Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/GO8_B5YjLG3dNHihTTaXb_0gbs8.roa
File: GO8_B5YjLG3dNHihTTaXb_0gbs8.roa (raw, json)
Hash identifier: eIqqzjqV3pjyvbuVTB409Pr4Eu+kemf9+kBMZN7piK8=
Subject key identifier: 18:EF:3F:07:96:23:2C:6D:DD:34:78:A1:4D:36:97:6F:FD:20:6E:CF
Certificate issuer: /CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Certificate serial: 018CC801723656CF5655AC6CF4B4C690DE26
Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/GO8_B5YjLG3dNHihTTaXb_0gbs8.roa
Signing time: Tue 02 Jan 2024 02:29:47 +0000
ROA not before: Tue 02 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203311
IP address blocks: 185.139.252.0/22 maxlen: 22
2a07:1180::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:72:36:56:cf:56:55:ac:6c:f4:b4:c6:90:de:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Validity
Not Before: Jan 2 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18ef3f0796232c6ddd3478a14d36976ffd206ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:26:1b:21:81:de:2c:a6:3a:b4:fb:fc:72:
4e:3e:86:28:13:a9:9c:be:52:77:a8:e5:b9:65:4d:
8d:00:02:91:99:cb:94:16:4d:23:a4:1f:14:fc:e2:
6c:5f:ea:a4:19:24:65:f2:d5:b5:02:92:11:3b:eb:
37:17:28:36:fe:46:59:e8:5e:85:8a:90:48:c8:76:
c6:7f:b6:73:0a:4d:40:64:b2:e0:20:af:bc:3b:d3:
a9:20:dc:ab:02:06:61:d8:49:87:e2:6e:b8:65:5d:
07:1a:a2:2c:f9:bf:14:12:e7:26:5c:4e:64:50:e2:
17:f0:2c:b4:ee:ac:d5:4a:60:21:a2:e2:ec:ff:36:
1d:68:41:e9:89:72:9a:9d:13:ac:d7:51:c6:80:27:
ae:8f:00:a4:5e:db:e6:82:2e:e7:5b:3b:55:46:b4:
6e:80:ca:1b:eb:a0:56:5f:66:9f:28:ef:38:c0:a0:
10:b6:82:96:98:f6:be:9a:53:56:19:f2:6e:09:11:
d9:1c:e1:8d:61:56:5c:e3:4e:73:98:5e:1b:29:b5:
19:b4:58:4e:67:00:0c:48:1e:bf:08:c9:84:19:b2:
3b:d6:cc:e5:a0:17:37:5e:67:ad:c9:21:2d:3f:9c:
76:1b:17:c7:d8:cc:35:c1:3b:12:24:57:6e:ee:3b:
48:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EF:3F:07:96:23:2C:6D:DD:34:78:A1:4D:36:97:6F:FD:20:6E:CF
X509v3 Authority Key Identifier:
keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/GO8_B5YjLG3dNHihTTaXb_0gbs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.252.0/22
IPv6:
2a07:1180::/29
Signature Algorithm: sha256WithRSAEncryption
7f:86:ef:45:8c:f5:e8:fd:8d:a2:0a:87:7c:b8:de:80:01:53:
88:02:81:e2:d3:0e:12:6b:7f:e9:13:3b:60:0e:8a:69:5b:31:
75:d1:a7:38:d1:f9:7d:26:ac:9b:5a:f5:9f:85:f0:48:46:c1:
59:7b:89:15:4b:10:c3:30:54:50:d6:f7:d6:13:25:43:2f:1c:
03:ee:4b:2b:dc:95:c8:e7:34:52:5c:bc:0a:fb:a8:2c:10:e2:
81:d5:6e:cc:d3:e1:a3:c9:7f:ee:64:f3:54:24:fa:a0:75:38:
c5:a0:c9:d3:20:ae:42:6d:ec:28:5e:7d:90:01:76:31:c8:7a:
b9:be:62:a5:e0:a2:b6:6a:0f:fe:87:7d:cb:98:27:44:e9:69:
9b:21:22:74:35:ee:2e:36:92:a0:8a:55:0b:05:cb:d1:87:42:
38:10:1d:15:05:30:92:a4:98:a1:d3:2c:3e:7b:a9:de:c6:95:
fe:03:b9:66:e9:76:eb:99:21:c1:9d:70:88:b2:fa:f2:f5:d3:
2f:a6:f0:b9:0a:a9:83:3c:05:bb:5a:ee:a8:06:40:66:54:a6:
7b:55:31:ee:22:be:1c:3b:72:9f:61:57:6b:bf:6b:1a:16:2a:
91:8f:ba:56:90:8c:be:d9:77:f3:1e:a2:78:be:53:06:ad:b4:
a5:8b:4a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:47 2025 by rpki-client