Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/IGlV6rz9BLNRq-_B3Mtpv0YTR0A.roa
File: IGlV6rz9BLNRq-_B3Mtpv0YTR0A.roa (raw, json)
Hash identifier: hcsHZsGPoeDLkQPVBkCQoSIdLBNAVaW+Cwh8+9DFhCQ=
Subject key identifier: 20:69:55:EA:BC:FD:04:B3:51:AB:EF:C1:DC:CB:69:BF:46:13:47:40
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 018CC795659641136C4BD098B0727FEA656F
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/IGlV6rz9BLNRq-_B3Mtpv0YTR0A.roa
Signing time: Tue 02 Jan 2024 00:31:46 +0000
ROA not before: Tue 02 Jan 2024 00:31:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202364
IP address blocks: 185.119.108.0/24 maxlen: 24
185.119.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 12:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:65:96:41:13:6c:4b:d0:98:b0:72:7f:ea:65:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Jan 2 00:31:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=206955eabcfd04b351abefc1dccb69bf46134740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:e8:07:cb:b8:60:d0:3e:6e:ec:c5:3c:fb:
be:a0:38:0c:00:0e:f0:fa:f2:47:d9:f5:fa:7b:25:
da:15:f4:65:b6:1d:a3:be:df:9e:8c:09:49:c2:e7:
60:46:d4:92:cc:e5:95:cd:6e:7e:9c:1e:48:43:1f:
e1:d5:53:5e:f2:29:ea:de:7a:3e:c2:67:8a:73:f0:
80:43:8f:58:8d:f0:c7:e6:24:a3:c3:72:e2:96:9d:
06:a1:3a:30:cc:70:51:fd:e8:94:c8:9e:7f:4e:3e:
ce:e9:0d:e0:68:27:42:ce:75:3b:13:d0:e6:21:89:
34:13:c9:02:4a:f8:76:97:07:17:62:be:91:88:d7:
3d:fd:4b:75:8a:48:72:55:3b:0b:54:23:bc:2d:af:
89:e9:df:0f:07:a9:de:55:0f:85:0f:25:2b:d3:f8:
e6:44:75:3c:5b:e8:02:ba:40:64:d8:7d:fb:48:2e:
87:c8:8f:81:f6:03:0d:3c:f9:46:fd:80:95:96:31:
2d:71:49:72:20:a7:63:c6:ab:60:26:69:49:98:d5:
7b:c2:d8:cd:dd:7c:0d:52:5e:da:4b:87:d0:0d:b9:
3d:00:b7:57:8e:0b:31:13:8b:0e:bc:f9:1a:38:fb:
58:9c:62:43:bb:8f:fd:a0:ae:92:0d:94:f8:4a:65:
0a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:69:55:EA:BC:FD:04:B3:51:AB:EF:C1:DC:CB:69:BF:46:13:47:40
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/IGlV6rz9BLNRq-_B3Mtpv0YTR0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.108.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:61:52:8d:84:4b:5f:1c:e7:85:55:f1:83:71:f5:02:43:bd:
a5:02:ee:ef:f6:31:1f:74:39:52:51:16:95:cf:b3:28:13:b4:
21:89:27:a7:3b:c2:20:87:84:ce:6a:db:bf:0b:af:a3:fb:9c:
95:15:06:b7:d8:a5:7a:68:69:d6:85:de:62:e5:90:29:97:e2:
5b:ac:3f:43:2a:1c:e5:c3:b8:d8:ed:88:93:e0:6f:ac:35:e2:
ef:d5:af:ba:c9:9b:71:20:d1:f6:82:74:5c:6b:05:48:73:ea:
a0:c6:9d:66:0e:26:bf:bc:9e:1f:04:5e:a8:2a:27:a1:f1:b3:
c5:a9:b7:a7:b3:e0:8e:d8:49:29:b5:55:ba:0b:51:ce:6b:38:
48:c1:9e:0e:21:e1:11:c9:8b:62:20:ba:63:d7:72:61:af:3f:
f5:53:c4:ea:a7:7e:ee:65:4c:a5:bb:e4:99:17:b9:4c:d1:97:
00:6b:73:6f:e6:8f:a2:c2:53:55:d9:b1:45:47:21:a1:2d:3d:
a4:ab:c3:7b:b2:c3:93:f1:7c:f0:6d:1c:d9:bc:38:c6:fd:7f:
01:16:f7:0a:d5:1a:8c:e1:ff:3e:f4:d6:6d:f5:a9:68:4e:4c:
73:1c:0e:3e:ac:75:e4:66:1a:93:ba:23:60:0c:7b:03:fd:40:
87:06:61:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:41 2024 by rpki-client on console-ams.rpki-client.org