Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KyU0eSOx1mXs3L3EDsssQrrNqTg.roa
File: KyU0eSOx1mXs3L3EDsssQrrNqTg.roa (raw, json)
Hash identifier: ExISt2lfTH1TNgM1hoCqm6VhvbJTXvaSSWZNF99ffLE=
Subject key identifier: 2B:25:34:79:23:B1:D6:65:EC:DC:BD:C4:0E:CB:2C:42:BA:CD:A9:38
Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial: 0185728C9E976A95D710F5BCE10723F4B058
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KyU0eSOx1mXs3L3EDsssQrrNqTg.roa
Signing time: Mon 02 Jan 2023 12:54:56 +0000
ROA not before: Mon 02 Jan 2023 12:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48520
IP address blocks: 185.114.187.0/24 maxlen: 24
185.114.184.0/24 maxlen: 24
185.114.184.0/22 maxlen: 22
185.114.186.0/24 maxlen: 24
185.114.185.0/24 maxlen: 24
2a06:7100::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:9e:97:6a:95:d7:10:f5:bc:e1:07:23:f4:b0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Validity
Not Before: Jan 2 12:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b25347923b1d665ecdcbdc40ecb2c42bacda938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:b4:eb:d9:5c:09:40:41:19:9c:11:af:f1:
8e:6f:23:fc:24:d2:1c:31:da:5b:fa:03:0e:4d:11:
73:08:4e:9d:af:9c:34:2d:17:3d:f7:14:6f:98:89:
78:2c:14:bb:7d:c9:8b:07:5f:40:d4:7b:a9:05:3c:
41:05:15:c1:2e:68:85:71:02:81:dd:08:1f:7d:c1:
b9:2c:6c:97:a9:ac:4f:53:ea:22:f8:64:65:af:2c:
9c:39:04:94:92:35:8f:18:34:75:48:f5:cc:d3:2e:
03:2b:a4:ea:be:64:b9:e4:ee:ae:6d:b4:c5:ee:29:
9c:a7:60:99:65:1b:02:bc:df:3e:b9:7f:25:b9:56:
74:a0:3f:82:0b:21:fc:e3:0c:35:a8:be:76:c1:d9:
00:a1:ba:34:7e:5a:bb:b9:ac:03:d9:d2:a8:5e:1d:
02:df:47:a9:43:ad:61:97:f7:b6:a4:dd:69:5b:4a:
44:0e:c5:0a:02:69:8d:d2:7b:c0:f3:16:96:ef:5b:
eb:1f:74:21:05:37:d8:71:28:7b:e6:0d:83:ec:7c:
86:8a:37:09:62:4d:96:96:71:8a:fc:c0:72:ba:a1:
29:99:17:4c:83:49:7c:d5:83:b4:ee:86:16:7a:b1:
ee:e0:27:f0:fd:8e:01:a7:8f:2a:73:4a:7c:82:67:
2c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:25:34:79:23:B1:D6:65:EC:DC:BD:C4:0E:CB:2C:42:BA:CD:A9:38
X509v3 Authority Key Identifier:
keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KyU0eSOx1mXs3L3EDsssQrrNqTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.184.0/22
IPv6:
2a06:7100::/29
Signature Algorithm: sha256WithRSAEncryption
02:a7:87:66:55:6a:af:67:ed:08:52:3e:f9:7c:a3:e9:62:c6:
77:32:a6:80:14:43:05:80:b6:ee:65:16:15:f4:e5:7f:00:d3:
19:45:65:d7:a4:39:d5:ce:a2:5f:5b:76:ab:86:4b:4d:c7:f2:
88:d1:23:6a:8e:95:70:df:0d:76:5a:61:7f:5c:9d:e8:8a:9e:
12:53:a2:ee:51:cd:25:b7:d5:37:a3:4b:19:2b:01:e7:13:69:
b1:13:6c:ff:94:09:b5:fa:cd:a0:f3:be:c7:f4:86:d6:ff:5e:
34:26:1d:bb:38:3b:59:7f:15:3c:6a:00:86:a9:72:0f:e1:9b:
00:e8:29:d6:c8:53:b3:25:61:b8:50:d9:80:a7:8b:5a:cc:21:
a7:fb:e1:37:ea:26:95:c2:2c:33:8b:71:5e:6a:43:43:3d:ca:
85:c2:a7:c8:44:bb:97:35:c5:b6:ab:0c:33:4f:44:05:04:2a:
28:fc:f7:c3:74:97:07:e8:83:a2:19:b4:88:ab:74:84:49:4b:
91:5b:43:00:e2:c4:af:6e:c4:fc:1f:f5:75:1d:9a:2e:a7:46:
7a:00:e9:5d:62:75:d0:dd:15:54:a5:11:2c:99:8f:d0:78:a8:
2a:80:99:ba:59:dd:12:8a:31:29:45:41:eb:72:f0:af:89:7c:
4d:01:83:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org