Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/SpfqV3mqbq4NhPTPkCqwAqWXXqU.roa
File: SpfqV3mqbq4NhPTPkCqwAqWXXqU.roa (raw, json)
Hash identifier: ua/KUFFGP0qLycf5ohto0nRGDTyp8iLCC4wGF2HAMCw=
Subject key identifier: 4A:97:EA:57:79:AA:6E:AE:0D:84:F4:CF:90:2A:B0:02:A5:97:5E:A5
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 018BC87ED6FD55571CD68E1C2BD7904F421F
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/SpfqV3mqbq4NhPTPkCqwAqWXXqU.roa
Signing time: Mon 13 Nov 2023 11:43:57 +0000
ROA not before: Mon 13 Nov 2023 11:43:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138971
IP address blocks: 185.228.94.0/24 maxlen: 24
185.228.95.0/24 maxlen: 24
185.228.92.0/22 maxlen: 22
185.228.92.0/24 maxlen: 24
185.228.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:7e:d6:fd:55:57:1c:d6:8e:1c:2b:d7:90:4f:42:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Nov 13 11:43:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a97ea5779aa6eae0d84f4cf902ab002a5975ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:cf:ee:07:0c:e7:20:65:76:ae:f6:19:43:
ad:da:3c:3a:3f:01:47:ea:75:de:6d:56:18:d4:ef:
07:33:50:4f:11:48:2a:d5:2f:ee:41:f0:b2:38:ad:
61:60:3c:4d:f8:c0:4b:f8:cd:8e:be:db:38:d0:a7:
f2:a3:b6:19:b5:72:1c:c7:fb:ff:27:5d:03:c4:45:
0f:31:77:db:72:c6:b4:10:a3:06:40:00:d7:88:e6:
da:e5:51:31:bc:ba:43:5b:00:f1:06:33:36:ff:8d:
02:f3:1f:eb:79:35:6a:cc:72:1b:ce:9a:5b:a9:69:
f8:ec:99:c0:55:d9:63:9b:e7:48:8a:d6:3e:0d:70:
b9:34:00:c0:e6:66:f5:04:a1:ec:9d:1b:9d:f2:ba:
b7:c7:24:fb:78:e1:e0:a9:55:58:5f:18:17:67:45:
5b:59:89:3d:07:08:ac:2a:35:07:7c:85:4a:76:2a:
45:7d:55:ea:24:f0:64:3b:c1:2c:1d:46:a8:8b:d5:
70:7e:b5:04:4a:c4:69:5d:92:7a:8f:cf:d6:75:fa:
0c:c0:e4:ae:5b:f3:27:aa:d7:99:ac:10:22:b9:c9:
21:86:e0:6e:04:fa:63:c1:a0:8d:6c:11:1f:1c:f1:
5c:6a:98:66:71:75:63:f7:28:8f:a5:a6:2f:e6:83:
74:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:97:EA:57:79:AA:6E:AE:0D:84:F4:CF:90:2A:B0:02:A5:97:5E:A5
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/SpfqV3mqbq4NhPTPkCqwAqWXXqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.92.0/22
Signature Algorithm: sha256WithRSAEncryption
08:a4:60:e4:31:1d:5c:73:88:60:c0:19:0a:ee:62:84:35:99:
2b:be:e7:92:97:e2:99:f1:d9:a9:cb:5c:67:0e:98:cf:05:89:
c1:d8:09:df:16:ac:eb:78:8b:c2:b0:70:ed:27:35:18:28:e3:
f8:13:3b:d9:f6:b0:02:da:c2:30:53:0e:61:d3:ee:30:a1:09:
38:d5:9c:aa:28:8d:cf:7d:b2:e7:c3:22:3f:9e:b1:a8:dc:75:
1d:84:6d:09:f2:8b:aa:aa:63:b2:9a:11:88:83:32:0d:42:15:
8a:e9:d0:0f:e7:ee:7b:6e:64:99:26:6b:a3:ea:f0:9e:4f:11:
3e:62:b1:3b:05:a8:1f:5c:5e:3a:81:31:81:f0:c1:72:94:9e:
f3:9c:28:53:98:5b:80:bb:96:c4:98:be:36:63:06:44:c1:ef:
5f:50:00:ff:54:92:db:6b:5e:96:a8:74:e2:ac:3d:fd:cf:e0:
04:db:16:e3:ff:e2:37:98:53:59:2a:c1:15:db:d6:fe:7b:41:
53:f5:f9:1e:07:6f:9b:8e:9e:c0:7c:a9:1e:60:ec:ad:91:7f:
1d:3a:19:b9:6e:b0:bc:2d:7f:64:05:d6:19:c7:af:89:af:9c:
2d:b4:df:59:45:38:6f:c7:78:a9:91:ec:aa:8f:e0:c1:57:3d:
98:11:93:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:30 2024 by rpki-client on console-ams.rpki-client.org