Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/abJRErOd2ueCaIBrQDQthxXR8rc.roa
File: abJRErOd2ueCaIBrQDQthxXR8rc.roa (raw, json)
Hash identifier: LqW0zsqIQIliRguNj55XWXpGfVildo4qK9RXsGysSno=
Subject key identifier: 69:B2:51:12:B3:9D:DA:E7:82:68:80:6B:40:34:2D:87:15:D1:F2:B7
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 018EAF3B2C4009E025CD444294A953EB4F29
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/abJRErOd2ueCaIBrQDQthxXR8rc.roa
Signing time: Fri 05 Apr 2024 17:07:54 +0000
ROA not before: Fri 05 Apr 2024 17:07:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203459
IP address blocks: 185.122.253.0/24 maxlen: 24
185.122.255.0/24 maxlen: 24
185.133.224.0/24 maxlen: 24
185.133.225.0/24 maxlen: 24
185.133.226.0/24 maxlen: 24
185.133.227.0/24 maxlen: 24
2a06:7fc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 22 Oct 2024 20:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:af:3b:2c:40:09:e0:25:cd:44:42:94:a9:53:eb:4f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Apr 5 17:07:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69b25112b39ddae78268806b40342d8715d1f2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:22:07:a8:1e:86:11:54:d7:d6:b3:4a:5c:
99:25:10:1e:73:42:cb:bf:be:99:c8:51:4c:6b:ae:
2f:a2:a2:88:11:71:ee:70:c0:05:02:3e:97:fc:e8:
38:10:00:2b:f2:72:26:49:cd:c5:24:26:45:6c:59:
41:87:d4:5c:5e:44:c9:fe:9c:2c:f5:1a:fc:32:4e:
18:59:26:7d:1c:6d:e3:0c:34:5d:ca:61:79:98:ee:
e2:2c:e2:98:3e:2b:e7:75:d7:96:a6:11:c3:34:69:
3c:7b:86:36:5a:65:87:16:73:47:cf:dc:06:76:80:
0f:fe:62:5e:00:a7:4b:94:6b:4b:10:d2:50:7e:88:
9f:ab:f1:0d:50:9a:4f:44:f2:eb:54:50:c0:25:e9:
1d:ce:ee:0c:ff:57:02:b4:54:d7:97:7e:6e:c7:c8:
26:78:6f:a8:ef:06:ae:8e:3e:ca:23:b1:7e:09:6d:
eb:ec:76:1a:87:67:68:03:ca:58:06:ec:0b:87:71:
df:fa:94:7d:34:55:28:78:c2:99:50:07:bc:26:24:
52:f3:96:30:c8:7b:83:a6:2e:a6:72:dd:75:5f:4f:
df:c6:f1:47:8a:a1:66:d4:1e:e0:f8:56:0d:36:5a:
be:10:49:0d:80:a7:51:83:31:91:63:eb:40:5d:ba:
cf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B2:51:12:B3:9D:DA:E7:82:68:80:6B:40:34:2D:87:15:D1:F2:B7
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/abJRErOd2ueCaIBrQDQthxXR8rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.253.0/24
185.122.255.0/24
185.133.224.0/22
IPv6:
2a06:7fc0::/29
Signature Algorithm: sha256WithRSAEncryption
28:ac:23:59:7b:8d:b7:45:bb:2c:88:15:af:3a:b2:c1:a6:7c:
ed:c5:1d:21:ed:f7:22:18:a3:9f:66:95:9b:8d:43:20:d7:dd:
79:6f:f0:a9:b6:61:33:a8:7d:b3:e2:eb:57:ce:6c:3a:da:5a:
22:15:e4:e4:51:12:7e:bc:c1:cc:ad:41:6a:03:c5:13:9e:d1:
2e:08:1b:b2:b5:34:bd:7a:50:40:c1:cb:65:a6:5a:85:82:55:
16:c1:c3:61:5e:a3:7c:d0:91:07:49:7c:2a:db:15:36:ab:68:
52:5d:ba:ea:ac:69:ab:80:ea:7a:47:46:14:4d:9c:af:d4:85:
e8:a7:b9:3c:45:6f:89:03:4b:74:52:79:c3:64:be:96:a4:ff:
0d:bf:70:ee:55:89:88:bf:23:3e:db:df:71:64:78:5c:bf:23:
c8:57:f5:e4:3f:3d:72:a0:46:10:74:96:bf:5b:50:d8:b5:ac:
19:99:54:c5:be:fd:97:93:61:2a:1c:39:5d:ea:64:dc:cd:01:
cb:8e:d4:11:1e:00:00:d7:ce:d2:63:ac:d5:2b:22:69:db:f6:
4e:ad:83:6f:ae:5c:2d:96:e8:4b:cf:ac:d4:5d:f0:81:0a:d0:
c7:71:88:dd:3f:51:88:54:25:75:c8:1c:b2:e5:5a:8c:9e:45:
e1:cc:64:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 23:22:28 2024 by rpki-client on console-ams.rpki-client.org