Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/0uaxgwrE9Mkiej-22vpSFkXZSjc.roa
File: 0uaxgwrE9Mkiej-22vpSFkXZSjc.roa (raw, json)
Hash identifier: hWwNjFgRAOj2BG3xFWOnn/grCx1YpCqKVJqazVM3LQ4=
Subject key identifier: D2:E6:B1:83:0A:C4:F4:C9:22:7A:3F:B6:DA:FA:52:16:45:D9:4A:37
Certificate issuer: /CN=178d8121ef704d7a9770c3ece1e205614790ac39
Certificate serial: 018DFAB5172440C275F334132741D97B3540
Authority key identifier: 17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/0uaxgwrE9Mkiej-22vpSFkXZSjc.roa
Signing time: Fri 01 Mar 2024 15:49:48 +0000
ROA not before: Fri 01 Mar 2024 15:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51362
IP address blocks: 185.19.212.0/22 maxlen: 24
2a06:37c0::/29 maxlen: 64
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:b5:17:24:40:c2:75:f3:34:13:27:41:d9:7b:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178d8121ef704d7a9770c3ece1e205614790ac39
Validity
Not Before: Mar 1 15:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2e6b1830ac4f4c9227a3fb6dafa521645d94a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:6d:1d:fc:8e:dc:ba:f3:ba:69:9a:65:3c:
a5:a2:8b:93:28:28:34:fe:fc:01:5f:80:58:31:7b:
73:9b:e6:18:08:65:02:b8:dc:da:f1:a7:b3:96:f5:
1c:64:34:41:40:0c:a3:d5:3e:1a:5d:26:bc:c8:f2:
85:33:fc:8c:bd:5a:7c:65:99:50:34:54:d8:4d:6e:
58:05:17:34:e4:ba:37:37:38:c8:71:b8:2f:50:d4:
ba:ff:95:45:3b:6b:9a:86:b6:59:20:3e:3c:2e:e1:
6f:7f:04:0a:96:63:c5:0c:52:86:56:6c:c7:89:3a:
ad:f3:19:35:e3:6b:1d:53:bf:24:c6:cb:d2:49:1f:
68:f6:ca:ff:56:32:2f:7a:e0:6f:d6:e1:09:26:75:
ba:e5:b0:9c:1f:ef:4f:f4:fb:92:d2:dc:ea:0e:95:
02:68:01:52:bf:40:65:92:13:3f:d8:b2:c6:b9:19:
30:b6:df:78:cc:35:cd:d6:6d:12:f0:58:f6:ab:67:
08:31:22:72:39:7b:6b:9c:65:53:a7:40:50:7f:a6:
28:a3:50:77:2c:75:c2:df:24:af:f9:83:9a:e3:96:
33:27:4a:3e:0b:cc:6f:dd:e4:17:82:05:50:d2:36:
d6:e7:31:87:1d:d2:af:ff:a9:38:56:ec:2d:4b:32:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E6:B1:83:0A:C4:F4:C9:22:7A:3F:B6:DA:FA:52:16:45:D9:4A:37
X509v3 Authority Key Identifier:
keyid:17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/0uaxgwrE9Mkiej-22vpSFkXZSjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.212.0/22
IPv6:
2a06:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
17:38:e2:e0:3c:96:55:de:c3:69:eb:91:95:a3:41:84:a1:8b:
4a:7a:66:dc:1c:f0:03:e1:07:a0:c4:a5:f8:64:2c:e4:4c:5e:
1d:56:ca:a3:79:7b:91:f1:ec:0c:3c:1a:e3:48:ee:47:1a:c8:
6e:52:c4:67:86:c9:5c:52:d2:fc:f7:9b:f5:16:44:76:00:6e:
8d:4a:08:43:cb:3c:7e:cb:e6:e5:d7:71:7a:95:9d:40:ec:cc:
e3:e3:56:81:fb:51:ce:3d:2b:92:05:58:b3:d8:58:19:a3:8d:
60:4d:62:4f:b5:37:bf:31:34:e2:6a:e5:e8:42:a5:c3:14:69:
3b:26:5c:62:da:96:8d:cf:ec:22:a8:18:ea:51:56:0e:25:92:
1f:39:98:72:2a:2c:dd:f8:f3:b4:4b:7b:66:a2:0d:87:eb:83:
f4:13:b5:48:39:ec:4b:f4:ab:e6:68:5a:18:24:1e:16:f8:65:
6f:7a:5e:a8:2f:6c:11:42:a0:5e:f3:ab:a4:f9:23:d4:4c:32:
77:de:73:4d:0a:11:7b:95:99:82:75:95:07:14:6c:81:c5:6d:
0b:d8:25:5f:0f:8b:e8:33:ae:22:80:6f:58:6f:75:28:61:bc:
33:b7:03:2d:ba:66:59:fd:5a:8f:85:00:3f:c9:00:77:c3:07:
d5:a7:93:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:47 2025 by rpki-client