Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/sELdHMGORUml9axpcjLLNxJnfmk.roa
File: sELdHMGORUml9axpcjLLNxJnfmk.roa (raw, json)
Hash identifier: bbCzhBUEZak3vsQqt+UIPNJ1fXQbuu0T5TN2NeBALco=
Subject key identifier: B0:42:DD:1C:C1:8E:45:49:A5:F5:AC:69:72:32:CB:37:12:67:7E:69
Certificate issuer: /CN=3bc88e93d895033164bcef97539d8c89d6717dab
Certificate serial: 018571150AC44649FDE68A5141204B3430E7
Authority key identifier: 3B:C8:8E:93:D8:95:03:31:64:BC:EF:97:53:9D:8C:89:D6:71:7D:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8iOk9iVAzFkvO-XU52MidZxfas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/sELdHMGORUml9axpcjLLNxJnfmk.roa
Signing time: Mon 02 Jan 2023 06:04:42 +0000
ROA not before: Mon 02 Jan 2023 06:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48347
IP address blocks: 185.148.36.0/24 maxlen: 24
185.148.37.0/24 maxlen: 24
185.148.38.0/24 maxlen: 24
185.148.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:0a:c4:46:49:fd:e6:8a:51:41:20:4b:34:30:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bc88e93d895033164bcef97539d8c89d6717dab
Validity
Not Before: Jan 2 06:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b042dd1cc18e4549a5f5ac697232cb3712677e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e4:78:e2:16:19:c2:a7:61:86:9a:d8:5b:e1:
1e:3b:ae:c7:15:82:73:d1:5e:a0:aa:4b:6e:a6:75:
20:f4:a2:32:63:7e:42:d0:39:6f:e0:28:0c:81:31:
7d:99:bd:33:c4:d7:75:a2:10:31:ad:60:ba:90:05:
be:d9:83:3c:77:24:80:67:3b:3a:d6:ee:d5:e6:9e:
80:f2:95:74:1a:d6:ac:cd:b7:79:6a:66:fa:3d:d5:
c8:85:ae:d6:12:43:ee:f2:89:fc:b7:81:61:bb:68:
8f:40:5d:17:49:69:79:68:da:ec:a0:16:6d:63:16:
d6:5b:b6:cb:b0:de:9c:8c:51:a8:7e:b3:7e:22:c5:
7b:33:1b:fc:3e:76:c6:72:05:90:b9:f9:ae:a9:5d:
9d:b4:f7:7d:a9:ec:b4:8c:b0:20:da:68:d6:61:3c:
54:e9:35:89:64:b0:2b:9f:d3:3f:89:01:c6:31:b6:
36:03:97:11:8b:1c:43:b9:e8:40:32:b3:06:9a:a0:
ce:1c:0b:8a:b9:25:34:c2:d3:87:6e:85:95:9c:e8:
7d:59:d1:1d:ff:b8:2a:df:bb:83:78:0d:1b:65:43:
93:d4:a6:99:aa:00:81:4f:11:24:86:b7:69:41:f1:
5c:b7:48:8a:c5:e1:94:d1:4e:c0:10:39:f6:cd:14:
66:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:42:DD:1C:C1:8E:45:49:A5:F5:AC:69:72:32:CB:37:12:67:7E:69
X509v3 Authority Key Identifier:
keyid:3B:C8:8E:93:D8:95:03:31:64:BC:EF:97:53:9D:8C:89:D6:71:7D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8iOk9iVAzFkvO-XU52MidZxfas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/sELdHMGORUml9axpcjLLNxJnfmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/O8iOk9iVAzFkvO-XU52MidZxfas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.36.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:bb:e6:5a:82:df:58:db:4b:50:a0:fb:ae:7f:ee:f7:08:23:
9a:00:7a:5b:d6:b5:f8:0e:82:a0:a2:cb:9a:50:54:18:7d:ba:
2f:8a:0d:a7:c9:57:27:d0:08:47:9f:2a:7c:72:0a:a4:f2:70:
c2:47:41:ce:f9:94:2d:23:41:f0:bf:4c:87:1b:3d:3a:27:56:
d5:7b:58:0c:69:fc:6a:13:e4:e3:7b:a8:5e:8f:0d:67:2d:f2:
4b:3c:71:1b:97:5b:49:3b:2e:43:04:da:9e:d8:9a:98:15:40:
93:07:dc:43:1d:0e:47:2b:7f:71:b1:76:d0:aa:43:96:9b:52:
a9:3a:05:f5:91:c3:b4:49:49:6f:c4:f8:f1:c6:4c:55:67:56:
7e:39:b3:81:12:dd:1d:ac:6e:3b:50:4f:d6:c0:f9:f6:1b:d8:
21:e3:f0:43:ae:eb:09:ff:b7:3c:c2:01:89:0d:28:fd:93:a0:
38:dc:14:a0:cf:47:cd:ba:f8:b8:22:bb:a7:25:3f:ea:40:07:
15:24:f2:5d:8b:8b:01:8b:e2:2f:b8:9e:3c:7f:48:64:25:a4:
58:59:c3:a7:94:57:f5:fd:dd:30:32:65:44:6f:9a:71:5e:87:
dc:d9:93:40:5f:da:f4:db:bc:9f:4d:c7:45:4f:ac:06:89:bc:
cc:16:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:09 2024 by rpki-client on console-fra.rpki-client.org