Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SGJDmaiavzbNyu7Ec5yxtPCZ5G4.roa
File: SGJDmaiavzbNyu7Ec5yxtPCZ5G4.roa (raw, json)
Hash identifier: CSeVhRpIETZhPf+EFArVTa8m07F5fHAE+VvLo/yc9e8=
Subject key identifier: 48:62:43:99:A8:9A:BF:36:CD:CA:EE:C4:73:9C:B1:B4:F0:99:E4:6E
Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial: 018CC94AD5DBF67805040B11935EB57DAE1A
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SGJDmaiavzbNyu7Ec5yxtPCZ5G4.roa
Signing time: Tue 02 Jan 2024 08:29:33 +0000
ROA not before: Tue 02 Jan 2024 08:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44400
IP address blocks: 185.204.181.0/24 maxlen: 24
185.204.180.0/24 maxlen: 24
185.204.180.0/22 maxlen: 22
185.204.183.0/24 maxlen: 24
185.204.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Mar 2024 09:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:d5:db:f6:78:05:04:0b:11:93:5e:b5:7d:ae:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Validity
Not Before: Jan 2 08:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48624399a89abf36cdcaeec4739cb1b4f099e46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ee:f1:6c:da:f6:db:7e:8a:ee:6c:eb:44:74:
d2:86:90:06:14:64:ea:74:b8:50:ca:c1:e6:48:b6:
25:c6:85:03:0e:37:13:b5:40:8c:39:d2:38:f3:88:
2f:f1:87:d2:fb:7a:f6:d8:94:2b:f3:bb:75:05:4c:
e5:08:d4:50:bb:44:4d:d6:fc:00:c6:64:1a:3b:a4:
b3:64:68:3b:b5:55:ff:fd:70:30:90:90:7a:60:0a:
53:dc:70:a1:6b:47:a5:c1:2d:55:70:b7:34:90:20:
e1:e6:29:21:b4:97:9b:1b:6c:6b:f1:b1:73:9d:31:
a0:d3:61:4e:36:a2:97:fe:7e:b7:1a:44:0c:12:62:
60:0a:86:12:be:88:ad:bc:61:b2:f2:6f:83:75:aa:
c9:ee:43:e1:a5:92:9b:f3:c0:fd:ec:e1:e8:5c:99:
83:47:06:64:f6:32:08:7f:64:98:e9:58:60:41:5e:
88:10:14:7b:0a:ab:a4:50:76:c6:8c:e9:ff:13:3c:
c5:99:90:b6:61:e7:4d:88:4e:02:2a:0c:25:ee:cf:
52:cd:f7:55:d6:ad:58:89:9d:12:db:7a:3b:1a:ca:
e5:75:f1:77:20:1d:98:ba:ba:44:bd:dc:6c:e2:fb:
4c:87:56:59:85:1e:0a:ac:96:a8:5c:3c:93:c9:36:
b9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:62:43:99:A8:9A:BF:36:CD:CA:EE:C4:73:9C:B1:B4:F0:99:E4:6E
X509v3 Authority Key Identifier:
keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SGJDmaiavzbNyu7Ec5yxtPCZ5G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.180.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:86:0b:bb:a6:b2:0d:f5:1d:79:18:2f:d7:3e:f2:70:0d:1a:
0f:9b:4f:9a:c9:be:69:10:70:97:c7:37:be:41:a0:39:0c:cd:
63:a8:4e:18:d0:16:60:4b:eb:11:e6:67:0e:3f:af:52:42:08:
52:77:02:9d:ce:0b:5c:96:a8:7c:21:e8:5e:80:4f:0f:d2:15:
b7:68:5c:53:f9:de:bb:95:c2:55:20:51:29:8f:6c:26:c6:d3:
ea:b7:dc:c4:df:2b:fa:5c:75:e1:75:aa:35:7f:6a:53:f4:96:
ed:47:a3:fe:c4:df:58:6a:6f:b1:89:bb:d9:ae:9a:72:53:3c:
d4:c3:b5:91:19:aa:25:dc:6f:ab:47:38:8c:73:2a:89:a6:d2:
a2:97:a9:a1:5d:01:23:d7:cf:77:4a:61:d1:48:c4:89:b7:a3:
37:13:fa:49:23:d0:94:74:1a:38:16:a7:2b:4f:9f:7a:97:09:
a3:34:a1:71:c2:78:09:8f:6a:0b:29:6d:65:87:08:4e:b0:7c:
d4:bc:66:9b:7f:5a:6b:9b:9e:f4:96:af:78:9c:93:66:28:4e:
f2:d3:3b:d2:85:75:13:60:85:3f:27:a1:6e:9c:13:1e:4e:26:
5e:98:da:77:d3:a7:12:51:64:bc:0e:62:ad:5f:48:cb:14:1a:
64:ac:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:52 2024 by rpki-client on console-ams.rpki-client.org