Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/SLB_YBeyg-w7MmP6Zye2DxwxZi4.roa
File: SLB_YBeyg-w7MmP6Zye2DxwxZi4.roa (raw, json)
Hash identifier: b/h9CxWKP8ZneboUqdpH7av0Iuah8zn6NPGe+RGTU8A=
Subject key identifier: 48:B0:7F:60:17:B2:83:EC:3B:32:63:FA:67:27:B6:0F:1C:31:66:2E
Certificate issuer: /CN=53799560453dcf4af31f9b2a40cd238b8457c5de
Certificate serial: 018CC72684D3C857A6FB6BEE0179CC86CB87
Authority key identifier: 53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/SLB_YBeyg-w7MmP6Zye2DxwxZi4.roa
Signing time: Mon 01 Jan 2024 22:30:39 +0000
ROA not before: Mon 01 Jan 2024 22:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205176
IP address blocks: 185.227.116.0/22 maxlen: 22
185.227.116.0/24 maxlen: 24
2a0c:aa00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:84:d3:c8:57:a6:fb:6b:ee:01:79:cc:86:cb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53799560453dcf4af31f9b2a40cd238b8457c5de
Validity
Not Before: Jan 1 22:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48b07f6017b283ec3b3263fa6727b60f1c31662e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:30:b2:23:fc:00:e1:e1:91:8f:a3:f7:20:
bc:cc:d1:dc:34:f9:29:43:28:72:a5:26:33:1b:80:
48:f6:8b:65:3e:ab:f6:14:b6:a6:94:5f:30:8a:d0:
6f:12:96:e1:e0:cc:1d:36:bd:a5:d5:ea:1e:94:c9:
c3:7d:52:9c:f2:d7:5e:42:33:39:f8:18:b5:d7:da:
ce:78:b2:04:8b:75:c2:c9:78:ed:d5:83:cb:0d:bb:
b8:f3:c8:cb:0e:a9:25:24:fa:3e:05:2f:0c:67:4c:
a8:86:16:7d:06:80:9d:fd:ea:94:48:e0:58:7a:e1:
f0:57:c6:63:18:2a:bd:85:55:04:ba:e8:ba:ac:fb:
bf:00:3e:ba:23:93:0b:0b:5a:84:e2:a0:e4:02:b9:
cc:96:8f:e6:d8:c9:0a:7a:fc:6c:60:3d:45:3a:b3:
6a:16:13:3a:93:57:ad:03:80:1d:e7:45:1d:65:dc:
e7:2d:d3:57:7c:ee:dd:ce:b3:36:e1:bc:c8:39:29:
c4:58:4b:5c:9e:c4:13:1f:25:5a:9a:0d:25:1d:0b:
ec:77:41:da:06:40:fc:5d:72:8e:d8:9a:7b:07:16:
04:dd:d3:2d:72:48:9b:61:1a:f6:5d:5d:a6:ff:dc:
62:18:7d:57:2d:0f:13:57:6a:7f:0b:f5:68:f1:ac:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B0:7F:60:17:B2:83:EC:3B:32:63:FA:67:27:B6:0F:1C:31:66:2E
X509v3 Authority Key Identifier:
keyid:53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/SLB_YBeyg-w7MmP6Zye2DxwxZi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.116.0/22
IPv6:
2a0c:aa00::/29
Signature Algorithm: sha256WithRSAEncryption
24:8a:ef:e9:94:ef:4b:a0:36:2d:6f:b3:20:d6:28:24:fd:26:
8d:ee:27:74:a6:91:91:58:23:57:67:77:18:90:68:de:3a:5e:
b7:9b:5f:e0:ef:46:77:07:f2:2d:cc:f0:47:fe:dd:ce:cc:4d:
f2:1a:34:5f:f0:69:de:28:0e:a8:0e:e0:dd:7d:d7:96:11:84:
69:10:2b:4b:67:ab:9d:b7:9b:61:6b:98:83:87:e9:77:38:0f:
cb:bd:17:3e:fe:53:53:50:fc:b3:b0:6d:db:3c:31:99:f2:34:
db:ab:29:b4:91:d0:26:e3:aa:c0:8c:ca:0e:63:c4:53:16:21:
23:7c:37:f1:8c:af:48:23:14:1f:49:3a:0a:88:73:12:33:34:
7c:d8:0f:4a:0d:1e:8f:c5:44:1d:31:4b:8e:27:29:47:9a:72:
78:e8:eb:cf:7d:2f:5c:85:61:d7:c5:a5:b9:3e:43:cd:4b:7a:
7a:ea:98:77:47:79:a2:2b:63:51:e5:35:52:f8:65:29:f9:e7:
d6:3c:00:44:7d:ab:b7:b6:27:d4:77:f2:d7:72:10:68:70:69:
c1:e5:fc:da:b2:66:3f:39:f7:57:dc:68:c0:7d:03:f4:8b:7b:
4a:84:2a:07:06:dc:43:3e:0a:54:21:df:c9:d5:36:3c:a2:db:
d1:92:50:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:54 2025 by rpki-client