Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/iQDyjh2Gp1EehLJma5sUFRMcJ1o.roa
File: iQDyjh2Gp1EehLJma5sUFRMcJ1o.roa (raw, json)
Hash identifier: J8tzfTIv8efs9ttJ9aQJOW3w8ZRv5CGod/Ul05gsnlc=
Subject key identifier: 89:00:F2:8E:1D:86:A7:51:1E:84:B2:66:6B:9B:14:15:13:1C:27:5A
Certificate issuer: /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial: 018CC8DF2E47905718D5100E7D84379E2C22
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/iQDyjh2Gp1EehLJma5sUFRMcJ1o.roa
Signing time: Tue 02 Jan 2024 06:31:58 +0000
ROA not before: Tue 02 Jan 2024 06:31:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44309
IP address blocks: 185.229.139.0/24 maxlen: 24
185.229.138.0/24 maxlen: 24
185.229.137.0/24 maxlen: 24
185.229.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:2e:47:90:57:18:d5:10:0e:7d:84:37:9e:2c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Validity
Not Before: Jan 2 06:31:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8900f28e1d86a7511e84b2666b9b1415131c275a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:d8:57:fa:28:f0:cf:ce:c8:a5:f0:63:31:
40:b0:01:24:1a:38:79:57:fb:87:92:04:88:c8:dc:
f5:2c:59:f6:46:c9:e3:f1:40:8b:00:da:81:b4:17:
5c:12:c9:73:5c:39:f1:d8:dd:58:93:a5:38:9d:ce:
af:c7:e6:05:a8:c4:1b:72:90:8e:39:30:24:9c:32:
33:2f:f6:9a:72:27:4c:d0:f0:47:9b:5d:ab:6f:0a:
af:e5:d4:ec:e9:eb:e9:fe:08:46:c1:47:fb:b7:2f:
33:0d:ee:ca:a7:cd:68:24:dd:48:65:6b:5c:92:fb:
1b:5e:0d:43:2d:15:ab:72:b2:33:01:85:07:ed:df:
e7:15:4a:14:2b:c8:06:fc:a5:7b:ee:18:10:c9:57:
b1:81:d1:42:2f:64:8d:81:d0:21:b4:9c:83:9d:a7:
24:34:1f:fd:5f:57:b4:e1:17:7e:2c:f5:cb:58:c8:
2e:1b:89:5c:7a:27:65:9f:25:a8:66:8c:55:6a:72:
bc:ab:13:f3:0b:c9:5d:d3:6c:e3:d4:de:1f:5d:68:
66:52:dd:ea:26:30:98:7a:b9:90:db:9e:17:18:46:
f1:21:c8:e3:eb:63:2c:10:7d:9a:55:e6:e6:c4:34:
07:16:75:04:53:83:ae:2e:0b:a6:92:ee:50:a0:8f:
fc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:00:F2:8E:1D:86:A7:51:1E:84:B2:66:6B:9B:14:15:13:1C:27:5A
X509v3 Authority Key Identifier:
keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/iQDyjh2Gp1EehLJma5sUFRMcJ1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.136.0/22
Signature Algorithm: sha256WithRSAEncryption
96:b6:71:f8:90:da:42:c9:f8:48:b0:0d:85:36:ab:6c:f2:fc:
52:17:2c:57:f0:31:ea:16:05:f2:19:49:4c:25:61:bd:25:ba:
96:95:4e:9b:b1:d5:4a:79:dd:bc:a5:79:e1:99:f9:70:70:96:
a3:7c:bd:06:30:f9:1b:21:de:53:b0:3d:71:68:32:54:fb:2e:
08:df:e4:e6:52:e6:68:0c:05:e0:e0:72:ba:d7:ac:7a:a6:4f:
b1:17:92:0a:88:c6:29:0a:57:43:7f:89:ea:cf:a8:2c:35:af:
57:e9:19:fe:0a:b8:8f:f8:f3:f5:53:33:0b:94:b1:26:f2:92:
ab:be:ef:f5:93:4e:7d:3d:d6:99:2e:79:b7:a1:43:0e:f5:f3:
64:57:3b:2b:a5:0b:fa:db:fe:46:f3:b4:e2:76:d7:f6:e3:66:
59:02:63:8e:32:3c:a7:d6:86:99:7c:13:cc:16:13:1f:3f:d5:
f2:69:b7:6b:a4:bd:c9:0f:32:ec:ab:9a:a9:d1:78:3c:21:ad:
06:6e:73:79:e8:a8:6c:cd:8b:24:f6:e7:7f:bf:2c:97:ed:23:
be:20:90:f3:94:5b:4b:b3:ef:f5:d4:2a:08:23:9d:e7:90:c7:
33:79:81:65:9f:96:cd:b4:d9:b5:9a:c3:08:60:48:2c:19:ce:
65:95:6b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:53 2025 by rpki-client