Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1-88YOPu-JXNcqtw8odiGrp8VkyQ.roa
File: 1-88YOPu-JXNcqtw8odiGrp8VkyQ.roa (raw, json)
Hash identifier: bNwu9Sbe/+UtVwBQZvOiNsE972QEm7S+Og8Hdi5wK5Y=
Subject key identifier: FB:CF:18:38:FB:BE:25:73:5C:AA:DC:3C:A1:D8:86:AE:9F:15:93:24
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018D352FF50A6E0E5D2F45337CA026279AE4
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1-88YOPu-JXNcqtw8odiGrp8VkyQ.roa
Signing time: Tue 23 Jan 2024 07:19:11 +0000
ROA not before: Tue 23 Jan 2024 07:19:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152179
IP address blocks: 185.114.144.0/23 maxlen: 24
185.179.218.0/23 maxlen: 24
188.64.104.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 06:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:35:2f:f5:0a:6e:0e:5d:2f:45:33:7c:a0:26:27:9a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 23 07:19:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbcf1838fbbe25735caadc3ca1d886ae9f159324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:98:5e:9c:e5:27:b2:bf:9b:5a:7a:e9:12:
07:9a:18:c0:a3:a3:93:c3:35:21:d6:f5:66:70:57:
8b:20:25:b2:76:7f:ae:98:e0:79:6d:33:22:36:f4:
09:83:b8:ef:99:ad:7f:9c:5e:3c:a8:fa:1b:ad:d0:
21:eb:8d:33:e1:81:35:f6:27:28:80:bc:f1:9a:84:
48:e9:4f:29:da:1a:aa:b7:4f:f7:86:31:eb:55:14:
dc:e8:bc:d0:63:1d:7b:34:94:c5:28:32:94:4c:de:
83:20:e7:08:c6:94:6c:5b:5f:9d:24:da:67:a6:9a:
88:42:ca:ef:01:68:61:0f:80:99:98:51:5b:aa:f9:
c3:d3:ac:c0:4f:19:0f:98:9b:d7:92:06:04:70:b2:
c8:08:2c:fe:c3:8a:e5:b1:f8:d8:f5:41:d5:5f:ba:
72:da:f5:99:77:13:37:a6:ae:b6:2c:c9:41:dc:bf:
60:45:e6:f2:44:82:77:bb:bd:ba:ca:69:63:b0:60:
d7:0d:0c:25:53:a6:40:f2:e4:f5:49:6c:06:21:42:
16:67:27:c2:1f:5f:5b:24:7a:11:7e:e4:62:ca:dc:
4d:6a:f4:0e:40:20:a7:41:26:27:ff:ba:3b:1e:64:
18:f4:f7:61:37:6f:62:44:2f:94:61:52:30:54:e4:
73:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CF:18:38:FB:BE:25:73:5C:AA:DC:3C:A1:D8:86:AE:9F:15:93:24
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1-88YOPu-JXNcqtw8odiGrp8VkyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.144.0/23
185.179.218.0/23
188.64.104.0/22
Signature Algorithm: sha256WithRSAEncryption
75:2e:68:72:fc:c9:5e:d9:f7:66:df:8a:b7:f2:16:94:8a:a1:
cc:fc:26:c9:68:36:f5:17:86:3f:23:29:8a:55:06:59:d3:ac:
d1:74:db:71:9d:79:a1:99:b3:9a:1f:fa:aa:b9:55:aa:51:cc:
d7:5d:3a:a2:71:75:b4:3b:f2:bb:cb:9e:7c:40:71:9e:5f:a5:
f8:07:5c:b5:07:5f:2b:6b:2a:c5:e9:de:f7:b4:bc:d2:9b:6c:
28:07:39:d9:d7:d3:e0:bd:8a:3c:24:1e:ad:8b:1a:6a:4c:00:
c9:8a:40:70:9b:23:29:d7:e3:88:c8:19:95:4c:b9:ef:9f:03:
e1:84:85:64:72:03:31:40:df:19:52:b4:8f:cf:f8:38:68:ba:
b6:26:52:d2:1e:cd:47:ad:f6:84:5e:cf:28:b6:4e:89:2e:d9:
d4:1c:ce:a2:d7:45:c3:b4:0f:76:e6:0a:72:0d:01:56:36:46:
09:cf:cb:83:9d:b1:48:c2:8c:c1:b9:a1:8e:17:9b:7f:21:53:
be:84:1a:c1:75:d9:1d:4d:87:ec:e4:5a:d0:54:42:b6:e5:c1:
f6:fd:e5:3e:93:dd:56:ba:ba:a6:b1:cf:53:04:2c:71:57:1f:
16:8b:88:50:8f:5c:29:02:ec:93:c0:84:91:75:cb:8d:b0:d1:
5e:a7:16:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 15 09:14:57 2024 by rpki-client on console-ams.rpki-client.org