Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wPxbay5VBYwDjlDyOe2_W5nIRR4.roa
File: wPxbay5VBYwDjlDyOe2_W5nIRR4.roa (raw, json)
Hash identifier: k2QgLiYtBEExGWoJHw/dvwEYWSKugxKER1E2lVxHhCQ=
Subject key identifier: C0:FC:5B:6B:2E:55:05:8C:03:8E:50:F2:39:ED:BF:5B:99:C8:45:1E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0186C57DFBA4F9B65C05283C9BDEF211C182
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wPxbay5VBYwDjlDyOe2_W5nIRR4.roa
Signing time: Thu 09 Mar 2023 08:30:13 +0000
ROA not before: Thu 09 Mar 2023 08:30:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29066
IP address blocks: 185.255.125.0/24 maxlen: 24
185.255.126.0/24 maxlen: 24
185.240.123.0/24 maxlen: 24
185.194.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Mar 2023 13:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:7d:fb:a4:f9:b6:5c:05:28:3c:9b:de:f2:11:c1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 9 08:30:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0fc5b6b2e55058c038e50f239edbf5b99c8451e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:56:0f:3e:13:0d:24:0a:66:1e:03:4b:90:12:
02:6c:a3:cc:52:13:ea:0d:fd:b5:7c:81:af:5b:09:
80:72:ff:14:3f:e1:f9:4c:8e:19:67:7d:3c:33:61:
75:dd:66:61:05:d9:df:43:e3:f6:15:bf:f0:32:2a:
db:70:73:d5:a9:d5:10:4a:13:22:72:f5:59:63:84:
78:0e:8d:52:c7:40:00:9f:4f:50:c2:9f:8e:86:52:
14:29:fa:bc:27:5d:26:7f:39:f8:32:3a:d6:03:80:
8d:48:cd:16:72:7f:c9:6d:0d:5e:c1:67:9a:fa:c8:
60:84:7b:cd:f1:34:21:cd:54:24:0e:3e:4f:24:98:
a6:ae:6f:fc:0e:92:dc:3f:af:89:fb:01:e3:0b:a7:
c5:62:58:81:ec:02:75:73:de:96:85:91:67:e3:8c:
80:5e:7d:f8:3e:1a:4e:c2:95:67:66:c7:e8:29:7c:
de:31:48:ae:18:c4:09:81:8e:32:fc:90:fa:b0:fb:
80:f7:73:f8:a4:5a:96:6f:4a:f2:59:87:d8:45:80:
1a:cf:3b:18:78:44:80:69:fc:d9:33:4a:57:f1:13:
57:a1:b4:53:5a:97:1d:78:2f:03:4a:1d:6f:29:08:
1f:dd:50:db:13:09:5f:82:68:51:12:42:7e:14:27:
f1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FC:5B:6B:2E:55:05:8C:03:8E:50:F2:39:ED:BF:5B:99:C8:45:1E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wPxbay5VBYwDjlDyOe2_W5nIRR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.178.0/24
185.240.123.0/24
185.255.125.0-185.255.126.255
Signature Algorithm: sha256WithRSAEncryption
a7:96:74:e3:1b:3c:dd:20:84:a1:3e:a5:18:9b:97:03:d6:25:
ef:4b:ce:9b:3c:5b:2e:cd:09:46:83:ef:6e:f0:ff:81:a0:95:
e1:c6:21:9e:0f:8f:ad:07:f4:cb:d3:a8:7a:7f:62:d1:dc:2d:
99:11:74:4f:62:5e:24:e6:6a:a9:f3:48:a4:3f:b6:e9:6d:23:
5a:43:dc:78:6d:02:10:ea:ac:24:7e:c9:e3:29:35:88:18:7d:
9d:08:e3:03:be:88:8e:08:6c:3a:ef:b7:46:3b:c8:b0:fe:d9:
43:98:82:9f:15:6c:d3:63:26:93:f0:ee:56:ff:95:45:9a:b0:
5f:96:55:94:28:ff:03:d4:7b:b8:0a:87:f6:de:8f:f6:1c:32:
e9:ae:99:b7:b2:af:30:45:e2:69:13:88:76:a7:19:19:23:e9:
4c:e2:cc:b1:2d:bb:d4:6c:21:01:ed:43:51:51:d4:a9:53:b5:
5c:59:5e:46:b6:36:56:fd:0f:fb:57:e3:c1:d0:9d:ab:68:71:
3b:a6:31:93:85:08:88:1a:1a:df:0a:e8:8b:84:ea:04:dc:b6:
21:75:19:48:fc:9a:31:e4:40:02:be:37:78:3a:ac:1f:d8:08:
e2:1b:c3:ae:d4:1e:93:eb:d6:45:50:61:ba:b7:ec:db:a1:f5:
4c:de:55:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:30 2024 by rpki-client on console-ams.rpki-client.org