Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/iq3rBshrPahl3_t48R4CllEv0UE.roa
File: iq3rBshrPahl3_t48R4CllEv0UE.roa (raw, json)
Hash identifier: N8aa+gUtnrdcVamyjnBpV/JH/lhLjS7ya+hddHPmouA=
Subject key identifier: 8A:AD:EB:06:C8:6B:3D:A8:65:DF:FB:78:F1:1E:02:96:51:2F:D1:41
Certificate issuer: /CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Certificate serial: 018CC2DB1664C9B85679E1389F9D1A5609FF
Authority key identifier: AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/iq3rBshrPahl3_t48R4CllEv0UE.roa
Signing time: Mon 01 Jan 2024 02:29:47 +0000
ROA not before: Mon 01 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199708
IP address blocks: 185.48.201.0/24 maxlen: 24
185.48.202.0/23 maxlen: 23
185.48.203.0/24 maxlen: 24
185.48.200.0/23 maxlen: 23
2a04:b280::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:16:64:c9:b8:56:79:e1:38:9f:9d:1a:56:09:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8aadeb06c86b3da865dffb78f11e0296512fd141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7f:5e:bd:c6:34:44:b6:0a:61:65:a7:93:d6:
38:e5:a0:a7:88:e3:b1:3a:26:97:65:3d:b0:9b:25:
01:6a:16:a4:e6:bd:0c:4c:d3:f7:f8:29:b4:9e:87:
af:35:60:d2:c3:2b:7b:c1:c0:95:1a:83:4b:b2:77:
5b:db:0f:d4:e6:98:21:54:5b:27:19:97:1b:47:cd:
bd:bb:9f:f9:91:49:2c:d1:8c:84:7c:21:35:fa:cf:
e8:62:97:d6:de:98:ac:68:df:dd:8f:43:6f:0a:75:
d1:3c:80:4f:01:bb:9c:82:48:f2:e9:72:02:56:da:
9d:80:5e:7e:fd:f9:2c:4a:b0:35:61:31:c0:50:0b:
f9:15:13:93:d5:0b:2e:58:e6:56:60:9a:69:90:b1:
1a:b2:81:bc:ff:ea:ff:61:7e:a4:71:1a:07:4a:e7:
7f:9f:1f:f7:a2:d6:1f:d9:9b:8c:2b:06:df:be:b2:
56:8f:06:b6:83:0c:32:96:f5:e5:2b:33:c7:48:2c:
68:8c:1e:76:9d:ac:e6:c6:02:07:58:d6:ff:bd:35:
12:89:b2:46:f1:32:26:ef:ea:3d:f1:a4:2c:de:37:
0d:d8:51:36:df:6b:e6:09:30:d3:6e:7e:85:2a:88:
9b:d1:8a:f0:10:73:e9:e2:25:6f:79:8d:3c:f8:95:
93:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AD:EB:06:C8:6B:3D:A8:65:DF:FB:78:F1:1E:02:96:51:2F:D1:41
X509v3 Authority Key Identifier:
keyid:AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/iq3rBshrPahl3_t48R4CllEv0UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.200.0/22
IPv6:
2a04:b280::/29
Signature Algorithm: sha256WithRSAEncryption
00:41:e0:1a:e3:7f:92:da:b6:5e:3e:97:86:9c:92:3a:53:f9:
21:1d:e7:00:4b:6c:9d:2f:15:01:85:0b:bb:07:50:27:d7:1f:
81:af:a6:14:dc:b5:1f:da:73:18:5b:f5:74:0a:fd:8b:3f:7d:
8f:e5:81:89:5e:b7:d3:dc:15:54:3e:be:7e:d9:d0:d0:b8:7e:
e1:50:8a:fb:50:99:ca:c0:3d:02:c1:da:51:d3:d8:95:f6:48:
90:4c:15:73:1d:b6:f8:39:2c:7e:b8:53:7b:cb:75:3d:53:df:
a3:0b:26:0a:58:5d:1a:1b:6a:48:29:d8:8b:12:df:ee:0a:a9:
a6:7a:55:e5:a4:ef:e3:53:be:d7:e5:34:ec:73:5c:db:e4:69:
13:a5:b3:54:5f:45:9b:a8:06:b9:82:3c:e7:63:1c:59:a4:42:
5c:f3:4b:a2:94:e5:5c:9a:0a:25:63:96:fb:68:47:dd:8f:03:
14:6e:a3:fe:dd:99:96:0a:68:b5:44:2c:34:02:a6:08:a6:6f:
94:25:34:37:d3:df:1b:67:8c:21:fe:20:bc:66:ab:df:e8:e1:
a6:77:8a:ba:d3:8b:b7:2d:0b:42:29:dd:e1:7a:b9:e9:06:c4:
d9:3d:87:05:6d:34:82:16:a4:42:51:22:f1:ba:0e:e3:0a:64:
dd:33:4a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:02 2025 by rpki-client