Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/2nuv0QjnPqWyTGQO_oK5Lh85k-A.roa
File: 2nuv0QjnPqWyTGQO_oK5Lh85k-A.roa (raw, json)
Hash identifier: 6o15EZ75Lf4W3XZwKNBKFVo2GK0+6ePE3rc82jo3yBk=
Subject key identifier: DA:7B:AF:D1:08:E7:3E:A5:B2:4C:64:0E:FE:82:B9:2E:1F:39:93:E0
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 0189FDD99EDB01C7A23E4275C34F1207DA90
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/2nuv0QjnPqWyTGQO_oK5Lh85k-A.roa
Signing time: Wed 16 Aug 2023 10:17:24 +0000
ROA not before: Wed 16 Aug 2023 10:17:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203185
IP address blocks: 185.118.231.0/24 maxlen: 24
185.118.228.0/24 maxlen: 24
185.118.229.0/24 maxlen: 24
185.118.230.0/24 maxlen: 24
2a06:9600:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 20 Sep 2023 12:27:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:d9:9e:db:01:c7:a2:3e:42:75:c3:4f:12:07:da:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Aug 16 10:17:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da7bafd108e73ea5b24c640efe82b92e1f3993e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b7:aa:bf:57:1d:cf:59:20:92:c1:a5:31:bd:
6e:fc:42:64:84:a2:8b:7b:e5:76:90:c6:2b:dd:23:
0a:23:c2:5a:92:e5:df:90:04:6d:9e:a9:b8:a1:f6:
6f:e8:ed:b5:ae:ee:80:a8:77:6c:65:70:06:e8:c2:
2f:f4:76:3e:a3:22:4b:e2:63:fa:a9:5f:13:aa:3e:
36:90:ff:e1:38:8f:a2:65:07:d2:bd:de:3a:bf:41:
4c:ea:83:6b:61:05:74:d3:d2:25:81:ab:67:20:d0:
e5:a7:4f:b8:71:07:33:81:00:62:31:09:36:4b:27:
7a:22:5a:c7:f2:fd:25:df:af:71:cc:0b:96:84:cf:
ae:da:9a:f4:2f:9e:37:2b:37:8c:5f:4c:cf:52:1d:
7d:eb:4c:1f:cb:23:19:7f:e1:b0:08:9b:22:b5:f2:
66:63:1f:a2:82:8e:30:75:39:ae:70:9c:ca:a4:8c:
f1:b8:ae:ec:0e:80:0a:0c:28:5b:bb:fc:8b:e4:b8:
1b:c5:fc:36:26:29:06:6b:a6:76:88:48:ca:a4:62:
77:b3:a3:ce:55:54:c9:e4:e1:45:93:a0:b7:0b:55:
5a:21:7b:e0:2b:37:49:c7:b3:30:db:2d:c4:bc:b7:
6e:22:32:bf:f6:8e:72:60:d7:85:c2:a5:a6:4b:3f:
c0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7B:AF:D1:08:E7:3E:A5:B2:4C:64:0E:FE:82:B9:2E:1F:39:93:E0
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/2nuv0QjnPqWyTGQO_oK5Lh85k-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.228.0/22
IPv6:
2a06:9600:2::/48
Signature Algorithm: sha256WithRSAEncryption
bd:35:46:71:e5:93:aa:20:c4:9f:74:68:59:f1:b0:66:2d:08:
37:09:d3:9d:86:51:84:c2:1f:c2:ab:b7:cf:26:ce:a7:33:eb:
ae:62:e6:ad:0f:d7:32:b3:86:25:db:ed:5a:89:bb:0e:08:bb:
6c:9f:5c:45:c0:0a:fb:e3:1a:85:49:bd:0b:0d:7d:fc:0b:6c:
af:94:68:8d:42:48:3a:1c:e6:65:06:1a:10:82:87:29:a4:30:
ac:79:9d:e9:b6:09:1e:e3:14:53:3d:cf:98:8f:f8:11:03:74:
e6:9c:e8:49:6e:2e:93:90:de:b8:20:bd:b6:af:39:b0:d2:7d:
17:ef:f1:e5:99:0e:bd:33:6d:e6:9b:ef:ba:98:d6:b2:dd:db:
80:f8:b3:af:79:ac:5f:4e:93:dd:68:7e:b0:45:71:11:1b:8b:
c1:57:6a:90:58:bb:b4:24:93:c9:eb:21:51:f9:d1:1f:8e:56:
45:3b:13:d7:3d:41:4e:c2:d7:2c:80:2b:24:2d:67:e8:f4:1c:
6f:61:c2:72:4d:45:9c:32:90:9b:0e:3b:40:9d:5e:57:15:50:
17:44:5a:88:15:6b:c2:10:4e:8b:0f:b9:a5:04:e7:8f:80:80:
10:b4:07:fa:8a:5b:d2:48:aa:94:54:86:5d:07:58:d5:d3:f4:
c9:7a:4e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:20 2024 by rpki-client on console-fra.rpki-client.org