Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/IGM8NvznnTuVtU7U4PFEQyQfRug.roa
File: IGM8NvznnTuVtU7U4PFEQyQfRug.roa (raw, json)
Hash identifier: 7SGGV1Oy5mcpP4LK21pSL9ctRn4r7s6p4iPme5dYCKc=
Subject key identifier: 20:63:3C:36:FC:E7:9D:3B:95:B5:4E:D4:E0:F1:44:43:24:1F:46:E8
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 018CC425280C33367D579FE7687E901BC4C7
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/IGM8NvznnTuVtU7U4PFEQyQfRug.roa
Signing time: Mon 01 Jan 2024 08:30:18 +0000
ROA not before: Mon 01 Jan 2024 08:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216066
IP address blocks: 185.187.101.0/24 maxlen: 24
2a0a:47c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 05 Mar 2024 09:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:28:0c:33:36:7d:57:9f:e7:68:7e:90:1b:c4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Jan 1 08:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20633c36fce79d3b95b54ed4e0f14443241f46e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:e7:45:e8:3c:c4:1d:51:18:6c:58:07:78:
54:46:f7:25:84:86:66:28:53:a9:7e:38:b8:ac:9d:
9b:1e:e2:17:66:8c:74:dc:e3:e5:63:1e:ef:51:67:
b5:04:f5:d6:61:43:96:5f:49:f0:af:ac:7f:94:d3:
20:ca:5e:fb:41:40:95:36:39:cd:90:60:66:7b:91:
e0:56:9b:ca:71:04:2c:13:56:21:a1:bc:e6:2e:47:
af:23:09:eb:d9:a3:02:a4:63:0d:1d:80:7f:af:4d:
66:42:1e:e6:04:32:cc:7b:08:dc:2d:5d:fa:78:71:
69:72:87:01:d7:46:d0:f2:f7:94:1d:09:e8:b3:a2:
c0:69:9c:a7:4f:15:9c:34:c1:36:4e:b9:8b:eb:60:
24:c4:5c:a3:31:24:31:a0:32:0f:b9:7a:ee:3c:17:
16:ba:07:87:bc:64:4e:8b:ed:0f:6b:ce:f4:ab:03:
5a:d2:98:29:47:27:15:9d:12:2c:a6:bf:f5:86:9e:
a5:e2:0f:b1:a3:bb:7e:1e:c1:a3:52:38:fb:35:e4:
9d:c1:3c:ea:52:ab:6a:92:e0:b1:3a:35:4a:f3:56:
38:05:b6:c2:f0:59:62:21:53:e1:4b:f7:97:c6:c6:
00:d1:94:17:b6:87:20:a2:c4:30:54:47:a1:93:77:
25:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:63:3C:36:FC:E7:9D:3B:95:B5:4E:D4:E0:F1:44:43:24:1F:46:E8
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/IGM8NvznnTuVtU7U4PFEQyQfRug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.101.0/24
IPv6:
2a0a:47c0::/29
Signature Algorithm: sha256WithRSAEncryption
09:73:b4:2f:9b:e6:da:43:62:6d:29:9f:f7:0d:a7:f3:99:c9:
34:80:88:60:60:44:51:1a:f3:28:74:0f:ca:d9:a8:7d:15:ba:
67:ca:38:fc:89:0a:9f:d2:3a:7c:2c:ac:da:85:c5:7e:d0:4d:
dc:46:e5:94:71:1c:4e:35:83:82:d2:4a:78:65:1c:c5:52:a7:
c9:05:1a:73:9a:61:5e:24:31:af:1e:51:6b:22:53:df:f4:8c:
00:f2:01:1e:13:79:54:18:17:fb:47:fc:1a:90:a5:12:fe:1c:
bb:c8:8e:25:40:89:79:55:96:0c:e0:7e:d7:7b:0a:4a:7a:6c:
d9:5e:20:48:31:fb:76:19:a0:b8:17:99:dc:e8:6a:3b:a4:e4:
21:56:d1:94:c5:44:6e:31:cf:bd:42:cf:58:10:66:4e:12:ee:
69:1c:32:fb:12:ab:67:fb:c3:77:0e:2d:89:d8:7a:d7:62:12:
dd:89:c5:b6:fe:dc:6b:6c:9a:36:78:34:a1:ac:86:b6:60:1d:
17:48:a1:1a:b1:54:51:be:d7:6a:c1:62:40:db:de:6c:dc:f2:
af:7a:3d:a8:4c:f3:d8:b9:b4:f8:b9:e4:95:1b:86:90:03:0e:
19:9d:43:59:12:1b:15:61:45:b7:91:64:43:d9:91:7f:6f:37:
da:88:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 12:43:29 2024 by rpki-client on console-fra.rpki-client.org