Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/Ibh6ipUD0Ww3meB7iU-6bFb1-Ao.roa
File: Ibh6ipUD0Ww3meB7iU-6bFb1-Ao.roa (raw, json)
Hash identifier: 1iyxoE4G56GB9J2458hhiHRV81wsizn2MCdLcy5+aRk=
Subject key identifier: 21:B8:7A:8A:95:03:D1:6C:37:99:E0:7B:89:4F:BA:6C:56:F5:F8:0A
Certificate issuer: /CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Certificate serial: 01857246CD1FABC8142DC88336BE7556112D
Authority key identifier: 6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/Ibh6ipUD0Ww3meB7iU-6bFb1-Ao.roa
Signing time: Mon 02 Jan 2023 11:38:40 +0000
ROA not before: Mon 02 Jan 2023 11:38:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50925
IP address blocks: 185.188.236.0/24 maxlen: 24
185.188.239.0/24 maxlen: 24
185.188.238.0/24 maxlen: 24
185.188.237.0/24 maxlen: 24
185.188.238.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:cd:1f:ab:c8:14:2d:c8:83:36:be:75:56:11:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Validity
Not Before: Jan 2 11:38:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21b87a8a9503d16c3799e07b894fba6c56f5f80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:80:29:0f:72:6f:44:71:7c:c3:fe:c0:2b:35:
06:af:16:af:4e:18:8b:b6:98:de:a3:6d:e6:4e:07:
cb:c6:0d:43:f8:4a:1f:af:7c:80:32:01:89:53:18:
4d:c6:0e:de:c6:a1:be:aa:88:3a:c3:64:64:c9:cc:
9a:99:7a:58:a6:9d:20:3b:13:6b:4b:93:66:9d:7a:
55:8e:de:82:6b:61:e7:7f:ad:a3:ee:a2:8c:2a:06:
9a:14:5e:e2:53:5a:4e:e6:ba:4b:58:b0:e6:7e:a1:
ca:6f:b9:bd:da:61:c1:00:22:d8:17:f0:a0:bd:6f:
4a:1e:98:f0:1e:29:93:eb:7a:4b:a6:cb:9f:71:9f:
6f:0c:56:00:55:fe:3b:04:1c:79:30:2e:34:c8:7c:
31:a3:be:17:cf:83:c7:9f:0c:e9:0d:95:e6:0e:15:
65:fd:56:68:a1:39:c2:ab:b9:a1:fe:65:be:ea:bf:
a9:ab:b8:21:92:f0:bb:e2:69:d1:cf:d8:2f:13:66:
af:d4:ee:24:98:22:81:12:de:1b:d8:61:15:80:3b:
5d:32:d2:54:c5:93:38:20:e4:a1:c6:49:47:5a:59:
d5:6b:4c:87:eb:7a:15:bc:88:8f:f3:81:e5:64:6e:
fb:d2:ab:75:c8:5f:40:1c:5f:ce:b9:81:a3:9c:84:
e2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B8:7A:8A:95:03:D1:6C:37:99:E0:7B:89:4F:BA:6C:56:F5:F8:0A
X509v3 Authority Key Identifier:
keyid:6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/Ibh6ipUD0Ww3meB7iU-6bFb1-Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.236.0/22
Signature Algorithm: sha256WithRSAEncryption
61:3a:c8:1d:ae:fb:30:cc:58:de:9b:88:aa:f4:48:d8:0e:99:
f3:a5:72:d2:23:62:cc:82:97:aa:28:c5:b2:62:d6:a3:93:3c:
67:e7:fa:df:80:81:86:02:5e:8c:6f:ba:68:91:8c:fc:ad:ed:
84:42:44:b3:c6:70:da:9b:50:b2:d9:7a:31:f8:b9:2f:49:e9:
2e:42:21:b3:99:38:a5:1e:2b:1b:1f:88:0e:50:2d:0f:b8:52:
eb:f7:61:85:f9:7c:6f:68:6c:cd:aa:38:f1:60:7f:f3:3b:54:
a3:e9:ad:77:aa:82:02:19:d3:80:93:78:72:8a:5c:05:33:94:
cc:79:b0:6d:dc:59:99:46:e9:30:6a:9d:eb:72:4d:4e:4f:da:
ce:1c:07:9c:56:c2:0d:6b:6c:69:55:33:ec:1a:48:a1:81:d2:
93:e9:a3:9d:e9:19:2d:14:5a:ed:78:54:70:7d:75:e6:39:24:
14:14:aa:4e:56:4e:2b:41:76:8f:72:2b:fe:87:3a:dc:89:8e:
32:0c:8f:16:a7:15:2b:50:65:34:46:6e:28:d6:07:c0:a0:8f:
e8:e5:41:eb:7f:03:21:d9:25:0c:e2:c8:0a:d8:fb:8d:86:0d:
b9:69:9e:c7:23:f1:86:2f:a9:92:e8:97:be:0c:1d:36:7c:d5:
cc:01:bb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:31 2024 by rpki-client on console-ams.rpki-client.org