7:1f:c6:cd:f3:80:47:10:52:f7:d1:47:ee:
1e:c5:67:d1:cd:89:3c:42:31:32:ab:0b:fa:32:1b:4f:63:a8:
74:f0:32:b7:dd:22:c7:8a:6e:78:23:f2:98:19:0b:23:f3:6c:
37:95:ad:b8:41:ba:91:72:ad:1f:89:1f:a7:4a:8e:10:6c:9f:
54:d2:db:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:50 2024 by rpki-client on console-fra.rpki-client.org