Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/rghbG3_VoxLyG1xEHmCxuEnP3z8.roa
File: rghbG3_VoxLyG1xEHmCxuEnP3z8.roa (raw, json)
Hash identifier: skFWIP53MDNDOi3LeDygtOYTfNjkN0jOqtZ4Ncge0PM=
Subject key identifier: AE:08:5B:1B:7F:D5:A3:12:F2:1B:5C:44:1E:60:B1:B8:49:CF:DF:3F
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 018CC7273618F283B4C44FBDC8DF90E66508
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/rghbG3_VoxLyG1xEHmCxuEnP3z8.roa
Signing time: Mon 01 Jan 2024 22:31:24 +0000
ROA not before: Mon 01 Jan 2024 22:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3262
IP address blocks: 185.177.40.0/24 maxlen: 24
185.177.41.0/24 maxlen: 24
185.226.229.0/24 maxlen: 24
185.220.166.0/24 maxlen: 24
185.220.165.0/24 maxlen: 24
185.220.164.0/24 maxlen: 24
185.220.167.0/24 maxlen: 24
185.232.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 12:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:36:18:f2:83:b4:c4:4f:bd:c8:df:90:e6:65:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Jan 1 22:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae085b1b7fd5a312f21b5c441e60b1b849cfdf3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:80:14:1c:97:2b:5c:c8:39:df:65:75:8e:
e7:b3:dd:d2:46:0f:a0:2b:80:ca:60:b4:3d:a6:cf:
ee:ec:b3:ed:dc:32:2b:26:61:56:fa:28:7a:d8:05:
71:a2:f0:1b:45:25:cf:34:70:3c:fb:54:6e:45:a5:
8d:c4:34:01:cc:6f:b6:71:93:a8:6d:29:9a:93:9d:
72:5b:57:a7:8f:40:f3:08:0e:41:f3:73:c8:b7:b3:
d8:45:93:b2:89:cd:35:87:3e:b8:1c:e0:bd:ed:25:
7a:72:cf:c7:ba:7a:45:56:82:af:5d:69:c4:d6:3e:
ee:43:e4:95:6c:99:f7:d6:bd:1e:b1:86:81:6d:f7:
83:1b:0d:db:ae:11:39:10:c8:ee:01:75:83:e6:88:
ba:f6:f8:c0:59:9f:08:bc:33:21:50:84:0b:a4:0b:
6e:ce:00:ce:d7:4c:bd:0c:03:6d:96:9e:f6:2b:84:
f9:f3:8a:a3:64:30:8a:6c:60:90:65:13:0d:26:3b:
c2:45:89:7d:70:ae:4c:b7:6e:6a:b1:7b:35:e0:6b:
fb:a9:8d:c8:20:bd:55:50:ea:58:1b:3f:4d:ea:9b:
38:67:07:21:31:61:e5:a9:84:ca:1b:97:e2:13:4c:
03:96:6f:5a:2c:59:60:9b:93:53:1d:28:39:12:b6:
6e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:08:5B:1B:7F:D5:A3:12:F2:1B:5C:44:1E:60:B1:B8:49:CF:DF:3F
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/rghbG3_VoxLyG1xEHmCxuEnP3z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.40.0/23
185.220.164.0/22
185.226.229.0/24
185.232.132.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:30:1d:95:4a:6d:7e:de:c4:9a:e1:26:2e:c8:70:87:87:66:
d1:f4:f4:5d:7f:cb:e4:97:c6:41:ae:eb:96:7f:22:c6:8d:5a:
bb:f7:0c:a2:0e:6e:15:e3:77:75:8e:bf:a6:f0:be:31:86:38:
a2:d4:5e:69:50:8c:a0:f5:1a:9a:13:32:17:5b:54:8c:fa:fc:
81:39:a2:3f:15:79:9e:6d:20:eb:56:0f:9b:48:4e:c4:80:19:
16:21:e3:83:1e:85:d5:7a:d4:3b:20:89:a9:11:bd:ca:87:30:
d3:ce:04:70:0f:cd:88:bc:ca:6f:ea:4a:b4:27:da:2a:02:27:
93:88:c6:9b:1f:63:76:29:14:a3:9c:53:87:53:56:13:1b:c8:
8d:d7:e0:ea:e6:a7:8e:35:7c:94:3b:56:8e:db:0f:a5:f2:e5:
d8:99:e2:6a:4d:8d:8d:ce:63:a1:fe:50:00:d7:2f:41:cf:95:
a9:bd:51:4a:d1:d0:33:15:f0:b9:71:04:a7:59:3f:65:02:57:
9e:ad:b3:9e:8a:38:35:35:ce:19:ab:04:02:cb:f0:19:07:17:
38:8b:18:2c:c5:6e:69:c3:98:c6:b0:ee:ac:f0:de:66:e0:46:
50:4b:ce:09:4b:45:1b:4f:8f:b6:5e:b5:dc:b8:ee:c5:68:98:
37:5e:bb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:06 2024 by rpki-client on console-ams.rpki-client.org