Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/KRiZFlMHkyRGvpEByB9qysUrz58.roa
File: KRiZFlMHkyRGvpEByB9qysUrz58.roa (raw, json)
Hash identifier: xpiGSBN3XGImDjgj0TgoXTpK61mpe1bhJ11igzSHVIA=
Subject key identifier: 29:18:99:16:53:07:93:24:46:BE:91:01:C8:1F:6A:CA:C5:2B:CF:9F
Certificate issuer: /CN=573d37e65c8228f793f48b8e9a20f12c2f80b883
Certificate serial: 0191A279947307127549C1CF8D410E0C3F16
Authority key identifier: 57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/KRiZFlMHkyRGvpEByB9qysUrz58.roa
Signing time: Fri 30 Aug 2024 08:49:22 +0000
ROA not before: Fri 30 Aug 2024 08:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212453
IP address blocks: 185.192.122.0/24 maxlen: 24
185.192.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a2:79:94:73:07:12:75:49:c1:cf:8d:41:0e:0c:3f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573d37e65c8228f793f48b8e9a20f12c2f80b883
Validity
Not Before: Aug 30 08:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=291899165307932446be9101c81f6acac52bcf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:58:0e:61:24:9b:d1:fb:5b:20:28:b4:28:
7f:0c:93:eb:c7:9b:e9:fb:4b:66:fa:3b:85:3d:a4:
7c:82:cf:ea:11:90:36:dd:27:c0:06:91:cc:1b:66:
c7:df:96:45:2a:1a:12:b8:63:8b:da:d7:f2:01:dc:
67:d5:ce:23:c2:56:45:5c:d5:c9:87:25:6d:2f:23:
c3:c1:13:ef:99:1c:c0:64:2d:f2:d3:1d:e0:7f:99:
fc:d5:87:52:63:d7:25:35:d3:d7:38:f8:29:15:52:
d2:dc:40:64:88:fa:9b:6a:b7:3b:86:16:81:f1:78:
3d:4a:c0:c4:51:fc:28:18:d0:f2:e5:2d:2b:d7:83:
32:d0:9f:a9:46:b7:da:81:db:8d:0b:e0:fc:39:eb:
a7:7f:3a:25:54:1a:92:ef:41:d6:b4:ff:2a:46:3a:
09:d3:ac:d7:9e:cc:61:32:fe:6f:b6:4f:3b:3e:f1:
3d:fc:a8:39:cb:91:77:a7:1b:3a:cd:d4:36:65:b3:
ea:f1:74:f4:f6:20:aa:73:1b:c5:0c:f6:42:03:5d:
63:3d:dd:36:d3:de:44:83:be:4d:61:af:ec:e1:c4:
e6:52:45:f3:57:ff:c6:fd:92:97:37:29:96:34:41:
7e:46:fe:56:33:bd:c6:18:0a:57:55:4b:30:bf:54:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:18:99:16:53:07:93:24:46:BE:91:01:C8:1F:6A:CA:C5:2B:CF:9F
X509v3 Authority Key Identifier:
keyid:57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/KRiZFlMHkyRGvpEByB9qysUrz58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.122.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:45:5c:54:c8:43:0c:ca:7d:45:c0:e4:d1:4d:1e:1e:2f:49:
80:5a:84:86:db:84:74:fd:69:17:0b:99:eb:6a:fe:3d:18:a2:
a8:42:2d:86:a4:0a:7d:9c:ce:7b:17:80:1e:0a:75:66:79:88:
3d:19:f4:90:fc:7d:3d:76:58:b3:e9:83:bc:16:a2:ff:f2:54:
d6:fd:0f:9b:5d:0b:84:9c:23:fc:24:ef:6e:e0:42:f4:23:cd:
39:f3:b0:0a:62:b0:20:57:e1:5a:fd:45:ed:1f:39:7d:f7:c1:
0f:e9:41:ed:c2:13:d9:65:2d:61:7e:50:11:da:b3:50:b1:46:
b3:25:a5:e1:13:e2:eb:83:a6:48:a7:f6:f0:c0:15:db:0a:47:
74:17:80:3b:80:44:1f:08:b3:87:de:60:f8:2e:22:a7:4c:d1:
9a:b7:16:b5:a1:30:4b:82:a1:f4:7c:2d:b3:2b:c0:b2:74:e2:
0a:fe:60:8a:1a:14:7e:4e:8e:b4:fc:e8:38:72:72:82:36:02:
d8:75:f8:0b:6e:94:2b:df:2c:da:06:18:11:fa:bd:8d:68:34:
ce:5b:f4:98:2f:0a:38:3d:5f:9c:c4:85:d5:70:50:eb:8f:22:
3a:85:e3:3b:03:3a:54:99:c1:d7:3c:9b:16:00:14:6d:4f:e9:
f4:ec:10:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:46 2025 by rpki-client