Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/CCseRMm5MlDSvjpeP8-OFgY21Gs.roa
File: CCseRMm5MlDSvjpeP8-OFgY21Gs.roa (raw, json)
Hash identifier: Pld1hv1egCoViBP7o8FOg15Y/dmJkl4zrBMc3/J/XqE=
Subject key identifier: 08:2B:1E:44:C9:B9:32:50:D2:BE:3A:5E:3F:CF:8E:16:06:36:D4:6B
Certificate issuer: /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Certificate serial: 018D58B0D263031E1026F62933DD2909C14C
Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/CCseRMm5MlDSvjpeP8-OFgY21Gs.roa
Signing time: Tue 30 Jan 2024 04:46:39 +0000
ROA not before: Tue 30 Jan 2024 04:46:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200249
IP address blocks: 185.252.140.0/22 maxlen: 22
2a13:7840::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 06 Feb 2024 10:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:58:b0:d2:63:03:1e:10:26:f6:29:33:dd:29:09:c1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Validity
Not Before: Jan 30 04:46:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=082b1e44c9b93250d2be3a5e3fcf8e160636d46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d0:73:7c:1d:f2:86:36:4d:b6:ae:01:99:d3:
4c:c9:5b:71:c9:19:dc:5e:8f:8c:13:e0:d4:a7:ec:
bf:47:28:4e:e0:2c:30:aa:b4:e6:70:da:6c:04:59:
00:a0:e9:cb:d4:04:3d:2d:ac:ae:72:00:c7:7c:81:
aa:32:f5:0a:0e:9b:8a:77:a9:0d:b0:a1:26:3f:d8:
cf:2f:e1:de:47:23:51:83:98:52:68:dd:ce:e2:84:
28:bb:b0:5f:22:dd:43:d5:10:5d:7a:18:10:a3:0a:
ec:80:aa:66:94:f7:22:7c:08:0b:40:74:7f:e5:c6:
82:5d:8f:b4:ab:e3:df:0a:46:da:fe:93:c6:ac:78:
85:7f:d6:14:09:d8:cb:d3:92:38:f3:11:ec:d3:a6:
03:f2:44:27:a5:48:42:b4:8b:72:4f:9f:f1:f9:80:
a6:ed:af:5f:57:97:b0:da:68:7f:21:03:ef:5f:06:
39:2b:25:23:30:d9:0f:c8:d9:3b:0d:84:8b:99:91:
88:58:68:85:bc:ba:c2:89:fc:07:76:69:75:c1:b1:
1b:4e:7c:cd:44:04:d1:2a:b6:43:db:52:54:3f:78:
7c:56:bb:fc:e3:63:49:a1:76:38:d2:bc:57:c0:95:
dc:7b:74:e3:79:3c:50:60:97:1e:33:9b:86:ce:d6:
c2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2B:1E:44:C9:B9:32:50:D2:BE:3A:5E:3F:CF:8E:16:06:36:D4:6B
X509v3 Authority Key Identifier:
keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/CCseRMm5MlDSvjpeP8-OFgY21Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.140.0/22
IPv6:
2a13:7840::/29
Signature Algorithm: sha256WithRSAEncryption
61:87:27:29:e2:a0:54:9e:9a:e7:e6:4a:1b:be:c8:a8:dd:27:
fa:e1:6c:a4:d1:3c:5e:d3:3c:27:9f:2d:b6:56:88:29:8f:04:
51:17:fd:62:e5:e0:64:af:9c:84:15:41:67:59:a4:76:80:09:
93:27:0e:16:e3:27:54:e5:33:6b:7c:4f:49:ad:9f:78:34:41:
b4:f7:9b:c6:67:d6:6d:78:53:11:09:27:01:61:32:05:88:bf:
fa:82:7a:87:e6:32:99:e6:3f:be:a8:82:0b:20:16:67:80:1b:
3d:22:7c:14:a9:06:59:37:d9:55:4e:4b:e0:ae:ea:bd:ab:0d:
4d:34:80:2e:e8:32:84:0e:ef:fc:9d:2e:01:86:96:25:f9:36:
b6:2f:a0:fe:a9:f1:07:15:e1:c6:47:5f:9f:87:f2:a2:a9:ec:
2e:67:96:82:56:5b:66:ee:8c:60:c4:9b:26:63:01:d5:5b:cb:
31:26:be:74:08:b4:35:06:71:48:76:d5:9c:e1:51:46:39:a9:
8e:f2:a3:aa:a0:5b:83:41:a9:a7:34:ea:67:6d:96:d8:b5:9f:
87:82:ab:91:91:bc:29:4a:16:a9:30:03:ca:f6:a9:d4:89:74:
e5:f2:6d:e3:63:7e:e0:d2:b3:ff:6a:46:ef:e6:91:d9:10:ac:
2d:bc:86:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:18 2025 by rpki-client