Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/W2Ni_qqmProfMipk0q2O9Doko7c.roa
File: W2Ni_qqmProfMipk0q2O9Doko7c.roa (raw, json)
Hash identifier: MTbJKG6j7OB37RY7gMxOI92p6ZWNl4gMWFCuwEHtiAc=
Subject key identifier: 5B:63:62:FE:AA:A6:3E:BA:1F:32:2A:64:D2:AD:8E:F4:3A:24:A3:B7
Certificate issuer: /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial: 018CC94AF1FD87B2E864A996C6BF27636F44
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/W2Ni_qqmProfMipk0q2O9Doko7c.roa
Signing time: Tue 02 Jan 2024 08:29:41 +0000
ROA not before: Tue 02 Jan 2024 08:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 185.131.204.0/24 maxlen: 24
2a12:bfc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 07 Jun 2024 09:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:f1:fd:87:b2:e8:64:a9:96:c6:bf:27:63:6f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Validity
Not Before: Jan 2 08:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b6362feaaa63eba1f322a64d2ad8ef43a24a3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cf:80:70:42:47:e8:12:61:21:de:11:88:88:
45:f1:51:44:0d:ae:84:c5:fc:76:b5:12:3e:07:1c:
4c:fd:d9:25:e7:10:26:0c:96:9c:5b:74:f5:4d:e4:
aa:4a:59:e0:4e:41:b3:bf:cd:a6:d7:f5:a0:b7:11:
25:9e:4c:a0:4c:93:dd:c9:22:67:e5:c7:a0:87:65:
d8:de:44:b3:bd:cd:89:eb:92:ac:07:7a:fa:ef:d2:
64:e1:de:34:3a:d9:6d:33:f5:63:8a:c9:35:81:fc:
ab:74:70:43:10:a6:32:f0:6e:52:03:3a:16:6f:db:
c4:91:b3:e0:fd:de:fc:2a:5e:63:ab:ab:8d:cf:31:
51:86:c1:44:f7:26:6a:0e:b2:05:d1:a0:9d:9e:a2:
e3:29:c6:7d:9c:71:97:b7:25:6c:b5:c1:16:ff:1b:
a5:51:7a:db:57:bc:34:a6:69:bd:59:fb:b8:58:7a:
b8:6d:f8:30:39:82:48:b9:70:8a:21:35:d7:11:e7:
6c:02:ec:2e:00:06:51:56:e4:71:ab:4f:27:13:af:
cb:42:01:06:a2:aa:0a:37:88:9a:c6:90:b5:15:70:
7e:94:3a:e6:6f:60:e8:a7:15:a3:3a:41:1e:61:06:
df:63:36:47:c0:fa:76:91:ee:69:dc:d4:12:d0:c5:
41:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:63:62:FE:AA:A6:3E:BA:1F:32:2A:64:D2:AD:8E:F4:3A:24:A3:B7
X509v3 Authority Key Identifier:
keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/W2Ni_qqmProfMipk0q2O9Doko7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.204.0/24
IPv6:
2a12:bfc0::/48
Signature Algorithm: sha256WithRSAEncryption
4c:40:05:9d:92:a2:a5:88:7d:c1:a7:29:ce:61:d3:5e:95:52:
32:4c:44:5e:90:a4:45:ac:10:b4:9b:10:d2:f2:8d:39:df:1e:
33:bf:bd:5f:6b:4f:ca:2a:b4:bb:3b:91:38:34:0a:83:6e:05:
33:7d:b8:25:37:46:ea:2c:10:5a:30:7f:61:3c:fa:21:8f:69:
e3:fb:39:67:14:06:3f:15:7b:de:f8:13:f9:15:f6:1f:45:6e:
b4:7f:9c:b1:98:2c:f1:8e:94:e2:67:67:1b:58:fe:ea:9c:b0:
86:f1:e7:e2:ce:9f:56:1e:79:4a:b0:c7:ef:ab:b4:ba:c1:4d:
e7:0b:f5:19:2b:2b:f2:4d:36:b3:98:8d:e4:7c:af:81:db:66:
08:41:f3:50:76:be:01:76:db:a8:59:40:d4:5c:ba:55:4c:82:
6a:65:52:85:5b:b6:c2:da:06:4a:6c:87:0c:d0:d8:a0:e9:56:
e8:a5:ca:fa:c9:ef:27:c6:6f:f4:5d:15:9b:29:26:98:a2:62:
99:8f:38:ff:f3:a9:4c:c5:0e:d5:f1:a9:07:1b:67:06:b2:6a:
a9:e1:a2:cd:9a:8b:5c:6f:d5:eb:00:f1:99:d4:52:db:0b:2b:
3f:f5:0c:cb:92:be:b8:5a:57:09:ba:bc:98:6d:18:8f:1f:cd:
2f:14:62:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 14:41:53 2024 by rpki-client on console.sobornost.net