Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/N85BBCYIq5x7yn5Hwmo8QPyKFEg.roa
File: N85BBCYIq5x7yn5Hwmo8QPyKFEg.roa (raw, json)
Hash identifier: tzK8eaSBRVQ7lII42/mtC8eSSSi5VT2fPL/tCAtpcHI=
Subject key identifier: 37:CE:41:04:26:08:AB:9C:7B:CA:7E:47:C2:6A:3C:40:FC:8A:14:48
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 018C4596093EAC39F60412212DA82ED9CBFB
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/N85BBCYIq5x7yn5Hwmo8QPyKFEg.roa
Signing time: Thu 07 Dec 2023 18:41:49 +0000
ROA not before: Thu 07 Dec 2023 18:41:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 185.155.207.0/24 maxlen: 24
185.186.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:45:96:09:3e:ac:39:f6:04:12:21:2d:a8:2e:d9:cb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Dec 7 18:41:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37ce41042608ab9c7bca7e47c26a3c40fc8a1448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:61:a7:07:18:9c:51:8d:d5:6b:8a:39:9f:fd:
5c:af:73:d7:b6:6b:ac:b3:3e:89:35:a8:e5:2d:6d:
86:c7:98:14:d2:67:21:55:92:0d:71:54:5c:2a:2b:
f9:a7:ee:fd:c3:ac:50:42:6f:bb:09:2d:fa:f3:e4:
16:b5:fe:c9:a2:2f:2d:a8:0a:f3:35:b6:dc:02:a5:
ce:6b:fd:7c:0f:34:b8:bb:59:e5:e9:f4:bb:7f:0f:
ca:56:5d:7c:5c:67:76:38:d4:89:c1:e6:df:e4:c2:
31:d3:a2:56:3c:ea:f5:12:4a:d9:9d:63:80:e1:75:
8f:2c:e4:ee:02:fd:97:2d:35:13:97:4d:4b:6b:58:
e1:09:28:8c:e3:d6:e9:d8:5f:ed:05:f8:3e:81:2c:
d6:11:4d:2c:35:17:c1:fa:f3:f2:5f:c1:79:6a:eb:
5f:be:c8:33:df:9d:07:bc:cd:db:b5:48:67:81:ff:
d7:4c:70:de:4f:ac:0b:be:33:fd:a1:fe:bc:de:45:
4b:77:38:44:da:86:e3:b8:66:cb:87:05:51:bc:d8:
45:0b:7c:bb:45:8f:b5:7a:74:02:a8:d8:85:8b:52:
b3:a3:58:2d:e1:b2:e5:82:75:ff:3d:0d:e7:e3:2e:
b3:7d:e7:cb:f2:5e:e8:5b:7d:48:e3:cc:f4:ca:f7:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CE:41:04:26:08:AB:9C:7B:CA:7E:47:C2:6A:3C:40:FC:8A:14:48
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/N85BBCYIq5x7yn5Hwmo8QPyKFEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.207.0/24
185.186.183.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c5:aa:72:27:ac:92:55:21:c5:bc:93:6c:1d:9b:c6:f4:80:
fe:de:e0:b0:cd:01:ec:ed:03:96:02:f0:c2:5a:ff:af:4b:ce:
66:22:a9:8e:04:ed:fc:40:94:fc:07:cd:cf:c7:cf:c2:53:1a:
95:ab:70:ed:c8:7b:95:68:df:54:bd:e0:0c:43:25:77:bd:1b:
58:24:a2:d1:57:92:72:f8:27:44:63:0c:02:2f:a2:3f:11:45:
31:d9:b2:3b:1f:cf:0a:be:7d:d8:17:93:8f:a3:e9:7d:d0:86:
92:09:33:0a:c1:6b:4a:50:2a:5b:12:99:01:90:cd:af:e9:99:
c1:3f:7d:93:cd:4c:e7:f9:c2:db:bb:72:d6:12:83:17:10:a5:
51:30:fc:bd:05:08:4b:b2:03:6f:63:5a:81:90:39:88:9f:35:
68:75:ee:bd:37:24:91:32:76:4f:c5:f4:66:da:74:5d:e9:62:
37:d6:f2:2d:b5:58:e8:62:a4:8d:57:e6:2f:43:3b:f0:db:d6:
bf:70:d6:ed:6a:f1:d8:b4:55:aa:99:e5:2a:26:e0:b9:d1:4e:
97:60:f8:01:a4:60:29:5c:27:4e:76:d9:8c:a7:83:a3:c3:d7:
4f:e9:c8:08:7a:ff:38:51:d4:29:ba:b6:26:70:23:d2:80:fb:
0e:2e:b5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:08 2024 by rpki-client on console-ams.rpki-client.org