Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/oQf30Hf8w3ec5tp8LZHA_S3xvmM.roa
File: oQf30Hf8w3ec5tp8LZHA_S3xvmM.roa (raw, json)
Hash identifier: U1BmoWjPn4dWmoRiZ6eaZIcwSw9bUBkPuzr3CIVSfKU=
Subject key identifier: A1:07:F7:D0:77:FC:C3:77:9C:E6:DA:7C:2D:91:C0:FD:2D:F1:BE:63
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018C15FBF04B7B11264107EA020A786D1727
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/oQf30Hf8w3ec5tp8LZHA_S3xvmM.roa
Signing time: Tue 28 Nov 2023 12:51:21 +0000
ROA not before: Tue 28 Nov 2023 12:51:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43160
IP address blocks: 185.44.233.0/24 maxlen: 24
185.130.24.0/23 maxlen: 24
185.130.26.0/23 maxlen: 24
185.235.103.0/24 maxlen: 24
185.202.166.0/23 maxlen: 24
185.196.202.0/23 maxlen: 24
185.196.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:fb:f0:4b:7b:11:26:41:07:ea:02:0a:78:6d:17:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Nov 28 12:51:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a107f7d077fcc3779ce6da7c2d91c0fd2df1be63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2e:a5:d0:f5:0e:21:76:17:91:08:03:08:0f:
65:47:0c:66:96:1b:d8:fd:e7:57:b0:31:d1:ad:09:
a9:b8:5a:f0:f0:ee:e0:49:f0:9d:e5:f3:93:57:72:
6a:00:18:5a:87:7b:72:38:cf:5f:c5:2d:14:d7:55:
44:2d:e0:96:e5:8e:fc:01:5c:06:5c:7c:8b:54:99:
f0:7c:f9:aa:90:38:33:8b:8e:d7:e9:e6:06:a2:86:
dc:0b:39:32:8b:06:96:eb:bf:39:5a:c2:e2:2e:c3:
45:3b:38:a3:d7:ef:f0:fc:58:29:89:26:cd:1f:e9:
72:ef:8f:ae:f1:78:4b:e7:f0:cd:f6:36:2e:d5:62:
e1:17:7e:db:20:3e:58:9f:f2:84:96:d1:d2:eb:ae:
78:46:b5:1a:22:b1:93:66:98:c4:90:f6:3f:c2:47:
7c:65:ca:7d:dc:7a:0d:b4:de:20:a2:92:6f:61:71:
b5:e4:bc:c2:4e:7e:fe:65:01:bc:17:28:81:f6:96:
6f:76:9b:fd:cd:f2:d7:b1:eb:12:5c:94:8a:42:4a:
4b:6d:df:d4:18:ed:d1:c7:85:9c:bd:46:cc:e1:ff:
b1:62:7d:06:a9:c4:16:7d:49:46:c3:1d:f0:70:b1:
3f:2c:9c:ce:6f:ac:30:7f:54:f3:6b:f7:70:82:60:
d5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:07:F7:D0:77:FC:C3:77:9C:E6:DA:7C:2D:91:C0:FD:2D:F1:BE:63
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/oQf30Hf8w3ec5tp8LZHA_S3xvmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.233.0/24
185.130.24.0/22
185.196.202.0/23
185.202.166.0/23
185.235.103.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8e:f4:c9:5a:2c:06:c2:bb:5b:1b:8f:50:c5:d6:c7:03:21:
98:69:03:e7:d8:2f:6c:be:be:a4:34:74:e2:cc:af:e3:2e:f9:
f2:20:41:00:94:5c:2f:88:1c:f1:4f:94:06:8c:d9:72:7c:27:
a7:d6:66:45:c9:94:0f:3b:b4:c3:55:a0:03:4e:96:fa:e6:c7:
de:79:ad:1e:92:6a:c0:d0:8c:6a:a4:fd:7b:1c:d0:53:cd:0e:
e5:22:7a:8b:b0:95:6f:8f:a0:07:3d:1d:47:ac:90:47:d6:26:
0b:4f:33:23:e8:ba:eb:ad:6f:35:2a:9c:b4:90:ee:09:64:32:
04:a7:8d:9c:bf:24:ea:d2:50:29:92:a4:fb:b9:0d:c4:fb:04:
9d:f2:40:eb:42:85:78:f5:79:c9:3c:8e:f3:03:b1:d3:3a:83:
7f:14:92:14:f9:de:0d:3d:7e:7a:9a:5e:02:59:e9:db:ae:3a:
db:50:90:e1:99:9c:45:90:4c:72:ca:19:75:f0:15:72:3f:e7:
be:96:8a:70:8b:a4:97:bd:47:0e:51:eb:23:71:b8:e7:1f:1c:
2e:a4:80:8d:1a:93:8a:66:ea:09:7c:fa:8f:95:f9:4d:97:9d:
f9:d5:e8:ce:3b:e4:0f:58:69:ba:be:cc:7d:c4:05:6d:3b:d6:
a1:92:63:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:51 2024 by rpki-client on console-ams.rpki-client.org