Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/AWR21Uelgv2Q7BJtZ2dza8sCyHc.roa
File: AWR21Uelgv2Q7BJtZ2dza8sCyHc.roa (raw, json)
Hash identifier: 42TMbWWB+GbyVgNvNfkt0FlcLjBOBHTUWgVCGk1X+nY=
Subject key identifier: 01:64:76:D5:47:A5:82:FD:90:EC:12:6D:67:67:73:6B:CB:02:C8:77
Certificate issuer: /CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
Certificate serial: 018CC94CBCD67E6237F50BC500BC560C6864
Authority key identifier: EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/AWR21Uelgv2Q7BJtZ2dza8sCyHc.roa
Signing time: Tue 02 Jan 2024 08:31:38 +0000
ROA not before: Tue 02 Jan 2024 08:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31463
IP address blocks: 185.128.222.0/24 maxlen: 24
2a03:9ba0:100::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 16 Feb 2024 13:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:bc:d6:7e:62:37:f5:0b:c5:00:bc:56:0c:68:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
Validity
Not Before: Jan 2 08:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=016476d547a582fd90ec126d6767736bcb02c877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b6:34:ed:29:1c:8f:53:2c:ec:a2:fa:a1:6c:
d5:de:22:b7:77:84:d4:79:1c:61:84:e0:5c:54:c9:
99:7a:54:46:b9:b8:e7:9c:7f:bc:6c:69:3d:0f:f7:
32:f8:4c:33:ee:f7:65:b5:4b:55:38:26:bd:c5:0c:
e8:9e:1d:4b:7f:e3:0a:71:5d:ce:df:7f:f0:05:0c:
88:2c:70:90:7c:f8:3a:7a:b6:56:a7:6c:1a:61:dc:
2d:89:11:ed:bc:f0:cc:e8:1a:8a:70:f4:39:6d:4e:
8f:f7:38:41:34:a3:45:a4:32:7e:6d:c4:b9:db:d8:
d0:94:67:09:55:b5:06:5d:da:a7:48:48:31:88:02:
9b:05:f2:f7:f5:95:ea:91:ed:e0:99:91:6f:9f:b3:
81:7a:a9:79:4b:10:3d:6e:0e:49:f2:6f:64:c4:a3:
df:18:c1:29:7b:8a:ee:f7:b0:bc:9f:06:77:95:aa:
c7:31:5b:45:6f:de:94:f0:b8:1c:64:1b:57:f6:fb:
14:82:82:df:38:6c:4b:7a:ea:0f:18:bb:21:62:f1:
11:13:bb:fd:21:7a:65:b3:58:9f:6e:78:11:88:25:
3c:d5:3d:30:d3:fa:3c:2e:45:1b:6e:74:cc:32:38:
c7:13:52:73:03:5a:bb:fd:71:e0:03:76:bd:68:38:
e1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:64:76:D5:47:A5:82:FD:90:EC:12:6D:67:67:73:6B:CB:02:C8:77
X509v3 Authority Key Identifier:
keyid:EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/AWR21Uelgv2Q7BJtZ2dza8sCyHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.222.0/24
IPv6:
2a03:9ba0:100::/40
Signature Algorithm: sha256WithRSAEncryption
29:07:6f:26:09:4b:64:9c:b8:54:92:1b:76:54:85:3c:26:c1:
31:29:19:b6:d6:48:8c:53:b4:ae:ef:12:62:12:51:1c:da:38:
04:2a:7b:a3:dd:e8:c7:23:2c:28:70:4e:c0:ec:ab:ae:63:b4:
60:43:b3:ad:d9:88:3b:3a:f1:6b:44:e5:99:dd:55:6b:f1:42:
1d:ca:4b:71:e9:18:2c:e1:92:bc:54:28:b2:ce:fb:59:1d:0b:
2d:9d:c7:3a:9c:ea:53:2c:c8:c2:49:5d:ff:e3:ef:6c:db:df:
93:e3:ae:0e:65:82:68:90:29:05:a6:d1:3e:37:06:af:ce:70:
85:95:9f:21:19:ac:14:da:28:b7:63:6d:93:cd:7e:c7:ee:30:
21:e2:95:8d:3e:00:08:e7:45:47:46:63:4d:ca:45:5d:eb:c3:
81:9b:03:92:29:4b:8b:65:04:b2:c6:64:b7:a6:13:96:7c:45:
f7:99:9f:b5:28:33:8d:c9:7f:01:c3:cb:1c:77:31:82:90:8c:
d0:74:fe:14:77:e0:a3:59:1f:f0:4a:71:ab:86:f5:24:97:83:
46:45:49:2c:38:c1:b9:7d:94:98:9e:fc:d9:65:5d:48:7b:ff:
2d:15:f6:51:78:80:e6:5d:19:23:4e:a4:47:83:64:07:23:cf:
aa:9a:80:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:22 2024 by rpki-client on console.sobornost.net