Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/TGpLUm-wVB2RIzZsYmwp36qJCQ8.roa
File: TGpLUm-wVB2RIzZsYmwp36qJCQ8.roa (raw, json)
Hash identifier: n2P6U/mZ6W6Ods8VLb2qC2guS/dGTl2KFdlFRb4EiQ0=
Subject key identifier: 4C:6A:4B:52:6F:B0:54:1D:91:23:36:6C:62:6C:29:DF:AA:89:09:0F
Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Certificate serial: 018CC86F65C16FF90EEE41826B8068EAC651
Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/TGpLUm-wVB2RIzZsYmwp36qJCQ8.roa
Signing time: Tue 02 Jan 2024 04:29:52 +0000
ROA not before: Tue 02 Jan 2024 04:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31042
IP address blocks: 185.20.37.0/24 maxlen: 24
185.20.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:65:c1:6f:f9:0e:ee:41:82:6b:80:68:ea:c6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Validity
Not Before: Jan 2 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c6a4b526fb0541d9123366c626c29dfaa89090f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:38:a5:b6:f3:a5:00:7d:84:e7:b1:d5:16:
fd:01:83:4d:29:05:31:7c:6a:05:61:48:41:a5:4b:
77:b3:3e:06:97:51:c8:af:24:67:19:05:3e:74:b8:
12:ae:56:4d:26:21:1d:1d:34:35:bc:9e:23:3e:87:
ed:06:0e:70:08:a3:d7:9f:c6:e2:48:5b:7b:d9:bd:
13:56:5c:a1:ef:ce:73:36:e2:56:5b:25:c0:03:12:
c8:6e:f6:64:c1:30:8f:bb:27:0b:79:7a:08:41:01:
db:fe:7c:24:4b:64:f3:5a:17:ab:e1:c0:c5:94:e5:
74:a7:da:df:24:cb:ae:46:34:18:ab:1b:02:ef:a3:
1c:97:c1:1c:fc:4c:d2:bb:4f:34:56:41:57:63:be:
49:a2:ee:50:74:fe:d3:9b:af:d1:a7:69:16:1c:80:
ca:c1:b5:59:a8:34:0d:48:48:f0:c7:4e:b4:de:c8:
3c:4c:43:5e:49:b8:21:e0:fe:92:30:01:93:85:84:
ac:b8:8b:67:06:6c:4c:fb:35:61:b4:75:4d:1e:3c:
5d:bb:bd:18:7d:a1:b1:38:e8:f6:d3:a5:34:87:07:
e8:27:81:3a:18:a3:d2:cf:51:85:45:c5:6a:7f:1c:
b2:a4:05:63:91:bd:ca:0b:21:4e:de:93:b0:3e:c9:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6A:4B:52:6F:B0:54:1D:91:23:36:6C:62:6C:29:DF:AA:89:09:0F
X509v3 Authority Key Identifier:
keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/TGpLUm-wVB2RIzZsYmwp36qJCQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.36.0/22
Signature Algorithm: sha256WithRSAEncryption
03:e7:5c:b7:45:26:c3:36:dd:cb:df:75:60:af:6d:3e:85:0c:
e8:c6:6f:b5:fa:dd:dd:00:34:eb:28:aa:a1:84:2e:41:4a:d7:
33:d3:5a:cc:57:07:5e:2e:29:b8:e1:68:ef:36:ee:db:99:4c:
e9:18:89:da:6c:db:03:3e:54:a6:18:3d:b0:5e:f1:09:72:d9:
92:f5:70:58:44:0f:93:ca:df:bf:3b:3f:e3:9e:ec:59:f8:ca:
44:44:14:87:51:e5:6d:1f:6e:1b:6f:6e:d8:04:67:55:3a:75:
ec:c2:0a:65:b3:74:ce:61:c2:d1:54:f3:0e:50:e5:f1:48:c0:
7e:04:16:b5:8f:e2:73:66:5c:08:c1:74:f9:b8:09:6e:e1:2f:
d9:1c:82:45:74:41:04:08:aa:de:2d:c5:61:2a:61:69:00:92:
a4:b4:a3:44:99:ee:4a:2f:8b:cb:a4:c5:0d:16:80:32:a2:7e:
79:16:5e:de:28:96:5c:d6:69:0c:df:bb:17:ab:34:b7:7c:6b:
72:32:c2:a9:e4:71:82:75:cd:92:7f:50:d1:18:03:05:77:19:
24:2c:13:98:64:0c:6c:31:e0:33:eb:7c:61:8c:2d:9e:82:9e:
42:63:0c:f3:55:ca:bb:3b:69:72:34:ea:5b:6d:8a:73:c0:17:
8e:fe:68:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:23 2025 by rpki-client