Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/HrfJx5R-OHQDOYmBpEj-AJRQ4Yg.roa
File: HrfJx5R-OHQDOYmBpEj-AJRQ4Yg.roa (raw, json)
Hash identifier: 31lBesmQkTGhkWiWRq6SW5+gH2kipqepw+h8F93LtuU=
Subject key identifier: 1E:B7:C9:C7:94:7E:38:74:03:39:89:81:A4:48:FE:00:94:50:E1:88
Certificate issuer: /CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Certificate serial: 018CC726B9C62E740EA82D9A330E30525331
Authority key identifier: 77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/HrfJx5R-OHQDOYmBpEj-AJRQ4Yg.roa
Signing time: Mon 01 Jan 2024 22:30:53 +0000
ROA not before: Mon 01 Jan 2024 22:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206194
IP address blocks: 185.188.191.0/24 maxlen: 24
185.188.188.0/23 maxlen: 23
185.188.190.0/24 maxlen: 24
2a0f:e980::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:b9:c6:2e:74:0e:a8:2d:9a:33:0e:30:52:53:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Validity
Not Before: Jan 1 22:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1eb7c9c7947e387403398981a448fe009450e188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:e4:bc:0c:11:f1:7e:f0:7a:28:0e:12:06:
b0:e5:7b:75:e2:b3:6b:f3:fa:b9:aa:38:8d:20:0b:
7c:e5:18:9d:e5:cb:87:f7:87:82:e9:92:61:f6:dc:
df:99:db:71:6f:85:92:80:1b:66:71:43:74:03:39:
7b:1f:c0:f3:59:82:b5:23:6a:24:94:dc:d2:71:28:
7f:ab:b1:ee:4a:f5:93:67:1c:19:3b:f1:ea:1e:21:
06:55:cc:96:af:1d:c0:67:54:b6:26:e2:1c:a1:5c:
02:e7:92:d1:55:0c:ec:a8:2b:f0:66:b0:bd:81:ab:
55:65:3c:dd:b8:d2:bb:6f:0f:01:e2:bc:e1:74:c5:
7c:c4:26:d8:69:0d:3c:bd:e7:a1:a8:3e:4d:4b:20:
40:f0:74:0b:33:67:fd:ef:5f:fd:43:ed:b8:dd:f7:
6d:75:f3:41:35:a5:5b:46:1f:09:8d:b0:ae:c9:56:
59:96:a4:05:5d:06:a2:17:0d:52:0a:26:2c:86:e8:
a8:5a:13:ef:60:e5:3e:58:e1:b1:95:e5:e5:e4:e5:
51:8c:57:f9:94:99:f3:45:24:48:33:55:9b:2a:62:
b7:6f:c9:b1:e1:9f:cc:6f:28:8a:00:d3:53:81:72:
ac:41:fb:f4:fc:98:a7:63:8a:a2:b5:26:7a:b8:95:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B7:C9:C7:94:7E:38:74:03:39:89:81:A4:48:FE:00:94:50:E1:88
X509v3 Authority Key Identifier:
keyid:77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/HrfJx5R-OHQDOYmBpEj-AJRQ4Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.188.0/22
IPv6:
2a0f:e980::/29
Signature Algorithm: sha256WithRSAEncryption
29:e7:17:67:c7:35:1d:fe:8a:54:7c:7d:09:b0:58:a3:c6:2e:
ee:90:46:fd:4f:6e:31:cd:57:9d:e7:90:b2:06:33:8f:40:d0:
0b:b2:7b:7e:45:53:b5:2b:8c:5f:c4:db:e2:55:4b:ec:6c:97:
d2:33:c0:a9:fe:35:17:0e:60:a4:15:5a:c7:fc:9c:60:0b:ec:
0e:b4:06:72:c6:32:c9:13:8f:ff:3a:16:7c:9d:39:a9:e4:41:
aa:55:78:b1:8d:a5:be:65:3c:7d:57:0a:92:90:3d:5d:b2:c0:
53:bc:70:32:43:a7:b6:8c:e6:f3:ab:ed:d1:e4:af:75:af:5d:
7a:4f:ec:05:49:40:5c:f7:5e:5e:09:fe:7e:92:cd:02:65:26:
04:95:ce:07:ad:d5:c6:b2:f0:c8:4e:77:ab:f8:c2:17:e4:8b:
55:6a:30:04:28:09:bc:75:74:9b:df:13:76:44:f3:f3:cc:ee:
eb:b3:d2:49:fe:6c:c3:c0:d8:a0:8f:53:20:69:b7:5d:1a:b2:
12:2f:cd:f9:00:c1:70:0b:89:91:e1:ba:5e:1b:68:aa:e2:71:
9b:fd:65:8e:0d:51:63:3a:3b:09:69:38:b5:7c:5e:eb:27:b4:
32:cf:b2:8a:1f:03:2f:7e:d7:64:6d:b0:0e:53:d3:4d:e7:17:
63:02:d9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:54:15 2025 by rpki-client