Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/V8a_iSkyuBmy3yPoGJOf2VwHiPk.roa
File: V8a_iSkyuBmy3yPoGJOf2VwHiPk.roa (raw, json)
Hash identifier: 7FBpQwTlKv98bL0UYNmwjycQT68HWJtu83VIM9K20a8=
Subject key identifier: 57:C6:BF:89:29:32:B8:19:B2:DF:23:E8:18:93:9F:D9:5C:07:88:F9
Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial: 01857169D1EDE15411CE6050E4C20DE28429
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/V8a_iSkyuBmy3yPoGJOf2VwHiPk.roa
Signing time: Mon 02 Jan 2023 07:37:18 +0000
ROA not before: Mon 02 Jan 2023 07:37:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201160
IP address blocks: 185.29.192.0/24 maxlen: 24
185.29.195.0/24 maxlen: 24
185.29.194.0/24 maxlen: 24
185.29.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:d1:ed:e1:54:11:ce:60:50:e4:c2:0d:e2:84:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
Validity
Not Before: Jan 2 07:37:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57c6bf892932b819b2df23e818939fd95c0788f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:f8:d8:cb:46:50:3c:e6:74:8b:9d:03:d3:
29:bf:1f:89:4f:52:1f:4f:8d:15:f5:4f:bf:20:83:
fc:3e:97:89:15:ea:3e:9f:44:01:a5:a0:03:8e:8e:
f8:b7:a9:bd:14:56:a9:e8:81:86:a7:90:9d:52:98:
d0:df:63:5b:8b:08:73:96:91:aa:cd:3f:74:f0:f2:
9a:64:2c:94:01:46:af:eb:00:cb:76:01:7d:83:fa:
98:d3:a3:29:7d:d8:33:38:71:0e:d8:bd:34:8e:be:
59:29:df:0c:ad:2a:86:de:72:82:ed:86:a7:ab:d1:
d3:15:96:15:d3:77:22:74:fe:19:db:cc:38:ea:a2:
fa:84:48:2f:f2:0a:da:a8:a8:ac:22:80:70:c7:0c:
9f:13:b0:cc:c1:85:3e:3b:29:dc:26:fe:3f:dc:f6:
b2:15:ed:81:81:d7:9e:eb:00:c0:ef:c9:85:26:9c:
44:22:69:41:2e:a7:bb:5d:6c:79:56:27:93:a5:84:
d3:2a:c3:a5:6e:15:da:a4:08:42:0c:18:99:6c:20:
0e:62:d2:a7:5f:bd:b1:05:27:b6:f7:a2:10:ce:03:
d7:c4:80:93:b5:af:73:8d:7e:de:96:5f:18:9f:54:
6e:c6:b6:8f:24:ef:16:03:12:46:d2:e4:22:7a:34:
f9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C6:BF:89:29:32:B8:19:B2:DF:23:E8:18:93:9F:D9:5C:07:88:F9
X509v3 Authority Key Identifier:
keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/V8a_iSkyuBmy3yPoGJOf2VwHiPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.192.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:17:d3:d7:85:3b:25:3d:79:55:b0:4a:d1:27:1b:9f:0e:60:
db:29:73:a6:0e:ea:8a:48:57:c8:26:2a:25:d2:e0:7a:95:3b:
83:3e:5f:ac:68:9d:33:80:44:0d:46:44:58:0b:2f:8e:d6:d1:
e1:be:86:01:0c:39:91:ee:40:47:4d:78:e7:df:07:f2:ca:d8:
e7:56:9b:07:f3:c4:4a:53:a9:ad:74:fe:12:ad:3b:39:c7:ea:
33:aa:a5:cc:a6:02:f6:26:27:9d:06:40:f0:d8:d7:b3:87:bc:
14:02:76:e4:51:32:5c:72:19:aa:8a:b7:77:c6:21:9f:11:25:
4c:b1:6c:55:99:fe:2c:8f:57:68:d7:61:c7:ff:79:68:96:05:
51:2c:1e:3e:65:81:cf:50:f9:8a:91:ee:cc:13:d9:ca:b8:38:
58:8c:54:09:fd:f9:4e:6c:64:d1:16:1e:f8:03:aa:a0:7b:06:
76:9b:91:c7:48:61:87:eb:93:08:54:73:9a:e4:07:0e:aa:ac:
e7:3e:59:7f:a5:fa:81:18:9c:3b:31:65:ba:7b:6c:e5:0a:13:
62:36:98:47:b8:ba:5d:25:a7:cb:57:2e:63:05:dd:fc:f0:e8:
47:d3:a9:fc:74:36:92:42:13:8a:6e:81:11:3d:df:d7:52:8e:
7e:be:de:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:15 2024 by rpki-client on console-fra.rpki-client.org