Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fLYlCTiq-5g1KlS1HuruiPxNtrE.roa
File: fLYlCTiq-5g1KlS1HuruiPxNtrE.roa (raw, json)
Hash identifier: uIYzGYeEL1Ck/mgApNb6f1vErCsp/O35fPJdBOJ45mg=
Subject key identifier: 7C:B6:25:09:38:AA:FB:98:35:2A:54:B5:1E:EA:EE:88:FC:4D:B6:B1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0189217B86C3557565C3C7FA33551BAD591E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fLYlCTiq-5g1KlS1HuruiPxNtrE.roa
Signing time: Tue 04 Jul 2023 15:18:10 +0000
ROA not before: Tue 04 Jul 2023 15:18:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13830
IP address blocks: 185.225.22.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 10:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:7b:86:c3:55:75:65:c3:c7:fa:33:55:1b:ad:59:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 4 15:18:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cb6250938aafb98352a54b51eeaee88fc4db6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fb:16:b4:21:10:e1:1d:38:0b:70:32:e9:fd:
e3:38:1f:13:5a:01:ad:6f:96:60:e4:5d:58:83:a8:
4d:1a:50:1b:4e:d5:0e:ef:f2:82:f2:71:2d:97:cc:
57:8e:b8:06:d0:c7:a0:51:2f:60:c3:a5:77:7b:9a:
7f:09:3d:25:87:ae:73:83:47:01:50:a1:ae:11:89:
b6:3c:2b:57:2f:d8:b1:b3:5f:60:0d:82:16:53:2e:
5d:77:47:65:da:a3:e4:58:69:20:31:05:d3:0e:75:
8d:54:9a:ef:ce:b8:d9:7f:bd:cc:a9:0e:6b:58:e9:
35:5d:49:32:45:ec:fc:4f:e6:0d:fe:08:0a:f5:1e:
2a:d7:57:6c:c4:31:fc:07:24:3c:d3:71:c6:be:20:
77:78:9b:26:00:c8:11:d5:c3:09:5f:62:71:5a:06:
18:81:00:c7:af:f0:6e:25:fc:c7:95:13:5c:fb:99:
96:85:3e:91:bf:ea:87:b7:89:53:ab:51:70:b4:41:
bd:07:ec:4a:cb:09:23:f8:a8:53:76:85:87:9d:a7:
f3:d2:7e:4a:b8:e8:08:ea:a4:af:6e:d4:f2:52:03:
e1:15:ec:2c:01:0c:80:4c:af:eb:bd:73:6f:ed:d9:
a0:46:57:c7:cd:eb:41:c8:d6:57:30:8f:66:74:94:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B6:25:09:38:AA:FB:98:35:2A:54:B5:1E:EA:EE:88:FC:4D:B6:B1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fLYlCTiq-5g1KlS1HuruiPxNtrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.235.0/24
185.223.82.0/24
185.225.22.0/24
185.246.115.0/24
193.58.144.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:90:3a:13:27:cc:67:8e:3a:72:43:fe:b9:a9:b4:4a:3e:d0:
89:21:61:ee:a4:51:6e:47:d9:47:47:f9:6f:a2:07:66:1b:db:
86:68:c8:17:f0:d7:09:68:d4:9e:50:0f:ad:44:cb:f9:47:e8:
61:6f:29:eb:48:85:28:4f:9a:f1:3e:9e:05:1e:e4:28:ba:e7:
8d:17:64:a9:41:11:bb:92:e2:dc:8d:66:57:c7:06:06:60:4a:
5f:04:c5:4d:75:21:40:4b:08:12:d7:b7:9f:a6:2e:a0:9c:66:
a0:02:73:76:c0:0b:e6:f6:5b:4a:72:28:2c:46:59:50:ed:6c:
8c:60:8c:c4:25:47:f5:8e:15:3e:88:f5:e1:0f:13:71:fe:ff:
76:4f:97:e6:c1:15:a0:af:6e:c0:98:a5:43:79:8d:bf:0f:22:
3d:9a:df:b1:19:bc:f9:8d:be:4f:f7:c9:0a:28:3a:e1:5b:61:
ce:ef:85:53:a6:dc:bc:77:15:c6:04:d4:bb:32:24:d5:de:8d:
f5:ef:65:9a:46:02:a1:ca:7f:f9:87:32:58:8f:87:15:fa:d0:
80:ec:aa:61:9e:3e:f1:3a:a3:6c:1a:50:3d:f6:16:2e:98:ec:
4d:44:c6:e8:a8:97:e8:1a:5d:14:0e:81:9d:5b:b9:af:5b:c5:
db:0d:57:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org