Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/_BXxp-1J-n7pvI_hob0vuSex49M.roa
File: _BXxp-1J-n7pvI_hob0vuSex49M.roa (raw, json)
Hash identifier: Sq7RD+Mru3CV/5NKPOb2HdRNOe75R/YUahzzXNOsq8c=
Subject key identifier: FC:15:F1:A7:ED:49:FA:7E:E9:BC:8F:E1:A1:BD:2F:B9:27:B1:E3:D3
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 01856E38DFFF908A9F265DA3671980F83CA2
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/_BXxp-1J-n7pvI_hob0vuSex49M.roa
Signing time: Sun 01 Jan 2023 16:44:59 +0000
ROA not before: Sun 01 Jan 2023 16:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203185
IP address blocks: 185.118.231.0/24 maxlen: 24
185.118.228.0/24 maxlen: 24
185.118.229.0/24 maxlen: 24
185.118.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 10:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:df:ff:90:8a:9f:26:5d:a3:67:19:80:f8:3c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Jan 1 16:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc15f1a7ed49fa7ee9bc8fe1a1bd2fb927b1e3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:39:4a:f2:b6:32:03:72:62:ae:58:db:bb:
8a:03:6d:90:5f:24:da:02:5f:91:f3:1f:a9:de:97:
24:85:0f:c6:20:41:5d:71:51:5d:6d:24:7c:be:65:
0e:55:4a:96:2d:dc:56:f1:96:27:68:a3:61:ea:9e:
6d:68:1b:52:0b:26:4f:9d:a5:a8:04:c9:67:ac:7f:
55:db:e2:67:d9:34:e5:d7:46:1e:f1:ec:26:6b:35:
c5:31:79:8a:ae:bf:6b:a2:44:a9:60:8d:36:49:a2:
c8:ec:1f:28:7d:32:46:8f:86:b4:ef:c4:05:77:bf:
bf:70:c4:58:e4:16:c4:09:a5:3e:42:62:7d:d7:56:
0d:7b:92:c6:39:88:d0:51:61:3e:ed:4e:0a:09:72:
09:a4:ff:c4:ff:ee:53:df:49:0f:ff:da:a8:ea:5b:
5d:69:87:14:1c:7f:1f:9d:f1:c2:ed:b9:c4:f2:c0:
53:83:4f:df:85:67:75:ea:28:2a:ee:e2:f6:b3:c7:
1c:70:fd:53:bb:a6:c6:db:ca:63:c7:f8:ca:6c:11:
33:bd:7a:4d:09:12:7d:b9:c2:f2:20:15:bf:6e:43:
59:31:4f:44:d5:eb:f0:7b:de:90:b2:dd:29:93:85:
0f:e5:c4:6a:3b:6c:d5:ee:2c:d9:a9:f0:6f:71:2a:
e5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:15:F1:A7:ED:49:FA:7E:E9:BC:8F:E1:A1:BD:2F:B9:27:B1:E3:D3
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/_BXxp-1J-n7pvI_hob0vuSex49M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.228.0/22
Signature Algorithm: sha256WithRSAEncryption
22:90:b1:99:43:e2:0f:56:e6:40:fe:df:22:53:f4:c1:8e:fe:
77:6e:7e:3e:94:7e:5a:32:ad:eb:0a:4e:8e:4f:00:82:24:18:
06:f7:e1:95:d1:ba:4a:97:03:40:ce:b7:bd:9a:be:80:a1:fd:
72:ed:1f:f0:93:b9:61:a6:c1:f9:05:eb:d7:a0:49:8f:a5:11:
5a:38:a5:aa:d6:cc:55:ac:53:d7:e6:f9:48:1d:b5:a3:69:21:
e6:0e:21:07:0d:64:12:f3:41:8a:4c:66:96:00:81:25:5e:12:
9a:10:76:e2:b1:e1:b0:0b:ac:44:fc:52:43:a8:1c:00:e7:af:
98:ab:61:3c:46:7a:b7:b7:3f:ff:b1:ad:77:e4:75:64:5c:31:
18:c3:36:e7:b8:4b:7e:48:e2:6e:5b:9a:5e:b7:ca:7d:4d:bb:
cc:8d:38:56:d3:9e:25:0c:3c:52:7c:56:55:e9:b7:c5:90:37:
0b:eb:a7:06:08:d8:2f:51:a7:70:61:95:0d:6b:36:00:02:99:
b1:13:aa:f6:bb:20:a8:1c:8f:7b:c2:53:8f:9b:a0:5a:00:48:
36:0e:cf:da:bd:e7:00:11:29:c2:14:27:c2:a3:bb:a6:66:9e:
b9:b0:f7:71:ea:52:7f:5a:56:19:65:52:61:f1:0f:21:cb:2b:
94:1a:1c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:20 2024 by rpki-client on console-ams.rpki-client.org