Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Igi4Di4mPkOYFnYNsHwwA3QyBOE.roa
File: Igi4Di4mPkOYFnYNsHwwA3QyBOE.roa (raw, json)
Hash identifier: p9bMRXcKdZehJA7r0PRGInxLuFsLp6cGIlCADKx1g2w=
Subject key identifier: 22:08:B8:0E:2E:26:3E:43:98:16:76:0D:B0:7C:30:03:74:32:04:E1
Certificate issuer: /CN=0b083808763c262541020d2e81da34aaa38283b7
Certificate serial: 018CCA96DE8692B734DC7CAE7FAD0AFEC24B
Authority key identifier: 0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Igi4Di4mPkOYFnYNsHwwA3QyBOE.roa
Signing time: Tue 02 Jan 2024 14:32:14 +0000
ROA not before: Tue 02 Jan 2024 14:32:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24749
IP address blocks: 86.106.188.0/22 maxlen: 22
185.70.148.0/22 maxlen: 22
2a03:35a0::/29 maxlen: 29
2a03:35a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 11 Mar 2024 11:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:de:86:92:b7:34:dc:7c:ae:7f:ad:0a:fe:c2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b083808763c262541020d2e81da34aaa38283b7
Validity
Not Before: Jan 2 14:32:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2208b80e2e263e439816760db07c3003743204e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9c:bf:ee:80:f3:22:17:56:ca:47:5c:0e:47:
41:99:b4:ed:fb:de:e4:b6:8d:ef:82:b3:f7:6b:40:
b9:dd:a3:b7:b0:06:90:67:ca:67:eb:43:49:a5:c9:
2c:d5:a0:18:17:32:0b:a0:89:c9:81:c4:25:5d:65:
67:5e:bf:b9:15:7e:89:d8:5d:3c:e7:07:54:07:3a:
9b:d8:93:91:07:75:f1:46:b7:50:12:52:72:b6:d0:
ca:a4:d7:f2:7e:9b:0e:85:c2:39:e0:39:ee:45:e0:
ca:22:02:19:b5:a4:25:57:34:42:be:d6:0c:cc:10:
c0:a6:cf:42:95:7c:72:ef:99:1e:bb:9d:99:19:01:
c3:5e:d5:1c:1f:4f:66:7b:b0:83:f3:48:a7:98:33:
70:4a:0c:74:46:6e:bb:58:9a:84:12:bf:c7:5c:68:
56:27:3f:e0:bd:98:bb:e8:ac:8d:31:f5:00:1b:b4:
bb:c3:31:fa:18:cd:3c:49:3e:82:7d:ce:cb:ac:1f:
c2:18:7d:31:aa:bf:67:a4:91:8e:86:4d:56:00:ed:
22:25:1b:0f:7d:a0:cb:b5:31:ee:52:39:be:6a:e3:
3c:c2:dc:7d:ff:8c:a6:71:fc:b7:34:46:b7:49:b4:
2c:07:66:cd:a6:0e:1a:70:bf:91:a6:d2:18:9c:f9:
0a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:08:B8:0E:2E:26:3E:43:98:16:76:0D:B0:7C:30:03:74:32:04:E1
X509v3 Authority Key Identifier:
keyid:0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Igi4Di4mPkOYFnYNsHwwA3QyBOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.188.0/22
185.70.148.0/22
IPv6:
2a03:35a0::/29
Signature Algorithm: sha256WithRSAEncryption
86:90:8a:11:8c:bc:d3:a4:a7:26:3e:38:a6:67:76:c3:3b:3b:
55:2a:7f:a8:da:66:8c:83:fe:3e:6b:22:86:ee:36:38:87:c6:
84:65:9e:6e:88:0e:d5:1d:aa:cc:a0:a7:b5:3e:f2:a5:9e:fa:
df:4d:6b:a0:7c:05:c9:d7:11:a8:8c:a6:2c:b7:50:af:8d:12:
f4:61:98:2c:78:d6:9e:cc:b5:0f:e9:ff:52:a7:ba:08:72:68:
8d:1b:e1:07:60:79:0c:f3:5a:9e:67:82:fc:f6:21:bf:0a:82:
d8:1d:b1:91:af:49:e9:64:85:15:27:95:b6:8f:75:cb:fb:59:
7e:bb:5f:f0:75:fd:ab:8d:d3:ec:66:0f:31:5d:86:df:f4:17:
af:7e:c0:98:f2:5c:ad:08:43:5a:01:96:ef:3b:fb:01:81:5d:
95:79:ce:c5:47:78:ee:32:46:3d:0f:e3:e7:29:db:70:76:33:
94:96:ba:4e:e9:d8:ba:c1:a8:32:85:b0:50:f5:1f:d6:91:8e:
66:48:dc:92:95:de:bc:b7:c3:ed:6d:53:f0:ae:34:6e:ea:0a:
eb:dc:b0:5f:7f:7c:79:3f:68:26:cc:fd:1d:68:f2:56:f0:7e:
ed:21:28:30:d9:67:c7:39:fc:52:de:d8:48:9d:c1:9b:81:4d:
12:f5:16:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 14:52:26 2024 by rpki-client on console-fra.rpki-client.org