Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/2XLL4hLMusAHuVlwWCnEHvFybP8.roa
File: 2XLL4hLMusAHuVlwWCnEHvFybP8.roa (raw, json)
Hash identifier: Z8EWPvBQT4vvVU9x3Cm/ZHJ6y1u2omrv1GLFMiHJdMg=
Subject key identifier: D9:72:CB:E2:12:CC:BA:C0:07:B9:59:70:58:29:C4:1E:F1:72:6C:FF
Certificate issuer: /CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Certificate serial: 01856CC170CFAF944C62A4223132F5192C64
Authority key identifier: E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/2XLL4hLMusAHuVlwWCnEHvFybP8.roa
Signing time: Sun 01 Jan 2023 09:54:54 +0000
ROA not before: Sun 01 Jan 2023 09:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51580
IP address blocks: 185.29.75.0/24 maxlen: 24
185.29.73.0/24 maxlen: 24
185.29.74.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:70:cf:af:94:4c:62:a4:22:31:32:f5:19:2c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Validity
Not Before: Jan 1 09:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d972cbe212ccbac007b959705829c41ef1726cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:10:85:9c:f9:a1:d8:3a:38:8c:ea:68:e2:
a3:29:4d:fb:ef:16:1e:dc:8d:c1:e0:22:95:1e:ac:
ba:35:a5:97:eb:0d:04:45:2c:bd:c7:88:05:ff:b8:
39:9b:6e:b1:57:f1:f1:fc:52:b1:ba:bb:aa:6d:80:
6f:55:34:6f:3d:77:82:84:d2:83:50:28:8b:70:b3:
2d:75:e2:3b:03:43:96:6f:7a:c7:ef:0f:17:5f:7e:
6f:8d:f1:7d:0b:44:00:54:09:2d:97:6e:5e:25:09:
7c:6d:4c:ec:4c:ba:03:59:32:43:c3:da:52:b5:0d:
00:55:56:82:1f:93:bd:ca:11:57:66:ed:e9:3b:e0:
f5:1e:a0:58:51:d9:39:a7:ec:fd:6e:db:60:5d:18:
88:fb:65:42:76:fc:de:ed:18:b5:09:a3:40:46:2c:
87:ea:24:96:24:0a:50:f9:bd:80:10:04:96:b7:48:
2e:16:b2:38:0f:c7:95:1c:b0:d7:50:54:e6:f2:ce:
68:f3:5a:29:62:ad:49:55:ac:26:e0:27:4c:6d:e4:
c8:d8:cc:3d:79:52:1b:57:0b:8d:2f:16:c3:50:84:
4a:c7:98:27:cd:e3:21:94:4b:94:91:8b:39:1e:63:
db:81:7a:db:81:a9:a1:f8:2b:c1:e8:b4:e7:16:f3:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:72:CB:E2:12:CC:BA:C0:07:B9:59:70:58:29:C4:1E:F1:72:6C:FF
X509v3 Authority Key Identifier:
keyid:E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/2XLL4hLMusAHuVlwWCnEHvFybP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.73.0-185.29.75.255
Signature Algorithm: sha256WithRSAEncryption
bf:6a:55:2a:db:25:fe:4b:81:6e:35:ca:11:92:0f:0b:83:3b:
9f:63:89:63:4d:27:d2:34:79:1c:aa:95:9a:65:1b:04:b5:d3:
8a:bc:07:ec:1c:b7:73:11:9d:22:f0:a0:fa:c7:e3:d5:47:7e:
d6:b2:55:13:b9:01:2d:61:f3:ad:6a:dd:f3:af:a1:1a:dd:95:
fd:16:63:a0:00:5e:e6:b2:ca:29:d4:36:7f:f3:13:ab:15:cb:
3f:bc:7c:27:fc:d8:32:2b:62:b6:ed:69:a6:c9:37:d4:04:78:
8d:0c:09:a8:2d:1a:c1:49:da:88:57:cb:a6:06:31:72:27:81:
6d:56:93:b7:64:50:13:95:6a:80:30:d1:74:c4:87:e4:03:54:
c8:f4:78:aa:80:01:af:00:f1:25:67:c9:b7:47:be:7d:32:8b:
10:05:92:62:e7:04:5e:52:5e:56:e9:a2:64:2c:f1:63:e2:5a:
85:16:74:8f:45:e3:21:c8:8f:9b:4b:45:f3:de:3a:32:47:fc:
3c:f8:ca:41:1b:e6:d4:54:a6:44:f6:66:52:05:e0:f1:31:30:
37:3b:ac:65:e9:11:8e:4b:4b:48:a8:46:b5:62:c3:45:46:f7:
21:93:25:26:e3:09:18:e3:c1:dd:b1:ed:b5:a8:58:09:ab:42:
95:61:4c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:41 2024 by rpki-client on console-ams.rpki-client.org