Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/f_varnrTka4Cl59M8V4xQZj7NKs.roa
File: f_varnrTka4Cl59M8V4xQZj7NKs.roa (raw, json)
Hash identifier: XDgBRDrLWug6nO5Gyg/PGqQd90piH5xDX4fd3wPQn2I=
Subject key identifier: 7F:FB:DA:AE:7A:D3:91:AE:02:97:9F:4C:F1:5E:31:41:98:FB:34:AB
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 018CC3B6AE2DC7BA62BB42187A47F112C8A6
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/f_varnrTka4Cl59M8V4xQZj7NKs.roa
Signing time: Mon 01 Jan 2024 06:29:38 +0000
ROA not before: Mon 01 Jan 2024 06:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43685
IP address blocks: 185.183.244.0/22 maxlen: 24
2a0b:2280::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 21 May 2024 08:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ae:2d:c7:ba:62:bb:42:18:7a:47:f1:12:c8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Jan 1 06:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ffbdaae7ad391ae02979f4cf15e314198fb34ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:61:5c:66:a5:2f:28:98:73:da:97:54:71:05:
c7:2a:9c:7f:ce:45:6c:68:e6:e8:9f:fd:e3:84:fb:
5c:e2:ee:8c:5a:c9:ca:fd:16:23:49:35:8e:46:90:
48:2f:3d:12:84:c4:09:89:13:cb:6a:f4:f3:be:5a:
86:70:10:5f:89:ac:7d:78:38:36:65:17:d8:ad:4f:
df:39:14:59:5f:3b:2e:64:45:eb:25:3d:f1:c1:6f:
2a:d7:74:51:cf:4d:23:c5:8f:bb:ca:b6:7b:4d:a2:
c2:43:26:fa:b6:75:1f:80:09:f0:a3:7b:3b:8f:2c:
c6:f9:12:be:52:f4:d3:f9:59:d7:3a:f8:a6:e8:b8:
db:03:0d:b5:05:26:f6:9e:6c:a9:37:16:10:72:16:
89:ab:7f:69:20:9e:49:62:ae:d2:5a:a8:1d:77:af:
a4:b9:98:db:da:a7:b9:e1:3c:a1:ec:60:44:f8:a0:
64:b9:37:d6:05:ab:f8:83:9d:81:2a:d2:6e:b6:3a:
d2:8b:13:8c:86:a5:d2:2a:1d:c1:6b:ea:9e:1d:34:
e0:88:fb:9c:e7:d4:4a:e6:ca:be:5e:40:1a:cd:19:
59:fd:59:60:43:97:5c:04:23:7c:5e:06:37:22:a4:
4a:bd:65:45:0d:1d:8f:1c:a4:48:1a:43:83:68:da:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FB:DA:AE:7A:D3:91:AE:02:97:9F:4C:F1:5E:31:41:98:FB:34:AB
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/f_varnrTka4Cl59M8V4xQZj7NKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.244.0/22
IPv6:
2a0b:2280::/29
Signature Algorithm: sha256WithRSAEncryption
77:1d:c1:e6:f8:95:50:d2:a1:74:45:d2:c4:ef:13:eb:ac:3e:
7a:98:81:ff:a4:f3:7d:fd:ec:8b:f5:54:59:1d:67:da:2d:03:
e3:cb:15:92:89:b3:ee:b4:83:06:76:31:53:83:28:70:9c:c9:
6c:27:88:c1:ee:ab:fd:13:02:68:73:a5:d4:9f:3a:c6:55:6f:
ba:ac:4c:ce:df:9c:4a:b5:27:79:86:3f:1f:e6:df:1c:c5:f5:
0b:00:65:98:c0:3e:4b:21:3c:56:b2:83:62:66:7f:4d:39:b5:
e5:ca:7e:89:f4:bd:05:e0:4b:2e:04:d2:e0:95:34:28:b9:32:
01:ce:ce:9d:10:08:d9:d5:75:03:41:d9:b0:09:45:e8:d5:e8:
81:ce:cd:46:4a:6d:55:d9:c9:2e:fd:80:27:8d:54:b7:c5:75:
af:60:e0:74:d2:2f:9c:7b:b5:4c:13:80:66:0d:8d:a8:24:05:
a8:9a:3f:6c:b1:c7:34:0e:b9:45:9b:c0:28:ab:d0:6a:c6:a9:
40:b7:5a:29:fc:ab:81:53:b3:5f:c6:83:2d:5a:7a:94:64:f7:
e7:5f:9e:c8:f6:4b:7e:c4:0d:e0:29:f5:ff:a6:47:71:ee:bb:
22:2e:e5:65:e6:76:7d:ee:54:2c:99:fe:c0:1c:a7:ea:fa:62:
a2:ef:a5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 12:03:47 2024 by rpki-client on console-fra.rpki-client.org