Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/Db6CbezlGrfKz6_e_lhLXX63iW0.roa
File: Db6CbezlGrfKz6_e_lhLXX63iW0.roa (raw, json)
Hash identifier: Y1Abx7yd7Y5CuD+BeHlOIBQfvjJSkFI16VlDV03K/6c=
Subject key identifier: 0D:BE:82:6D:EC:E5:1A:B7:CA:CF:AF:DE:FE:58:4B:5D:7E:B7:89:6D
Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial: 0187949C43B89DAD232FC0DE6395C11BB329
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/Db6CbezlGrfKz6_e_lhLXX63iW0.roa
Signing time: Tue 18 Apr 2023 13:44:41 +0000
ROA not before: Tue 18 Apr 2023 13:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203352
IP address blocks: 185.131.80.0/24 maxlen: 24
185.131.80.0/23 maxlen: 23
185.131.80.0/22 maxlen: 22
185.131.82.0/23 maxlen: 23
2a06:97c0::/29 maxlen: 29
2a06:97c4::/30 maxlen: 30
2a06:97c0::/30 maxlen: 30
Validation: Failed, certificate revoked on Tue 18 Apr 2023 13:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:9c:43:b8:9d:ad:23:2f:c0:de:63:95:c1:1b:b3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
Validity
Not Before: Apr 18 13:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dbe826dece51ab7cacfafdefe584b5d7eb7896d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c9:db:de:ef:2a:1c:41:15:46:98:99:12:ce:
a9:fc:6c:c4:0c:e7:f7:48:eb:8c:61:f0:40:67:31:
06:a9:fa:09:5d:73:4a:d6:fe:36:2c:8a:3f:c0:58:
6b:c8:78:38:c2:ec:e6:bb:a6:c2:ce:44:9e:4d:19:
be:f4:29:3d:88:dd:48:dd:49:7f:bf:69:35:8c:e8:
05:e3:b1:34:40:69:d3:98:bf:a2:cd:f5:66:a1:d5:
29:0a:c1:9d:c5:7f:b9:ec:d3:12:f4:ff:4c:45:db:
c3:4f:ae:97:1d:44:92:56:1f:1d:28:66:68:40:8d:
45:5d:74:02:2a:1a:f5:ed:75:5b:57:2c:ff:0f:2d:
4f:c4:75:f2:30:55:77:2b:ac:01:4c:06:b5:86:fa:
39:24:1e:47:e2:73:51:f9:d7:a5:9e:3a:1a:a4:63:
1d:6a:51:f7:8c:43:dd:37:ec:18:bd:1a:1a:ef:9d:
84:0b:71:5b:cf:79:97:d6:6a:18:33:c0:d5:33:a1:
50:87:8d:4d:8c:b2:70:3f:42:c1:f9:1d:08:d5:3a:
b2:35:6a:5e:8a:ce:8c:c3:4d:5d:8d:ee:e4:58:02:
a6:66:49:c5:7b:2d:d7:13:f4:c5:f0:08:44:bc:7f:
00:e4:eb:41:f5:42:f9:96:ba:84:9d:0d:d4:19:c9:
8f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BE:82:6D:EC:E5:1A:B7:CA:CF:AF:DE:FE:58:4B:5D:7E:B7:89:6D
X509v3 Authority Key Identifier:
keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/Db6CbezlGrfKz6_e_lhLXX63iW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.80.0/22
IPv6:
2a06:97c0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:04:c3:95:ba:f2:53:1b:96:a8:47:76:92:83:a0:22:c0:67:
2b:e7:f0:fa:f6:c6:19:68:c3:84:e4:26:65:51:b6:46:7f:9d:
7d:88:17:ea:47:43:f9:70:e0:d2:16:43:e2:e6:3e:bb:34:45:
55:21:71:a8:13:18:6e:94:48:c3:01:3c:88:6f:bc:24:08:24:
ec:d9:72:3c:65:78:6d:ec:69:68:cd:c6:1a:a6:6d:0c:45:b3:
2e:5c:9e:40:c8:2a:11:28:c5:c2:09:93:af:2c:6b:86:5d:09:
63:6f:2e:2c:60:6e:ae:41:5a:03:09:fd:5f:08:3c:de:10:cc:
14:a0:3c:55:36:7c:7d:38:12:79:e4:89:0a:8d:5d:b5:41:cb:
1c:47:36:53:9f:d5:69:75:bd:6b:64:a3:9c:17:44:1d:ff:65:
3b:29:fc:72:81:fa:0d:61:5f:d5:e5:8f:0e:e0:84:66:90:d8:
2c:2e:ff:b1:c1:26:f1:6e:05:04:3b:39:b8:bb:00:f7:50:5f:
91:69:e9:68:33:7c:94:bd:c0:fa:6e:52:71:c5:ff:10:67:88:
d7:b0:f6:71:ed:2e:9f:31:f7:e4:1d:6f:7d:82:16:07:29:26:
04:51:92:42:e0:ef:32:ed:19:c7:9d:e4:00:46:ee:01:37:01:
36:a1:5f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:00 2024 by rpki-client on console-ams.rpki-client.org