Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/i8jh8DaG9xOEWSAeeaGRTi0F4fY.roa
File: i8jh8DaG9xOEWSAeeaGRTi0F4fY.roa (raw, json)
Hash identifier: TkKyNCQeAUM2ZzqbyQ8bJujzbiC1FAJ03A/Sl5v7pog=
Subject key identifier: 8B:C8:E1:F0:36:86:F7:13:84:59:20:1E:79:A1:91:4E:2D:05:E1:F6
Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial: 01893FEA6089DCB4233788D0786FE21EA4D1
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/i8jh8DaG9xOEWSAeeaGRTi0F4fY.roa
Signing time: Mon 10 Jul 2023 13:07:51 +0000
ROA not before: Mon 10 Jul 2023 13:07:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205189
IP address blocks: 185.226.217.0/24 maxlen: 24
185.226.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3f:ea:60:89:dc:b4:23:37:88:d0:78:6f:e2:1e:a4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
Validity
Not Before: Jul 10 13:07:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bc8e1f03686f7138459201e79a1914e2d05e1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:da:1d:16:3e:36:92:05:ca:02:21:e8:20:d2:
90:c5:54:0b:24:b2:ce:91:2d:5e:3c:d5:c5:52:4c:
18:7e:0d:d2:8d:05:00:a6:94:89:3b:76:b2:91:b0:
8d:1f:f1:f9:2c:c6:62:ec:71:ff:42:39:5c:b7:4c:
7f:01:32:55:66:6f:9c:81:f6:6a:e2:15:93:dc:62:
58:fd:69:4c:bd:d6:5a:0c:20:48:31:fa:1d:9a:a3:
39:95:f9:94:03:53:f5:86:d7:dd:69:92:be:c8:0b:
8b:a3:84:04:54:55:7b:51:3b:bd:61:a3:b2:ce:be:
f8:d7:a2:e4:d3:c3:cf:51:3e:b1:1e:96:94:e9:81:
d3:b9:6e:9b:d2:02:2c:78:5d:c8:76:97:36:45:04:
40:98:e0:33:d0:5a:2b:04:96:27:9b:24:cb:fb:0a:
36:d9:e4:b3:88:ad:b6:96:09:34:53:22:db:46:58:
6c:84:5b:d2:93:4e:87:07:89:61:08:e7:70:ec:6e:
0d:0a:7e:d1:62:85:a5:22:8e:35:67:0b:4e:7e:2d:
84:2b:05:c7:22:40:72:28:4b:69:64:80:37:ff:b0:
47:d5:8a:ba:85:2d:75:0d:f7:45:1a:a2:f2:70:d5:
a3:a4:e1:62:96:af:29:ed:b6:43:75:d6:c5:94:98:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C8:E1:F0:36:86:F7:13:84:59:20:1E:79:A1:91:4E:2D:05:E1:F6
X509v3 Authority Key Identifier:
keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/i8jh8DaG9xOEWSAeeaGRTi0F4fY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.216.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:11:f4:7c:80:aa:25:e4:e8:a9:8f:ec:a7:49:c2:9e:13:ea:
1b:0d:d4:89:ff:f7:e4:4b:5d:c3:84:52:7f:9b:4b:9e:c9:8d:
1a:ca:23:58:ff:ca:46:6c:01:ec:e1:f3:6c:8c:10:1d:13:a7:
54:98:de:2e:a8:90:87:3e:54:0a:cb:73:85:de:3e:28:34:7b:
ae:97:fc:bb:1f:1c:02:d5:79:e3:90:b2:53:26:ea:c2:40:34:
4a:87:f4:d6:7b:ef:b3:e5:27:87:f7:cb:0b:df:7f:c3:8e:3c:
fc:b2:c6:1b:a0:6f:1c:c9:eb:23:2d:a2:5a:75:35:93:9d:7f:
ab:45:bc:2e:e2:cb:77:5f:de:58:9b:b6:73:16:61:a4:b0:eb:
d1:04:5a:35:5e:ad:e8:5d:a9:f5:32:cb:89:61:73:6c:69:55:
6a:55:f7:a6:03:02:71:33:f7:26:3b:b6:27:f1:66:4a:5d:4f:
a1:8e:97:a6:4a:94:f3:9c:10:b0:9a:36:bf:a6:f9:fb:08:6a:
cf:60:57:e2:51:71:dc:13:db:24:9d:1a:4d:ff:98:7c:f4:9e:
34:c3:63:78:6a:7c:f7:74:62:7c:96:42:66:55:91:f2:e2:cf:
3c:94:a6:29:d0:4c:6a:03:c2:9c:19:f0:30:cb:77:16:8b:d9:
af:85:76:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:12 2024 by rpki-client on console-ams.rpki-client.org