Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/hSNn8C6l9KmA2LBWbkZ3yVL-5w4.roa
File: hSNn8C6l9KmA2LBWbkZ3yVL-5w4.roa (raw, json)
Hash identifier: 7LxSaLounvzIEtdLZ3F78lMgIcEUHPQ4kNUiqErzo44=
Subject key identifier: 85:23:67:F0:2E:A5:F4:A9:80:D8:B0:56:6E:46:77:C9:52:FE:E7:0E
Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial: 01856E666B17BF707D9446B348EB9B14264A
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/hSNn8C6l9KmA2LBWbkZ3yVL-5w4.roa
Signing time: Sun 01 Jan 2023 17:34:43 +0000
ROA not before: Sun 01 Jan 2023 17:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.1.205.0/24 maxlen: 24
2001:7f8:111::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:66:6b:17:bf:70:7d:94:46:b3:48:eb:9b:14:26:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Validity
Not Before: Jan 1 17:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=852367f02ea5f4a980d8b0566e4677c952fee70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:a8:9b:24:d8:ef:0e:a1:a8:fa:b1:a7:e6:
c0:5c:72:13:e7:eb:a1:04:be:2c:66:2e:0d:81:bc:
70:77:c7:cd:82:80:19:38:db:b8:22:08:98:47:7d:
9b:1e:89:c6:da:69:5d:8d:60:1b:a5:30:c0:ad:82:
95:01:9f:1f:31:2c:ce:b0:1d:74:1b:e1:28:12:08:
23:f4:ac:ae:ac:80:fa:63:41:40:d2:29:c4:d5:ec:
6a:1e:a3:ef:95:dc:7c:fb:31:08:56:33:24:a3:b7:
47:79:ef:79:b6:4d:d6:c7:cc:78:84:d7:1c:86:d6:
86:c9:48:d8:2a:75:b4:60:93:96:39:50:e3:b3:46:
18:30:de:37:d8:e7:9e:4d:4b:c1:22:1e:f2:24:09:
af:cf:dd:e0:f3:7c:c6:e7:91:6d:d2:e7:5b:ae:1b:
be:18:fe:6c:99:2c:c0:32:32:c1:19:d4:2c:ec:15:
19:71:b1:6e:76:6a:04:54:0d:6f:ef:fd:eb:7d:02:
ed:33:cf:a7:68:8c:8f:fe:90:a9:da:77:d3:2b:32:
6d:28:01:f1:a8:d5:2f:53:f4:39:66:cf:a6:7d:6f:
b1:83:33:13:4d:fe:9d:5b:6e:e6:74:1e:f1:76:e0:
7b:b7:7e:3e:4c:44:40:1b:52:c8:4c:b0:45:18:55:
ec:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:23:67:F0:2E:A5:F4:A9:80:D8:B0:56:6E:46:77:C9:52:FE:E7:0E
X509v3 Authority Key Identifier:
keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/hSNn8C6l9KmA2LBWbkZ3yVL-5w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.205.0/24
IPv6:
2001:7f8:111::/48
Signature Algorithm: sha256WithRSAEncryption
22:83:a9:c8:ae:46:e0:a4:bb:d9:69:f7:5d:54:da:54:fc:43:
22:de:f1:2b:45:9a:71:5b:d8:99:6d:83:26:4e:0c:b8:e5:89:
a6:e1:31:eb:9d:60:2e:83:73:f9:36:36:7c:52:84:d4:fa:d3:
ba:f5:c7:ef:6a:2b:4d:63:40:73:8e:e1:13:b9:25:7e:41:5b:
5b:e7:89:5c:c9:e7:5e:c7:aa:38:da:09:cb:52:33:27:6e:52:
12:d9:08:1b:8b:6b:2f:8d:ec:4e:f6:e0:7b:b6:8a:4d:36:0d:
1a:8e:0a:18:9e:ad:df:c7:e1:96:f5:c7:9a:2c:21:dc:68:e8:
7c:f3:ac:fd:2f:4a:ba:a7:62:0e:ee:de:ce:05:ef:de:e1:2f:
99:c7:f8:10:ca:c3:df:05:34:ca:45:7e:27:f8:ff:40:96:4a:
04:83:05:86:ed:e8:11:ef:e1:85:d9:75:f0:fd:fa:40:b6:9d:
f6:5b:da:f7:b4:0d:d9:7e:91:fa:f2:c6:1a:3b:ca:ad:12:4c:
92:b9:02:70:81:f4:a5:7f:22:22:c6:21:77:91:5f:6c:d0:e3:
96:0e:87:aa:04:b2:a0:76:46:2e:45:ce:7a:59:4b:6e:0e:03:
8f:a2:d2:55:95:3f:b1:c9:6d:6b:15:0f:72:4f:3b:c6:b6:9c:
fe:28:8d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:46 2024 by rpki-client on console-ams.rpki-client.org