Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/8c2oHL59VqUqN80GlG2uTeX1jus.roa
File: 8c2oHL59VqUqN80GlG2uTeX1jus.roa (raw, json)
Hash identifier: UG4bGlAFOgJAkgl+feZ7653KAy7Wnr0tYumFizx3HO8=
Subject key identifier: F1:CD:A8:1C:BE:7D:56:A5:2A:37:CD:06:94:6D:AE:4D:E5:F5:8E:EB
Certificate issuer: /CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
Certificate serial: 018CCA2A1391F6917109ACF53319FC8CB396
Authority key identifier: 13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/8c2oHL59VqUqN80GlG2uTeX1jus.roa
Signing time: Tue 02 Jan 2024 12:33:24 +0000
ROA not before: Tue 02 Jan 2024 12:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35368
IP address blocks: 185.36.136.0/22 maxlen: 22
2a04:6440::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:13:91:f6:91:71:09:ac:f5:33:19:fc:8c:b3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
Validity
Not Before: Jan 2 12:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1cda81cbe7d56a52a37cd06946dae4de5f58eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:6a:95:b6:05:1a:fa:5f:6a:b5:d9:2b:30:
ba:fc:59:00:e9:d1:d7:7d:4c:9d:6b:f4:7e:0b:d8:
7c:f7:80:0d:f3:44:98:e5:3e:85:8b:4b:34:f0:18:
84:a4:26:97:eb:a1:c9:08:10:06:56:62:8d:e7:2b:
9f:0d:ba:82:45:4c:81:14:a1:55:43:81:f7:b8:b8:
3e:33:57:f1:60:cf:7a:29:15:aa:9a:a3:ce:ab:7d:
01:74:af:03:41:c6:23:4f:2e:f2:4b:8a:89:21:48:
38:90:7d:12:cd:47:53:fa:b1:4f:13:70:3f:22:60:
26:4a:94:d4:86:80:9e:2b:d0:6e:ea:23:ee:39:82:
69:22:6a:a0:42:9f:47:e1:7e:f0:06:3c:99:0a:18:
4d:e2:22:8f:6e:b9:0b:4b:1b:37:bc:1b:30:af:82:
06:e9:6b:ed:d2:3d:1c:5b:61:fc:13:81:18:c3:f7:
94:d0:f6:5a:07:29:dd:16:92:71:7c:87:72:e4:08:
2c:ef:af:97:16:a5:c0:d5:c8:6f:f1:df:e4:79:f3:
34:71:3d:aa:c5:ad:32:c0:ca:d5:84:0f:9e:10:01:
e7:3e:4c:5a:ba:1f:7a:e1:fa:4c:d9:14:b8:98:dc:
89:1b:95:3e:03:72:c2:ac:a5:8a:28:b1:ca:e3:8a:
02:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CD:A8:1C:BE:7D:56:A5:2A:37:CD:06:94:6D:AE:4D:E5:F5:8E:EB
X509v3 Authority Key Identifier:
keyid:13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/8c2oHL59VqUqN80GlG2uTeX1jus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.136.0/22
IPv6:
2a04:6440::/29
Signature Algorithm: sha256WithRSAEncryption
39:51:ae:b8:5a:79:30:38:c3:d9:b6:b0:67:18:26:27:cf:62:
cf:7e:ac:7d:5a:6f:c1:53:e4:9a:aa:53:7e:9f:d9:4f:af:11:
90:29:ee:08:98:4c:b3:bc:f2:0a:66:45:ab:1b:91:dd:fc:f1:
ce:f2:ce:48:6b:0b:e2:99:62:78:73:9a:19:e5:e5:c3:cc:a0:
15:e0:ee:0f:74:eb:fb:af:9f:94:b2:64:c3:61:81:bd:e9:af:
b8:fa:79:6c:09:1e:d5:8f:47:75:a3:76:23:ab:2f:41:a4:8d:
f7:a9:6f:c5:97:19:f4:aa:b3:7c:9d:44:98:5b:07:45:26:53:
fe:5a:56:8e:e4:e1:dc:45:f0:3f:0b:b4:1b:86:08:00:78:43:
d2:fa:a2:e5:70:84:c4:99:3d:d9:df:31:4d:89:57:9e:78:ac:
a9:28:e2:9d:a6:2b:03:40:a2:30:c1:2d:49:09:96:35:e6:6f:
ba:74:6f:6e:e6:9f:03:d0:65:03:88:3d:45:80:e5:cf:e5:2d:
f6:85:5c:fa:39:40:93:ef:70:63:43:24:6f:c9:01:b7:93:31:
d5:42:f3:e0:44:99:fa:7f:d8:34:fb:7a:13:ff:e0:fe:e7:b0:
b1:8f:63:55:5c:03:e1:8d:8f:7b:bb:ed:a8:59:99:13:36:bc:
84:4a:8a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:25 2025 by rpki-client