Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/CvFm1HiOLuxdTM1WxFYxV3ZBb84.roa
File: CvFm1HiOLuxdTM1WxFYxV3ZBb84.roa (raw, json)
Hash identifier: RSHBWHQ24l6R912sd7HcfxTh2ZAlFXUddanCsylsdqE=
Subject key identifier: 0A:F1:66:D4:78:8E:2E:EC:5D:4C:CD:56:C4:56:31:57:76:41:6F:CE
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01856CF8551C8570E13CA9C1CE465D23FC30
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/CvFm1HiOLuxdTM1WxFYxV3ZBb84.roa
Signing time: Sun 01 Jan 2023 10:54:52 +0000
ROA not before: Sun 01 Jan 2023 10:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31083
IP address blocks: 130.185.232.0/24 maxlen: 24
217.174.147.0/24 maxlen: 24
217.174.146.0/24 maxlen: 24
178.132.87.0/24 maxlen: 24
178.132.86.0/24 maxlen: 24
130.185.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:55:1c:85:70:e1:3c:a9:c1:ce:46:5d:23:fc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 10:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0af166d4788e2eec5d4ccd56c456315776416fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:73:24:d4:08:bb:9d:98:59:2f:0a:4e:92:05:
3a:f6:a5:eb:8d:3f:18:42:be:e6:82:e4:2e:10:7b:
f2:2d:dd:aa:54:f6:3a:6e:23:64:22:68:c2:8d:6d:
e2:d0:db:c5:b2:0b:7b:96:36:19:cd:a5:08:6f:9f:
89:06:0c:d4:24:88:35:89:1d:f8:bf:b0:bc:c8:6d:
a1:fb:09:63:2d:62:de:68:fa:25:2f:cb:73:68:07:
18:03:3d:be:ac:33:77:84:75:e7:3d:52:5c:02:60:
e9:dc:c6:68:62:63:43:d8:37:19:e3:ae:da:48:71:
09:c0:b2:da:84:c8:5c:23:cb:18:14:52:0a:05:31:
68:60:e6:c0:12:58:d6:a6:1f:d4:40:2b:af:fe:f4:
46:05:9d:d3:05:c1:39:07:4d:39:47:cd:73:eb:92:
b1:49:ee:c3:ba:d7:f0:bb:7b:0f:e9:00:a2:de:d9:
fb:74:c5:3c:e7:7a:53:09:dd:ce:b2:79:bb:cb:05:
f7:b1:4d:25:ce:f4:02:f2:59:65:db:58:a1:65:a2:
c5:5a:49:32:7c:e0:9b:4f:08:47:37:49:ce:57:b7:
d4:4a:59:42:db:18:45:17:b5:23:c3:f8:c4:a3:a4:
8b:12:83:aa:a2:8a:4d:b9:17:73:4a:56:b7:0d:9f:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F1:66:D4:78:8E:2E:EC:5D:4C:CD:56:C4:56:31:57:76:41:6F:CE
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/CvFm1HiOLuxdTM1WxFYxV3ZBb84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.225.0/24
130.185.232.0/24
178.132.86.0/23
217.174.146.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:63:b7:75:c6:8d:c7:17:eb:4e:ab:fd:97:c7:eb:4f:75:79:
c8:0c:69:9f:e7:47:ea:aa:98:2b:cd:f7:40:cb:a2:13:21:4b:
62:0a:61:26:37:16:b3:5a:6e:43:a0:fb:c7:2e:97:f9:37:12:
55:18:95:2e:fa:e5:ed:16:f3:03:5d:c0:5f:d8:fb:62:fe:ea:
78:c5:99:d0:79:96:fe:91:66:b4:bc:22:db:68:68:58:1e:88:
b9:54:3c:df:ed:9b:92:34:67:3c:29:0e:b5:53:38:df:75:3d:
94:54:1a:2b:97:ff:06:62:5b:c9:c8:6d:b9:f1:7f:df:63:34:
5c:aa:e2:24:20:e4:eb:86:7a:42:fd:ab:8a:9d:a8:3b:0a:d5:
6a:07:ec:c3:6f:da:56:f5:db:cb:b5:86:a7:a9:3b:ef:ed:f5:
a3:31:2c:a8:ad:f1:7b:69:22:64:72:e2:f6:72:be:cf:31:7f:
bd:7f:29:88:84:11:63:bc:c4:f9:d8:37:54:41:fb:87:a8:10:
dd:3a:e8:53:2e:64:14:6e:11:d8:fe:16:ad:82:e4:2d:58:cc:
85:2e:ec:79:bb:57:86:64:87:b8:47:35:cf:52:ab:32:05:3f:
a8:2d:67:45:52:4f:e2:22:14:8b:34:31:6c:e4:38:70:d0:6a:
00:11:fd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:22 2023 by rpki-client on console-ams.rpki-client.org