Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/iIoayLiBmcCd1ni1hXUY1huxs7w.roa
File: iIoayLiBmcCd1ni1hXUY1huxs7w.roa (raw, json)
Hash identifier: FPMxGNbF7GzdZznWQPaRu74nTsDCEtEcoBPUqnRmD2c=
Subject key identifier: 88:8A:1A:C8:B8:81:99:C0:9D:D6:78:B5:85:75:18:D6:1B:B1:B3:BC
Certificate issuer: /CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c
Certificate serial: 0190E1652591DFBA8A32C4EBC38F21A285D5
Authority key identifier: 10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/iIoayLiBmcCd1ni1hXUY1huxs7w.roa
Signing time: Tue 23 Jul 2024 21:00:20 +0000
ROA not before: Tue 23 Jul 2024 21:00:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47688
IP address blocks: 185.77.12.0/24 maxlen: 24
185.77.13.0/24 maxlen: 24
185.77.14.0/24 maxlen: 24
185.142.226.0/23 maxlen: 24
2a07:3146::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e1:65:25:91:df:ba:8a:32:c4:eb:c3:8f:21:a2:85:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c
Validity
Not Before: Jul 23 21:00:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=888a1ac8b88199c09dd678b5857518d61bb1b3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ba:7f:f4:c5:ce:ff:2a:a6:8d:12:bf:5d:d1:
1e:5c:c9:55:0a:aa:4d:eb:8d:70:43:e9:e6:36:cf:
30:c9:49:1f:7b:e7:a0:37:b8:0c:5c:e2:06:a4:cf:
ac:bf:f2:cf:c2:c6:77:fb:dd:77:91:e8:47:18:19:
43:4f:91:c1:d7:7a:5d:fe:93:3a:46:81:da:45:25:
64:0e:ce:cb:83:fb:e3:2f:54:6d:ea:4b:e8:df:17:
d1:06:09:58:8c:a2:ee:2b:21:13:da:77:c5:77:97:
73:cd:97:3c:f1:de:08:63:0a:40:1a:29:27:03:6f:
f5:46:47:3c:ad:15:69:86:08:b1:5b:19:71:40:12:
b4:f9:97:08:40:bc:ce:72:5a:84:b7:8f:1e:e5:22:
05:1a:ac:9b:e6:80:f5:a3:12:b9:89:41:a0:ec:15:
30:05:42:d0:8d:54:dc:46:58:99:e3:96:92:f6:b9:
87:93:d6:ac:c6:05:20:2f:b4:c5:2c:7c:3e:f0:72:
12:fa:0e:31:58:0a:dd:73:ab:44:65:51:2c:5e:0c:
68:76:76:21:18:00:a5:b8:9c:89:29:38:46:71:07:
65:e2:73:4f:80:1d:93:af:92:27:2b:29:df:6b:62:
8d:07:f4:b1:4a:e7:79:fb:ee:96:aa:da:26:bc:84:
70:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8A:1A:C8:B8:81:99:C0:9D:D6:78:B5:85:75:18:D6:1B:B1:B3:BC
X509v3 Authority Key Identifier:
keyid:10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/iIoayLiBmcCd1ni1hXUY1huxs7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.12.0-185.77.14.255
185.142.226.0/23
IPv6:
2a07:3146::/32
Signature Algorithm: sha256WithRSAEncryption
02:44:cc:14:cd:d1:1f:ae:ea:f5:5b:43:bc:68:f4:80:8a:9e:
1b:48:7c:e6:6a:6f:1b:8f:73:9a:ee:12:72:2f:70:6c:ee:59:
ca:6d:07:cb:f4:44:44:e4:cb:0e:53:42:84:e6:9a:8a:52:d6:
69:3c:2a:36:53:1d:a3:99:81:d7:eb:2b:b7:22:31:33:2e:71:
52:ff:4d:7a:c6:21:3f:de:b6:9c:2b:0a:32:48:4b:b6:f9:ec:
89:ef:d6:bd:dd:39:60:7b:9b:df:9f:e6:6c:b5:f1:36:56:66:
b6:1a:af:56:0f:ed:69:ca:46:bf:0f:e8:5c:d0:73:13:61:33:
b1:d9:92:d1:64:6f:35:04:67:e5:59:71:3b:a9:af:46:49:1f:
fe:a6:64:b9:4a:75:67:4a:5c:fa:7f:dd:0a:b6:c1:de:c2:72:
76:d8:7e:15:b8:1e:e3:d2:2a:c0:ec:cd:26:54:b5:2d:1e:1a:
3b:f5:bc:f8:94:12:6e:03:e9:0f:8f:78:91:ed:ca:02:96:6a:
fd:cf:f2:07:a7:02:e7:d7:8e:5a:c7:fc:8c:d1:ce:83:0e:c0:
9f:70:1d:23:18:58:d0:fa:be:c7:62:b7:44:a0:9d:2b:de:9a:
2b:a3:f7:45:f4:85:4a:18:aa:a7:87:13:4c:7f:65:9a:42:3b:
22:d4:63:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:35 2025 by rpki-client