Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/9BjAMcgichrrfn_V72EQf6DD-3k.roa
File: 9BjAMcgichrrfn_V72EQf6DD-3k.roa (raw, json)
Hash identifier: PAiPhnQweo4M9+sG/7wz16uoMPFcbl2b1H+9SXsq44M=
Subject key identifier: F4:18:C0:31:C8:22:72:1A:EB:7E:7F:D5:EF:61:10:7F:A0:C3:FB:79
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018BBE379E86B406F5B47C98C09B2EEF8FA8
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/9BjAMcgichrrfn_V72EQf6DD-3k.roa
Signing time: Sat 11 Nov 2023 11:49:57 +0000
ROA not before: Sat 11 Nov 2023 11:49:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216271
IP address blocks: 185.201.139.0/24 maxlen: 24
185.201.136.0/22 maxlen: 22
2a12:ec0::/29 maxlen: 29
2a12:28c0::/29 maxlen: 29
2a0f:e000::/29 maxlen: 29
2a13:ba00::/29 maxlen: 29
2a12:1900::/29 maxlen: 29
2a12:6b80::/29 maxlen: 29
2a13:dac0::/29 maxlen: 29
2a0e:7780::/29 maxlen: 29
2a0a:e2c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 15 Dec 2023 09:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:be:37:9e:86:b4:06:f5:b4:7c:98:c0:9b:2e:ef:8f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Nov 11 11:49:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f418c031c822721aeb7e7fd5ef61107fa0c3fb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:fb:0a:d8:77:b4:60:0c:3e:33:ba:33:72:
db:71:93:a0:81:40:ee:97:7f:d4:d8:76:89:1f:77:
b6:3f:d9:f6:29:99:7c:d0:52:3e:ef:1d:ea:b1:4d:
ab:17:8b:a8:ab:d6:85:44:b5:57:1e:b0:db:3d:9c:
e8:2e:37:5a:b8:a4:2f:62:60:1c:fc:f1:07:37:a6:
b1:04:fa:13:bf:b4:11:c1:29:b6:29:f9:27:67:93:
e1:ae:05:fb:c2:38:29:b3:40:cd:90:d4:03:a6:f3:
ce:68:2f:08:0f:cf:9b:c7:18:6a:80:42:fd:d8:41:
b8:38:4b:02:c7:01:af:07:e0:5a:83:de:88:c6:30:
4e:a4:57:97:ba:33:f6:00:ce:d1:62:5f:c7:3a:f6:
d9:1a:91:ff:4d:10:9f:0c:10:78:75:d3:fd:bc:a3:
74:31:d0:06:a2:a6:df:f1:9d:46:2d:9f:4c:92:d6:
c9:d9:c3:98:be:cf:0f:5e:2b:2d:bf:91:b4:73:4d:
51:16:76:66:3c:6a:4d:1e:34:b2:00:f0:52:20:e4:
90:e6:8a:41:c5:5f:88:18:e2:aa:df:5f:33:94:c1:
64:2c:9b:2e:74:4a:45:62:a7:07:bf:af:b1:c4:be:
bd:6b:ce:09:ce:58:8f:64:6b:3b:11:5e:87:8c:4d:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:18:C0:31:C8:22:72:1A:EB:7E:7F:D5:EF:61:10:7F:A0:C3:FB:79
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/9BjAMcgichrrfn_V72EQf6DD-3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.136.0/22
IPv6:
2a0a:e2c0::/29
2a0e:7780::/29
2a0f:e000::/29
2a12:ec0::/29
2a12:1900::/29
2a12:28c0::/29
2a12:6b80::/29
2a13:ba00::/29
2a13:dac0::/29
Signature Algorithm: sha256WithRSAEncryption
ae:f7:58:98:b3:4f:50:03:28:6a:94:0e:5c:88:68:b5:18:60:
0a:26:16:86:44:0b:2e:1c:b8:3c:ad:4a:a6:27:26:7a:f0:f9:
68:4b:5e:64:6c:f5:52:92:30:24:da:32:6d:2a:07:c9:81:69:
95:11:28:9a:bc:3b:8b:4f:72:12:e0:2c:27:9d:28:fb:85:bb:
13:28:95:9e:ca:e3:a2:6d:a1:98:28:cb:89:e7:03:be:9d:a1:
7b:b2:29:2b:b6:f8:4e:44:36:34:a0:e5:11:11:99:6a:55:4b:
0f:82:cf:bd:fb:94:d1:23:9e:e9:13:67:cd:da:01:10:c3:1a:
8b:88:e5:5e:b6:52:79:ee:29:94:9f:99:6b:dd:67:13:6a:48:
4f:18:2e:ab:4b:74:a5:c2:b9:bb:25:71:c7:b5:38:9c:8b:c3:
36:96:dd:58:70:97:a8:0d:6b:60:7e:bb:95:8a:ad:14:ff:15:
5a:8b:8d:f7:96:88:1a:52:20:e3:68:41:54:d3:6c:5f:c9:49:
61:d9:7a:23:82:7b:b6:17:54:b9:84:01:a7:29:6c:a2:11:19:
84:93:4f:e5:0b:7c:b1:9f:5a:2e:f9:18:11:8a:31:f9:42:1b:
b4:6a:9b:d1:45:17:f5:9b:a2:22:58:0e:43:03:64:ea:e6:ed:
6e:a8:24:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:02 2024 by rpki-client on console-ams.rpki-client.org