Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/tY33wZ2zGgu_YkKd4GkivXvIfok.roa
File: tY33wZ2zGgu_YkKd4GkivXvIfok.roa (raw, json)
Hash identifier: qF/L0T0xvFtViBienhkHx/BzfD513Zst//TlbPqRNOU=
Subject key identifier: B5:8D:F7:C1:9D:B3:1A:0B:BF:62:42:9D:E0:69:22:BD:7B:C8:7E:89
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 018D59E47099B495524B3D034A8220E7E218
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/tY33wZ2zGgu_YkKd4GkivXvIfok.roa
Signing time: Tue 30 Jan 2024 10:22:39 +0000
ROA not before: Tue 30 Jan 2024 10:22:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43668
IP address blocks: 185.218.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 13:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:e4:70:99:b4:95:52:4b:3d:03:4a:82:20:e7:e2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 30 10:22:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b58df7c19db31a0bbf62429de06922bd7bc87e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:8b:a5:e4:0a:3e:fd:57:b1:08:2a:b3:cb:
2b:f4:a1:4f:d2:fc:66:5d:cb:34:00:7b:73:24:09:
1f:45:0c:1e:85:1a:fe:c1:b5:c2:f1:4d:91:9b:35:
f2:52:b3:06:64:da:f5:57:2c:39:b5:0f:50:a1:5c:
11:85:94:63:18:af:46:67:6a:27:36:5f:29:a0:63:
25:4a:f8:48:db:31:d5:bb:4e:74:79:63:cb:f3:a9:
a5:a8:eb:36:f7:97:50:4a:a0:5f:49:89:7d:9a:ed:
0b:c3:99:5d:99:53:3c:aa:14:6f:1c:f3:a3:f5:9f:
5d:c0:95:97:f6:59:00:50:75:2e:a5:80:21:83:db:
14:df:f1:71:37:ba:69:71:0a:a5:c0:64:20:96:11:
ee:24:90:4f:8b:84:18:58:12:24:f2:58:6b:18:ce:
a7:fe:3f:0b:58:9d:90:91:c2:da:a6:a6:e9:c6:fa:
11:0f:3c:bd:90:b5:fd:7e:9c:ab:36:a2:dd:67:05:
3c:35:02:b8:d5:3b:cd:8f:22:08:f6:3d:a4:6a:32:
c7:ba:b0:23:c0:21:e0:7d:3c:ac:07:e1:32:d4:36:
77:04:73:03:ee:6d:f9:82:23:3b:45:91:57:c1:13:
5a:71:b4:9e:12:31:ab:23:bc:ad:35:6d:3b:b8:fb:
f2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8D:F7:C1:9D:B3:1A:0B:BF:62:42:9D:E0:69:22:BD:7B:C8:7E:89
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/tY33wZ2zGgu_YkKd4GkivXvIfok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.200.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c5:45:74:68:bc:84:aa:9b:20:b2:ad:c3:98:c4:35:43:10:
43:69:92:b5:5a:66:c8:61:07:c5:f6:13:c7:bf:86:55:c6:5a:
88:e4:b6:1a:01:e0:85:f1:12:12:50:66:ac:64:ce:d7:bf:63:
52:9a:13:87:93:9d:6e:4a:7f:87:e0:ac:a0:37:dd:a5:a5:53:
59:47:e2:bf:6c:17:24:e5:bb:35:bf:01:be:eb:c1:16:7b:c1:
b5:ee:02:22:8a:f8:86:d3:5b:b1:0d:77:c3:d6:a1:1c:cc:5b:
c1:a0:ac:45:26:99:a4:9e:06:01:40:94:b8:35:de:69:b6:cc:
bd:55:ad:29:f8:0a:f5:ea:1a:e4:39:67:60:c6:5a:52:9a:fb:
4b:bc:e2:bb:7a:98:96:75:64:c4:bb:15:f5:eb:c6:5c:21:1f:
6e:1f:9a:49:e6:db:b1:30:30:24:80:cc:1d:ec:39:0d:3d:f9:
a6:20:e0:67:a5:d9:2c:0c:48:7e:a3:2a:5c:7f:cd:1c:cf:d7:
a3:2b:17:a4:98:dc:69:e1:31:6c:56:77:ac:fe:70:61:23:4a:
3d:9a:25:f8:32:17:45:94:bd:b4:c5:06:47:8a:88:d9:a8:c0:
0f:36:42:11:9f:06:ca:58:00:ab:2b:cb:3f:41:14:88:17:ca:
43:f6:b0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 17:15:32 2024 by rpki-client on console-ams.rpki-client.org