Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/K5KAAjTzd_izSJLdw6saQEaBBbc.roa
File: K5KAAjTzd_izSJLdw6saQEaBBbc.roa (raw, json)
Hash identifier: +zhv2keI/vTOMpMGDsXJYwnb5Dw6KHI4ZzKcNwguxkQ=
Subject key identifier: 2B:92:80:02:34:F3:77:F8:B3:48:92:DD:C3:AB:1A:40:46:81:05:B7
Certificate issuer: /CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Certificate serial: 01856D0A84B493B813E46C06BA8CB8152140
Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/K5KAAjTzd_izSJLdw6saQEaBBbc.roa
Signing time: Sun 01 Jan 2023 11:14:43 +0000
ROA not before: Sun 01 Jan 2023 11:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204649
IP address blocks: 185.244.12.0/22 maxlen: 22
80.73.208.0/21 maxlen: 21
80.73.216.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:84:b4:93:b8:13:e4:6c:06:ba:8c:b8:15:21:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Validity
Not Before: Jan 1 11:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b92800234f377f8b34892ddc3ab1a40468105b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8f:e5:02:3f:2e:91:cd:1e:7b:57:ea:6b:57:
59:16:d0:dd:fe:7b:cc:fd:85:61:45:5e:8f:e5:ca:
34:52:20:6b:04:df:ae:88:a5:12:85:77:87:a6:49:
de:47:0f:10:5a:80:84:da:36:a9:1e:9a:0b:0b:7a:
18:e4:dd:de:32:d0:3f:85:65:90:9e:25:aa:8d:bb:
ea:b0:2d:21:de:d0:f7:48:dd:ce:f8:04:44:00:3b:
7c:97:40:f6:52:42:2b:db:81:b8:15:e8:bf:5a:29:
f9:05:43:f8:de:8a:98:78:da:ba:3c:99:ba:3f:6e:
e9:53:30:95:bf:07:81:20:c0:37:16:89:bc:35:95:
bb:7a:ce:a8:16:cb:9c:e5:04:9a:11:ea:4d:ff:a8:
41:34:15:dc:d0:ca:c3:e9:6c:d7:50:19:32:bb:cb:
ae:1f:19:0e:ba:7d:74:c7:3d:2f:1b:d8:b7:ef:0d:
19:49:21:77:b6:01:37:51:13:1b:92:f1:b9:5d:75:
92:08:00:5e:6f:55:19:a7:6e:49:84:46:e7:83:b7:
36:ea:03:b5:0f:09:43:6a:96:3b:1c:2e:be:97:ff:
c0:1a:d9:37:32:57:7e:22:8f:45:60:70:d2:2e:c1:
98:ab:6c:81:b6:1d:da:2d:5e:31:02:11:04:11:fb:
07:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:92:80:02:34:F3:77:F8:B3:48:92:DD:C3:AB:1A:40:46:81:05:B7
X509v3 Authority Key Identifier:
keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/K5KAAjTzd_izSJLdw6saQEaBBbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.208.0-80.73.217.255
185.244.12.0/22
Signature Algorithm: sha256WithRSAEncryption
94:7e:d8:c1:d5:a8:a4:41:92:17:94:f4:0d:81:ce:0e:55:80:
10:b2:2f:5e:03:85:a7:17:57:48:76:79:74:0f:b4:03:4d:a4:
89:3f:47:91:16:36:1c:b1:6f:ac:e9:7f:f8:f3:68:50:e4:f1:
ae:6d:c7:54:8b:23:f8:34:91:b7:2c:02:f5:f2:61:d5:7d:08:
ef:c8:c0:79:f2:2c:5f:43:a6:1d:2e:91:9d:e0:c3:c9:66:01:
6b:74:39:ab:3d:c6:d0:0e:71:51:a5:11:ed:9d:3d:6d:eb:8b:
07:6a:7c:2a:5c:b1:ee:64:05:99:fc:1b:ad:ee:43:4e:d5:54:
dc:04:0f:8c:63:7c:4f:a2:51:ff:3a:70:8c:94:b6:a0:92:20:
2e:91:0e:56:8d:b5:a4:d0:39:87:43:86:4f:e5:cd:91:7a:0f:
2b:6a:56:8a:9d:ae:63:ce:bb:8e:4d:bf:66:30:2e:98:eb:80:
aa:2f:75:f5:e1:57:a1:a0:75:ef:f0:64:6c:b6:4f:08:a2:f9:
6e:92:7c:7a:c3:a5:e7:f3:d0:b7:dd:a3:e8:51:b2:a2:54:8b:
94:81:a9:70:67:6d:6f:9f:26:3b:29:95:45:53:30:18:aa:64:
d6:48:22:74:84:08:f8:4c:07:17:f3:ec:65:b4:89:a7:70:71:
68:ac:25:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:33 2024 by rpki-client on console-ams.rpki-client.org