Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/B9JnJQ9jSit2qhzh_7gwGc1vFMw.roa
File: B9JnJQ9jSit2qhzh_7gwGc1vFMw.roa (raw, json)
Hash identifier: W0O17TGGbsJnCBH5PbtHUWXciYRosomfySaVuhQaBIk=
Subject key identifier: 07:D2:67:25:0F:63:4A:2B:76:AA:1C:E1:FF:B8:30:19:CD:6F:14:CC
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 0185723110B7DBF0C758309C420168DAF2F6
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/B9JnJQ9jSit2qhzh_7gwGc1vFMw.roa
Signing time: Mon 02 Jan 2023 11:14:56 +0000
ROA not before: Mon 02 Jan 2023 11:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202829
IP address blocks: 185.152.188.0/22 maxlen: 24
194.11.83.0/24 maxlen: 24
194.11.16.0/24 maxlen: 24
194.11.19.0/24 maxlen: 24
194.11.25.0/24 maxlen: 24
2a07:80c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:10:b7:db:f0:c7:58:30:9c:42:01:68:da:f2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Jan 2 11:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07d267250f634a2b76aa1ce1ffb83019cd6f14cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e0:83:89:5d:48:d6:30:37:0f:48:07:fc:e6:
69:70:06:81:76:53:59:ff:e4:c3:a1:42:9f:cf:ef:
90:06:70:14:6d:71:e6:46:77:fc:75:09:de:dd:df:
a8:68:ce:9f:c6:65:cd:cf:1f:39:21:ed:76:a7:75:
ac:7f:27:85:9e:5b:ae:7b:61:16:37:f0:dc:97:7f:
d8:ea:5c:82:f5:40:12:86:1b:72:c8:4b:9d:b0:fb:
7a:49:d4:5c:18:eb:c5:5c:03:66:3a:33:76:a9:37:
1f:c3:fe:be:61:b5:a2:cc:09:f6:90:4b:a5:be:00:
0b:ce:1d:3c:bc:c2:76:6f:f5:c0:e4:07:13:a7:c9:
72:97:90:f5:81:ee:3d:b9:e8:56:64:8e:43:e3:59:
fa:98:b1:53:2e:bd:3d:54:50:e6:0b:79:62:6c:db:
17:1c:df:d0:ce:2e:3e:85:03:c0:1c:65:7d:bc:21:
96:c3:48:97:31:ef:b4:6d:25:b4:16:86:1e:53:5f:
32:75:ef:d4:4f:ba:fc:28:5e:dc:e6:a0:27:71:3e:
4a:36:cf:85:a2:97:2a:3e:8e:80:a4:f1:c9:49:fa:
4b:81:56:a9:28:6e:16:d7:dc:f4:75:ac:ec:e6:35:
31:40:43:f8:f9:33:e4:f8:ee:3f:d6:6b:af:ca:bb:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D2:67:25:0F:63:4A:2B:76:AA:1C:E1:FF:B8:30:19:CD:6F:14:CC
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/B9JnJQ9jSit2qhzh_7gwGc1vFMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.188.0/22
194.11.16.0/24
194.11.19.0/24
194.11.25.0/24
194.11.83.0/24
IPv6:
2a07:80c0::/29
Signature Algorithm: sha256WithRSAEncryption
72:d3:5e:52:1b:0c:33:aa:d1:26:44:67:55:38:e7:24:cc:f5:
9a:9e:9b:60:7d:23:72:ef:c6:a3:ae:f8:45:af:5f:86:37:85:
62:f0:05:c8:1b:dd:37:0c:86:64:28:c7:fa:93:5e:98:71:58:
8f:c0:b5:77:38:25:1e:0c:7f:2d:ff:d3:a3:ad:6c:6d:93:5c:
b9:e1:e3:52:90:a3:11:3a:60:d7:12:01:25:ee:ec:4e:3e:44:
47:c8:dc:22:0c:a7:55:25:aa:fc:77:03:35:07:b1:5f:2a:84:
b1:ce:59:70:de:68:f8:5f:cc:fe:fb:3f:7e:48:11:c0:d7:ec:
0c:6f:28:ce:2b:6a:a6:be:93:65:ab:4f:87:f5:2b:f6:27:99:
e9:18:28:c4:47:fb:5d:c1:9d:06:28:6c:94:58:2a:e5:aa:73:
cc:31:81:a4:63:04:19:b6:9b:1c:35:02:94:6d:d0:77:75:a3:
33:99:35:06:6f:09:05:dc:91:4d:31:82:04:b6:56:80:6e:92:
56:e6:75:86:3e:7b:4e:36:4d:73:34:85:7a:7b:75:64:5d:aa:
f8:e1:e1:0b:30:f9:6c:ce:8f:11:08:32:fc:22:80:ea:fc:71:
e3:ad:e2:2b:0e:22:b2:aa:c3:8d:33:a8:6f:34:09:d3:f2:7a:
a1:8b:d8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:10 2024 by rpki-client on console-ams.rpki-client.org