Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/SVUXd6mL15_2Y6LEll0eOCnmfE4.roa
File: SVUXd6mL15_2Y6LEll0eOCnmfE4.roa (raw, json)
Hash identifier: k/b0/AWzLARRB1qvAlP8zFpgOY0mdG1ocXBHTlie7tE=
Subject key identifier: 49:55:17:77:A9:8B:D7:9F:F6:63:A2:C4:96:5D:1E:38:29:E6:7C:4E
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 0192B499954C3E3C7E6ABCC491C9B3DB1376
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/SVUXd6mL15_2Y6LEll0eOCnmfE4.roa
Signing time: Tue 22 Oct 2024 14:20:17 +0000
ROA not before: Tue 22 Oct 2024 14:20:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205059
IP address blocks: 185.231.108.0/24 maxlen: 24
185.231.109.0/24 maxlen: 24
185.231.110.0/24 maxlen: 24
185.231.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 13:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:99:95:4c:3e:3c:7e:6a:bc:c4:91:c9:b3:db:13:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Oct 22 14:20:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49551777a98bd79ff663a2c4965d1e3829e67c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:95:ad:86:8e:19:78:c9:85:9a:87:e8:a4:
a3:7a:a7:a8:b8:45:6c:4f:c1:40:22:32:d7:f5:43:
54:68:6a:fc:50:03:0c:85:37:7f:f5:21:4d:4f:aa:
35:0a:20:85:bf:8d:e8:ef:7e:d9:c2:29:72:37:8d:
2c:76:20:b4:6e:3a:d9:85:14:15:de:fa:93:f6:36:
9e:d9:a7:6c:e2:c2:0b:8e:6e:cb:59:17:a0:a7:6b:
2f:bc:f8:cf:24:d1:a1:2d:fb:fd:d0:52:41:ad:ff:
0a:eb:45:97:d8:0a:b0:f3:54:ac:b9:0e:d3:b0:3a:
f2:fd:48:0d:89:bf:46:f3:54:20:a2:61:34:06:96:
51:09:95:f2:79:f2:d9:2c:8b:6d:b0:f5:61:8e:98:
bd:04:a9:6c:f3:2a:aa:02:69:77:74:50:ef:35:6d:
b3:17:0f:70:5b:92:c7:96:87:39:ab:b2:36:d9:87:
b1:3b:fb:47:e7:dc:2d:26:d5:a7:d5:ef:4d:b5:f7:
00:8d:48:17:8f:ca:fc:4a:df:c8:4c:cc:6b:52:f0:
be:88:2a:5c:41:35:60:1f:1b:f0:e8:f7:9f:d8:bc:
60:ab:6e:b8:12:7e:a8:5b:fb:61:11:e3:60:8f:a1:
87:3b:34:a8:79:95:5f:6d:c3:5c:a8:b9:97:63:c8:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:55:17:77:A9:8B:D7:9F:F6:63:A2:C4:96:5D:1E:38:29:E6:7C:4E
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/SVUXd6mL15_2Y6LEll0eOCnmfE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.108.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:fd:66:eb:73:f4:36:60:c3:eb:d1:55:25:15:d3:e9:3a:90:
23:51:ac:d6:05:d0:44:a3:3c:94:13:01:b8:d2:12:87:06:52:
16:3b:c5:0b:4d:1e:71:ec:7a:17:40:a5:b1:ec:fa:fb:16:d0:
81:2e:38:5a:2b:7b:4f:62:05:5a:1d:d1:2e:51:26:58:d4:69:
73:dd:db:44:1b:b7:ab:2b:69:66:52:dc:13:6d:9e:58:6b:f3:
6a:47:c5:e7:6b:1a:44:04:2b:c8:d6:c8:9d:55:60:b6:7c:96:
21:5e:3a:5a:66:fe:cd:df:d0:28:b7:ba:80:74:b7:c3:0c:8d:
35:a5:7b:d8:78:e5:d3:15:66:ae:1c:fd:69:59:8f:24:0c:6f:
4c:76:fb:0c:37:48:11:cc:4f:f6:17:dd:eb:b7:3e:a1:3c:9f:
54:58:8a:a4:19:14:c4:13:1b:93:51:94:bd:e8:f0:1c:7f:7b:
b4:6a:fb:56:8d:65:16:8d:fb:f6:10:19:a1:d7:3b:43:12:02:
16:a4:36:54:a0:fb:28:2a:96:e8:37:92:44:47:5f:4a:49:f6:
fc:33:12:d6:1a:66:69:0a:ac:33:93:b7:0c:64:28:8c:95:e3:
71:3d:1d:0c:08:2b:cf:46:e3:a4:aa:29:38:32:9e:8b:38:9e:
47:ca:b0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 17:28:41 2024 by rpki-client on console-fra.rpki-client.org