Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/ywswZ0YjZzfDPXTquzsPwHQ-rBw.roa
File: ywswZ0YjZzfDPXTquzsPwHQ-rBw.roa (raw, json)
Hash identifier: oRDzwcM8fEoIG7VRrzx6S5MH+KtTHLhu3qOceCVj1Zo=
Subject key identifier: CB:0B:30:67:46:23:67:37:C3:3D:74:EA:BB:3B:0F:C0:74:3E:AC:1C
Certificate issuer: /CN=167782bea46fd271768ff46d9b45c057a9df5481
Certificate serial: 018CC2DABB3DA3088AF72F4DB62C288BC8CB
Authority key identifier: 16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/ywswZ0YjZzfDPXTquzsPwHQ-rBw.roa
Signing time: Mon 01 Jan 2024 02:29:23 +0000
ROA not before: Mon 01 Jan 2024 02:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205101
IP address blocks: 185.219.132.0/22 maxlen: 22
185.219.132.0/24 maxlen: 24
185.219.135.0/24 maxlen: 24
185.219.134.0/24 maxlen: 24
185.219.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:bb:3d:a3:08:8a:f7:2f:4d:b6:2c:28:8b:c8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167782bea46fd271768ff46d9b45c057a9df5481
Validity
Not Before: Jan 1 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb0b306746236737c33d74eabb3b0fc0743eac1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:2a:5e:3e:25:19:02:9e:fd:64:35:43:41:
f8:48:b3:ee:1c:7d:eb:89:57:bf:aa:61:db:4c:68:
a3:08:a9:a0:79:1f:15:70:b8:50:03:7f:fb:6f:5c:
68:74:77:f2:c2:57:66:33:08:72:13:bd:31:db:65:
36:ed:1a:e3:88:2e:d3:85:72:9f:4e:dd:08:6b:74:
43:ae:36:19:a2:7c:5a:b1:94:cf:69:c4:5e:17:dc:
ac:79:fe:f5:64:7b:29:1e:29:62:0b:59:d2:7f:16:
6a:5e:4d:d9:44:96:d6:5a:d9:24:f2:d0:a8:04:88:
82:a2:b5:91:f9:a2:17:e3:83:6d:25:01:08:62:8b:
3f:19:9b:ce:60:8a:97:f8:75:40:d0:22:5e:64:e1:
fd:ba:2e:83:9c:99:3e:6c:bb:83:19:da:42:66:c9:
32:8a:7c:a3:f5:b2:c0:7d:9f:77:c2:99:cd:be:2b:
05:ca:4b:3d:d7:a2:72:b2:2d:8e:85:a0:f5:72:d6:
90:74:ac:1c:14:b5:65:41:4a:05:2e:ad:70:26:ce:
ff:69:b8:3d:23:98:b8:9a:1e:25:70:4d:17:b1:cc:
bf:53:3b:f1:ea:96:eb:96:e8:01:89:fc:dd:74:e8:
94:68:5a:63:47:07:de:e1:03:d1:28:ef:91:e8:c8:
0e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0B:30:67:46:23:67:37:C3:3D:74:EA:BB:3B:0F:C0:74:3E:AC:1C
X509v3 Authority Key Identifier:
keyid:16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/ywswZ0YjZzfDPXTquzsPwHQ-rBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.132.0/22
Signature Algorithm: sha256WithRSAEncryption
44:83:7c:86:67:d7:eb:94:5b:b3:92:2e:75:7a:ab:a7:dc:db:
18:77:67:2e:dc:8d:8b:9f:98:02:86:51:80:85:d3:b3:16:1b:
bd:40:04:69:bb:5e:15:d5:1f:58:2a:06:e6:fd:72:06:e6:fc:
fc:a1:b9:67:60:5e:a8:64:e0:25:1d:4f:56:b2:24:f9:15:c5:
46:15:b6:57:41:72:8f:9f:15:7c:bb:c5:af:09:6f:f0:13:65:
a0:f1:0d:82:60:88:ed:51:a5:11:2d:ed:ac:f8:1e:b3:7b:29:
49:9a:a5:c8:4b:c8:b9:73:3b:11:af:38:24:f3:05:2b:3a:cf:
60:56:2f:25:8d:b9:f0:06:d3:f4:e0:f9:e2:7c:37:fd:dd:96:
eb:69:dc:b0:b0:a8:7d:b9:80:e0:a1:2c:6c:91:44:15:28:af:
c8:cd:b1:43:bd:30:33:bb:17:2f:ef:98:63:fb:16:8a:83:08:
65:00:78:7d:ca:ef:c4:ac:7b:5f:ad:59:ef:92:9a:e9:fe:a4:
39:94:3d:37:ef:b0:5e:cb:c9:6d:b4:06:1a:78:0c:64:98:30:
a8:e6:6b:3c:55:9b:e8:a5:16:ae:a9:c7:25:d5:f6:f7:4a:c4:
76:63:4b:23:d6:b3:74:0e:5f:be:0f:43:8c:05:a4:37:dd:20:
3d:4d:45:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:36 2025 by rpki-client