Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/v0n3uP4RQwBXU22YgNzij_27RBU.roa
File: v0n3uP4RQwBXU22YgNzij_27RBU.roa (raw, json)
Hash identifier: g60hjmNf7LiS5ZtX1VlXJPAXfYmhWOrNSE2IhEEjC28=
Subject key identifier: BF:49:F7:B8:FE:11:43:00:57:53:6D:98:80:DC:E2:8F:FD:BB:44:15
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 018CF3B16F74313B701CCEAD9C3F4E242BCD
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/v0n3uP4RQwBXU22YgNzij_27RBU.roa
Signing time: Wed 10 Jan 2024 14:05:41 +0000
ROA not before: Wed 10 Jan 2024 14:05:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211603
IP address blocks: 185.133.124.0/24 maxlen: 24
2a0f:4d00:1::/48 maxlen: 48
2a0f:4d00::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 28 Mar 2024 23:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:b1:6f:74:31:3b:70:1c:ce:ad:9c:3f:4e:24:2b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Jan 10 14:05:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf49f7b8fe11430057536d9880dce28ffdbb4415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:87:70:4e:3b:68:85:e9:ac:7f:e7:81:1d:5d:
00:2a:05:d0:9f:00:71:dc:c2:16:6a:11:8f:74:08:
6c:79:5f:c7:b2:50:22:30:e5:80:bc:a6:45:5d:c2:
99:8f:c9:10:ab:8d:4b:2d:9b:75:d2:c0:2e:d0:35:
c4:36:cc:1f:35:13:b6:88:c5:f5:a4:76:07:27:58:
f6:67:f7:ad:f5:10:cd:83:2f:c3:cd:d6:a5:35:32:
ee:46:d2:d9:a7:1c:87:8d:02:a4:7c:cc:ca:26:b5:
3d:bd:7e:0e:60:40:64:81:b1:52:df:61:21:d9:bc:
37:e7:87:66:d7:d1:01:85:33:9e:f5:40:dd:2b:42:
00:4f:98:30:18:3f:86:f1:a5:4d:4b:ca:63:61:53:
54:02:c1:fa:34:e4:9a:5b:f7:1e:50:d3:68:fc:ee:
dd:5f:d4:fa:02:dd:22:60:95:8c:ed:98:43:d9:a7:
cd:38:a3:9c:bb:9d:06:ae:de:5c:70:74:c0:7d:dd:
f4:c0:a6:13:31:ca:ef:b8:82:4c:b5:af:90:7c:08:
14:35:6d:3c:7a:35:a5:57:d5:64:32:21:a4:2b:b5:
58:b8:12:b6:30:25:37:b9:18:bf:2c:26:3a:22:e6:
de:2d:14:db:d3:74:bb:0f:ff:d4:89:f4:5e:e1:8f:
bc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:49:F7:B8:FE:11:43:00:57:53:6D:98:80:DC:E2:8F:FD:BB:44:15
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/v0n3uP4RQwBXU22YgNzij_27RBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.124.0/24
IPv6:
2a0f:4d00::/29
Signature Algorithm: sha256WithRSAEncryption
55:6c:89:da:9e:5b:a6:00:0d:56:91:a5:59:b7:35:d2:26:a4:
61:a8:16:e5:2b:8b:d0:c7:62:28:46:69:78:68:c7:f3:a2:55:
c5:58:fb:ac:42:30:a6:50:35:68:67:7d:60:d3:35:ce:1e:e7:
da:2b:a9:cb:32:4b:a0:f9:36:89:15:6d:63:5e:94:92:fc:4c:
5e:ea:3d:a4:0f:1e:cd:14:c9:71:80:30:65:27:97:2f:5e:67:
e5:16:23:be:13:87:08:92:a5:c3:04:53:50:32:f6:74:0e:09:
ea:dd:36:8e:a2:a2:c0:a1:78:e2:41:cb:8f:f3:75:d9:1c:d4:
28:7a:f1:64:fb:72:22:d2:6e:ab:07:a0:a0:2f:ef:da:25:2d:
c2:6c:1e:f4:b1:68:63:ae:2f:99:40:58:6f:cb:5f:c3:ad:d1:
87:69:d7:98:06:1c:5d:bb:37:ad:87:f9:ae:d2:82:42:1f:66:
94:45:42:5c:0e:97:0d:4d:b7:d8:b1:9d:77:da:eb:b3:94:38:
a5:30:d2:6e:a9:22:2a:51:4b:4f:42:26:ca:a3:56:50:dc:00:
fa:c4:d2:7c:61:95:de:56:19:55:24:f6:ca:36:d1:7c:12:b1:
f3:d9:da:f6:44:3c:33:52:54:0a:5e:d6:a6:6a:6b:98:07:7e:
35:9e:47:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:48 2025 by rpki-client