Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/8XJBlPpLCoQRz_FBWLH7UQffYkw.roa
File: 8XJBlPpLCoQRz_FBWLH7UQffYkw.roa (raw, json)
Hash identifier: jX+TZGOP5TnEF+zjfAviJ6GMAKM+lJ0IEeXPMaHQp7c=
Subject key identifier: F1:72:41:94:FA:4B:0A:84:11:CF:F1:41:58:B1:FB:51:07:DF:62:4C
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 018A8DE94738CDD783CEA2EE4BBC45912F32
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/8XJBlPpLCoQRz_FBWLH7UQffYkw.roa
Signing time: Wed 13 Sep 2023 09:39:50 +0000
ROA not before: Wed 13 Sep 2023 09:39:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44654
IP address blocks: 185.36.124.0/22 maxlen: 24
185.36.124.0/23 maxlen: 23
185.36.124.0/24 maxlen: 24
185.36.125.0/24 maxlen: 24
109.205.8.0/21 maxlen: 24
37.252.215.0/24 maxlen: 24
37.252.211.0/24 maxlen: 24
37.252.210.0/23 maxlen: 23
37.252.210.0/24 maxlen: 24
37.252.209.0/24 maxlen: 24
37.252.208.0/24 maxlen: 24
37.252.208.0/23 maxlen: 23
37.252.213.0/24 maxlen: 24
37.252.212.0/24 maxlen: 24
37.252.212.0/23 maxlen: 23
2a02:d8:8::/48 maxlen: 48
2a02:d8:9::/48 maxlen: 48
2a02:d8:a::/48 maxlen: 48
2a02:d8::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Oct 2023 08:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:e9:47:38:cd:d7:83:ce:a2:ee:4b:bc:45:91:2f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Sep 13 09:39:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1724194fa4b0a8411cff14158b1fb5107df624c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:5d:06:ad:9b:6e:0d:5b:6c:7f:ec:c3:cb:
5b:e9:e2:6f:20:ce:a6:dd:e1:e2:c5:6d:5b:bf:45:
53:da:4c:b7:f1:db:be:b7:93:34:8a:42:f9:32:e8:
3c:d5:88:f9:57:67:3d:23:98:f0:a5:3c:e3:f3:73:
59:bc:b1:ee:46:da:10:95:8e:e8:cb:1d:cb:4f:11:
a1:e7:8c:6e:12:f3:b6:fa:cc:82:e1:88:7c:86:d5:
7c:a3:c4:94:c1:ec:6c:15:f6:5b:ba:d0:15:b6:8a:
0a:ac:4f:72:f9:32:77:eb:a8:f6:29:2d:43:cb:b1:
fe:d9:ac:d7:d6:2c:04:85:8c:37:01:50:5f:f7:18:
61:4b:d4:a8:42:7e:e6:18:4d:49:f4:d8:1f:01:fb:
34:77:e9:74:3e:6e:16:04:f2:bc:71:a0:52:13:6d:
a5:bb:83:06:bf:7b:98:3b:06:1b:74:1e:26:2a:ce:
95:c3:2a:a6:bc:69:b6:1b:54:7a:a1:07:a1:95:24:
2b:5b:71:5d:78:1c:fa:c7:b3:5c:e1:f6:7c:2f:e7:
62:f9:cf:6a:de:47:15:a3:cf:3a:6e:63:54:07:0d:
a8:9b:48:22:75:85:76:4d:25:ce:a9:f7:2e:a2:d0:
7e:8d:ff:e4:ef:23:e5:0d:66:50:88:5f:ee:55:40:
65:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:72:41:94:FA:4B:0A:84:11:CF:F1:41:58:B1:FB:51:07:DF:62:4C
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/8XJBlPpLCoQRz_FBWLH7UQffYkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.208.0-37.252.213.255
37.252.215.0/24
109.205.8.0/21
185.36.124.0/22
IPv6:
2a02:d8::/32
Signature Algorithm: sha256WithRSAEncryption
8e:4f:06:6f:97:63:65:97:b7:a4:e3:cc:da:51:9c:68:f9:74:
63:e4:ef:56:d1:7c:3a:45:9b:21:15:02:4f:0c:04:a8:49:82:
37:e3:af:9f:b5:27:d9:b2:45:d1:42:00:5d:14:32:c2:ee:05:
b5:96:24:a5:a0:25:d4:52:63:2f:9e:4d:fe:02:4c:c1:88:d6:
a7:86:73:52:cf:3e:53:bb:e6:2c:b1:79:23:01:1b:bb:7c:71:
5d:7d:f9:bb:70:76:79:ba:4d:02:48:b7:5b:f9:d9:08:ff:36:
4b:9c:da:85:b8:e5:a9:f1:d0:3f:b3:22:a7:02:ae:cd:87:5a:
3b:3b:82:b4:f5:f5:c2:d0:e8:f3:47:b9:2d:83:5c:78:6f:5d:
9e:78:4a:2f:93:46:85:d0:96:79:43:be:9e:00:a3:24:87:c4:
90:b0:90:9b:df:31:2e:3c:49:f0:1c:d5:33:78:94:d1:cc:57:
4a:27:37:2a:f7:d2:31:cd:4a:08:87:32:17:1b:9a:93:dc:d2:
1a:93:cb:b9:93:c9:7f:df:1b:8d:d5:a9:ea:8e:09:df:9b:b2:
63:05:29:ef:84:a4:35:dc:49:07:41:ef:79:b7:4b:b0:23:19:
5d:c6:1e:49:59:ba:29:69:cc:20:1d:27:8d:76:2e:8d:9a:e2:
c2:10:67:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:31 2024 by rpki-client on console-ams.rpki-client.org