Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/0yRKkdfhI4vu8gjzUprtJfjRcUI.roa
File: 0yRKkdfhI4vu8gjzUprtJfjRcUI.roa (raw, json)
Hash identifier: 0Vpp/YWbdhXGi1K5dcylJxysY233OZHjj53nVf3S6EY=
Subject key identifier: D3:24:4A:91:D7:E1:23:8B:EE:F2:08:F3:52:9A:ED:25:F8:D1:71:42
Certificate issuer: /CN=ecc8402f2faab304879ff712cfcbf5ae52b6699c
Certificate serial: 0189AB168370D0FF531ADEEF46D9DA7EA0B7
Authority key identifier: EC:C8:40:2F:2F:AA:B3:04:87:9F:F7:12:CF:CB:F5:AE:52:B6:69:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/0yRKkdfhI4vu8gjzUprtJfjRcUI.roa
Signing time: Mon 31 Jul 2023 08:35:26 +0000
ROA not before: Mon 31 Jul 2023 08:35:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42184
IP address blocks: 185.153.140.0/22 maxlen: 24
2a0f:8880::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:16:83:70:d0:ff:53:1a:de:ef:46:d9:da:7e:a0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8402f2faab304879ff712cfcbf5ae52b6699c
Validity
Not Before: Jul 31 08:35:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3244a91d7e1238beef208f3529aed25f8d17142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6f:af:e2:8e:77:15:da:0b:1e:a9:74:8e:7d:
bc:a8:d1:ae:82:a3:de:35:a2:b5:0a:bb:f9:db:4c:
f9:f2:58:da:f6:32:dc:a0:49:3c:b5:28:38:98:d2:
48:0b:9f:63:a3:af:cc:8c:d0:9e:9e:3a:92:58:b9:
a0:50:0c:6d:9b:cc:29:5b:09:a0:43:51:44:0a:0a:
77:69:e4:6e:ee:7d:c8:62:d9:be:ff:5a:81:7a:46:
dc:c6:62:8d:15:aa:3c:55:7e:71:3f:41:1b:89:27:
a4:93:ea:f1:7e:b2:38:d6:3b:85:6f:4d:48:e9:77:
2e:39:5c:13:3a:bb:7e:d9:aa:87:fe:a3:ee:4b:73:
04:de:ec:d9:4d:0e:bb:df:4e:68:5c:e9:c8:75:4b:
7d:c6:43:0a:20:0c:a1:cc:13:d8:f0:53:7c:4a:eb:
22:06:6c:f2:23:77:53:3b:18:78:19:4d:6b:dc:00:
72:29:7d:7c:54:b4:75:66:fc:97:aa:41:eb:e6:a2:
61:85:28:c3:f0:fa:7c:0b:dd:2c:4b:8a:63:8c:2f:
5d:79:cc:2c:9f:33:61:5a:d0:13:82:49:c4:73:7e:
25:17:ec:9c:11:c8:2e:12:11:b1:ec:36:d6:b7:fa:
dc:b6:4f:66:0b:a2:94:a2:98:33:83:4d:39:cc:07:
ca:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:24:4A:91:D7:E1:23:8B:EE:F2:08:F3:52:9A:ED:25:F8:D1:71:42
X509v3 Authority Key Identifier:
keyid:EC:C8:40:2F:2F:AA:B3:04:87:9F:F7:12:CF:CB:F5:AE:52:B6:69:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/0yRKkdfhI4vu8gjzUprtJfjRcUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.140.0/22
IPv6:
2a0f:8880::/29
Signature Algorithm: sha256WithRSAEncryption
90:42:ef:8f:84:e1:43:58:a4:66:d1:b6:42:d1:cd:c9:42:c6:
0b:28:50:bd:3e:9c:d1:cc:07:35:77:33:0f:d5:a9:29:72:1c:
83:03:6a:f5:62:94:96:2e:78:4a:8e:25:85:4e:ed:3d:cd:a8:
c9:14:62:a1:95:82:d6:ac:3f:13:d8:ee:19:42:c8:85:f2:81:
a1:c9:5f:45:27:bc:bc:3d:c3:f8:1c:95:d0:24:ca:0f:7a:e9:
f1:34:d7:08:af:93:c1:0a:01:b8:fd:74:cb:2e:a9:a0:52:f4:
82:ba:6c:81:8b:7b:bf:43:88:fa:33:24:be:c2:20:ae:57:cd:
21:ef:a1:79:c1:29:77:38:7c:0f:50:f4:47:dc:82:5b:91:39:
49:ef:92:61:d7:fc:33:ca:11:c7:29:08:e7:00:24:44:7c:39:
01:c3:05:55:90:12:b6:1b:2f:93:41:06:60:73:53:31:f8:da:
0f:48:09:b0:1b:9e:3a:b9:d8:0a:b5:4f:80:ca:63:3a:43:5a:
3d:5a:79:7c:1f:a3:2f:2f:bb:e7:7e:59:ff:39:12:9e:7d:d3:
7a:47:d0:52:a1:76:c9:74:25:02:f6:66:20:53:1f:2f:7a:5a:
54:1f:9c:50:19:c3:8a:1b:9f:8b:5d:2e:f3:23:ee:e3:90:6a:
42:7f:db:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:09 2024 by rpki-client on console-fra.rpki-client.org