Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/2-8myW4dTXnjwWoCp0VkRPT0_Wk.roa
File: 2-8myW4dTXnjwWoCp0VkRPT0_Wk.roa (raw, json)
Hash identifier: rByQ0UDOkhoYw1sVjMCd3NKISxgzbrb/5NQAM2cs8r8=
Subject key identifier: DB:EF:26:C9:6E:1D:4D:79:E3:C1:6A:02:A7:45:64:44:F4:F4:FD:69
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 01856BEED4193BDE963BF73B564F4B292AFE
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/2-8myW4dTXnjwWoCp0VkRPT0_Wk.roa
Signing time: Sun 01 Jan 2023 06:04:52 +0000
ROA not before: Sun 01 Jan 2023 06:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35043
IP address blocks: 185.95.181.0/24 maxlen: 24
185.95.182.0/24 maxlen: 24
185.95.180.0/24 maxlen: 24
185.95.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:d4:19:3b:de:96:3b:f7:3b:56:4f:4b:29:2a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: Jan 1 06:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbef26c96e1d4d79e3c16a02a7456444f4f4fd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:2f:a2:6d:62:09:12:29:89:ac:2e:0e:4e:
57:f6:e6:ba:04:07:39:d1:be:a6:6b:aa:2e:99:95:
e5:d0:88:8c:d0:71:97:b0:7c:f2:db:2c:ca:60:43:
d3:c1:e0:3a:c4:59:c2:42:c7:9a:23:30:6a:38:fa:
3a:85:42:4c:e2:17:cb:b8:d6:f1:be:63:60:4c:8f:
5a:e4:33:b1:ae:86:ff:4d:c5:a9:07:95:a1:b5:c1:
c4:f3:ba:d0:cb:ba:30:4c:63:99:4e:62:e4:66:5a:
5f:7b:d3:be:d3:07:27:4d:55:b1:5a:7b:6b:c1:49:
5a:4b:d1:d1:b9:e3:35:5c:6b:54:3b:32:22:c5:e2:
5e:a4:d8:9b:a8:79:db:93:7d:54:d1:59:7b:4c:c8:
40:60:6c:c3:56:e1:d3:a0:3d:ee:06:9f:58:66:28:
09:41:4c:0a:21:a8:79:4e:77:a1:f3:3c:9f:85:b2:
d3:56:e8:7e:83:60:f6:ee:3c:1a:33:43:54:0f:1d:
06:5f:a6:c9:55:d1:59:29:29:ad:c4:8e:93:1b:60:
2e:f8:28:1e:90:10:2b:79:ea:03:ed:d7:20:88:f7:
dd:34:f4:79:2a:e4:e4:dd:5e:c1:9e:86:d3:78:68:
df:70:ac:2e:c0:cc:ec:de:01:d4:f1:9b:7c:d9:d4:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EF:26:C9:6E:1D:4D:79:E3:C1:6A:02:A7:45:64:44:F4:F4:FD:69
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/2-8myW4dTXnjwWoCp0VkRPT0_Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.180.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:c4:e4:83:a3:c0:f0:f7:3d:38:f3:11:28:87:2d:31:e8:92:
97:1e:65:87:70:b5:fe:9a:c3:f0:40:4d:a6:9e:2b:6d:fe:9e:
de:91:cb:76:1a:dd:1f:f0:30:b7:4b:d1:03:6e:a1:e1:de:55:
dd:b5:0a:80:38:8f:95:d8:8e:4b:b1:97:13:fd:1a:b0:7c:31:
60:fa:2b:1f:4a:1a:19:d0:b3:e5:3d:96:61:d6:be:36:4f:6e:
56:4f:5b:62:7b:eb:e1:bd:47:89:82:4f:d7:e7:67:33:71:9c:
7b:68:8a:36:be:75:92:29:9d:ca:1e:68:5c:21:ca:d3:ac:9e:
77:0f:4e:3f:e5:d3:0e:54:2b:28:d6:e5:54:f6:09:f9:0d:e1:
2a:15:8b:c6:ab:d7:c6:76:45:8b:d6:13:19:8f:98:c6:7c:f2:
37:e0:a9:5d:cc:2f:19:86:10:e7:01:c9:8b:e0:6c:70:b3:32:
82:8e:c0:f6:15:eb:24:cc:3b:b1:eb:63:d3:74:b8:f0:5f:85:
cf:ed:5b:73:62:21:cb:90:67:ea:4a:77:a4:5d:ff:a5:96:5d:
ca:53:2b:3f:74:0f:15:d9:af:02:90:9d:ef:5c:a6:15:c4:2c:
8e:32:34:9c:13:ed:98:6c:8f:11:fe:62:4a:a8:76:3e:13:e6:
fa:13:0f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:08 2024 by rpki-client on console-fra.rpki-client.org