Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/S_luMzlwCpQhkqHP2qVdoTGD8xc.roa
File: S_luMzlwCpQhkqHP2qVdoTGD8xc.roa (raw, json)
Hash identifier: Dyy+4AAizMVeXWvtwLWPa0gmVpraK7Nrnq9qzgTL2Wg=
Subject key identifier: 4B:F9:6E:33:39:70:0A:94:21:92:A1:CF:DA:A5:5D:A1:31:83:F3:17
Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial: 018B04D8E031280E2CDF90910E0232383E32
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/S_luMzlwCpQhkqHP2qVdoTGD8xc.roa
Signing time: Fri 06 Oct 2023 11:56:43 +0000
ROA not before: Fri 06 Oct 2023 11:56:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203228
IP address blocks: 185.124.72.0/22 maxlen: 22
185.124.75.0/24 maxlen: 24
2a03:93e0::/32 maxlen: 32
2a03:93e0:1000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:d8:e0:31:28:0e:2c:df:90:91:0e:02:32:38:3e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Validity
Not Before: Oct 6 11:56:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bf96e3339700a942192a1cfdaa55da13183f317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:c9:0d:8c:33:b0:69:5d:cc:c1:e1:15:ff:
02:31:c3:7b:70:e0:38:25:c4:69:99:b7:f4:33:e3:
36:25:2b:49:94:6f:b8:d9:6e:2b:12:40:05:ea:c4:
e7:d0:75:cc:d2:23:bb:5d:28:b1:b5:af:37:a7:14:
45:1d:3f:50:ad:49:f9:26:87:46:b8:08:0b:7b:b6:
70:5d:a7:cb:59:09:33:5c:85:a9:c7:f8:97:2e:b1:
c7:67:9c:f1:bd:73:5b:c4:7b:81:41:8e:7b:54:a7:
f6:1b:c2:ce:bd:ca:4f:be:2e:da:31:4f:4b:96:53:
e9:d7:95:cd:1a:65:61:4b:9d:fa:f8:24:2f:3f:eb:
16:fa:f2:3b:a5:ad:9a:c0:74:b9:fb:b0:47:94:b6:
8d:a1:65:4d:46:b7:20:4e:7f:c0:2e:9b:3e:ae:df:
9a:5d:bc:5c:e9:99:44:eb:ec:92:26:fb:20:80:15:
8f:5c:c4:63:ef:57:f0:87:55:13:dd:89:2e:40:c3:
d5:10:08:d8:67:23:35:68:ab:be:56:4c:5a:d1:68:
b3:20:ea:ee:c2:e0:2d:26:28:bd:17:ad:38:21:db:
0b:6e:cb:a6:4e:d1:33:f4:fe:89:6a:6a:fd:1a:74:
fa:a1:bf:4b:58:65:2c:70:c6:b3:6b:d1:50:3f:70:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F9:6E:33:39:70:0A:94:21:92:A1:CF:DA:A5:5D:A1:31:83:F3:17
X509v3 Authority Key Identifier:
keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/S_luMzlwCpQhkqHP2qVdoTGD8xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.72.0/22
IPv6:
2a03:93e0::/32
Signature Algorithm: sha256WithRSAEncryption
32:9c:f1:fc:91:3b:50:d0:9d:6e:30:1e:0a:c6:24:53:19:39:
ed:ea:17:6f:45:85:90:19:ad:47:c7:e4:78:55:a9:ef:38:85:
88:47:9b:41:d1:80:2c:c7:54:ca:3d:06:32:e1:76:d4:31:f2:
8b:9e:c5:f0:dc:38:d9:70:51:10:81:96:6c:c9:09:5e:63:5d:
55:de:9b:d1:fb:f2:a2:21:7a:7a:df:ab:90:83:09:37:02:59:
34:d4:db:5e:74:e4:ae:3b:1a:27:ed:f7:72:85:2a:e6:13:be:
4d:9d:aa:8f:03:5c:b1:34:d1:39:1c:61:14:42:d8:46:43:ae:
51:00:cc:5c:7d:01:cc:a4:07:f0:6b:60:6f:4f:ef:a1:5e:e8:
d1:64:87:a2:9d:a5:db:09:56:00:87:29:73:ff:0d:19:08:87:
2a:f3:d7:a1:6e:ef:20:2d:bf:f3:2a:27:b6:69:15:71:b0:c8:
3c:bc:ab:c8:16:b5:9b:52:fd:6c:e9:ea:0a:0a:14:71:13:e6:
ec:95:cd:08:6f:6a:fb:89:f7:28:30:28:35:bc:71:52:10:c4:
57:de:ce:8e:35:56:aa:0f:d9:a2:cf:d4:4d:91:9c:3e:4a:77:
a1:d0:9b:d4:b2:37:c2:1e:b1:65:88:35:2b:ae:f7:57:6e:74:
ce:c6:95:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:35 2024 by rpki-client on console-ams.rpki-client.org