Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/_8d-qgwm7JKvawIeIhnSC0-i264.roa
File: _8d-qgwm7JKvawIeIhnSC0-i264.roa (raw, json)
Hash identifier: POUE6LmAWTf2Ji0mB4M5uAptiTqGGhRIdLpnMQlI3Go=
Subject key identifier: FF:C7:7E:AA:0C:26:EC:92:AF:6B:02:1E:22:19:D2:0B:4F:A2:DB:AE
Certificate issuer: /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Certificate serial: 018CC94D5635514630EB4184A9B4939A64C6
Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/_8d-qgwm7JKvawIeIhnSC0-i264.roa
Signing time: Tue 02 Jan 2024 08:32:17 +0000
ROA not before: Tue 02 Jan 2024 08:32:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62459
IP address blocks: 185.35.39.0/24 maxlen: 24
46.243.60.0/24 maxlen: 24
185.35.38.0/24 maxlen: 24
185.35.36.0/24 maxlen: 24
185.35.36.0/22 maxlen: 22
185.35.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 08:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:56:35:51:46:30:eb:41:84:a9:b4:93:9a:64:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Validity
Not Before: Jan 2 08:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffc77eaa0c26ec92af6b021e2219d20b4fa2dbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:fb:dc:52:e2:a4:f5:a7:b1:34:cf:d0:19:
14:86:48:23:5c:fe:de:c0:cd:d7:af:f4:e9:d8:2b:
80:8b:eb:08:30:29:d6:73:fd:b2:85:d8:79:aa:8b:
ab:2b:9b:ed:7e:53:f2:ee:fd:92:15:93:fa:8a:bc:
b6:f8:dc:56:c4:3d:ee:d4:b2:7e:42:73:c4:8a:2e:
c1:68:59:2c:24:e2:26:e8:84:88:bb:97:ce:94:48:
7e:9e:c5:3f:98:9d:ae:79:7f:66:74:75:94:c2:ef:
6e:0f:ee:b8:a4:c4:7c:28:f0:bd:9a:ca:71:d9:36:
1c:04:8f:af:96:ad:e0:93:d4:30:98:e4:fb:9f:3d:
be:24:cf:56:82:b2:77:69:f9:05:94:65:50:71:ff:
3e:d5:b4:b5:c5:6d:22:65:75:b7:e7:32:0a:08:e6:
5f:dc:97:35:75:64:0f:d4:d6:c8:11:17:46:bb:bd:
5f:1e:ec:41:2a:ef:32:4e:23:fa:f0:0a:32:4d:4f:
76:4c:e5:f9:d2:c4:67:c3:61:fb:fc:89:aa:f0:9d:
4a:ae:a6:11:a3:f9:ab:b6:94:91:24:e5:c5:7a:49:
02:68:6d:5c:39:29:59:af:e0:5a:6b:fa:9d:09:18:
90:14:b6:e2:f1:ac:03:98:67:80:a1:21:0e:0b:22:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C7:7E:AA:0C:26:EC:92:AF:6B:02:1E:22:19:D2:0B:4F:A2:DB:AE
X509v3 Authority Key Identifier:
keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/_8d-qgwm7JKvawIeIhnSC0-i264.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.60.0/24
185.35.36.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:5b:28:9c:fd:41:e8:fd:3d:8e:17:1c:80:51:11:d5:b7:8f:
88:3c:43:0e:00:d2:13:f8:b0:98:72:b8:fd:0b:69:27:63:03:
c2:9c:75:26:6b:e2:6c:0c:60:22:09:53:52:fb:64:58:9f:0b:
fc:5e:44:f2:35:ec:75:54:0d:c1:ed:64:6b:eb:04:4f:88:a0:
15:98:2e:ca:36:e2:fc:ef:0a:df:dc:3e:20:b1:2e:70:5d:25:
5f:7c:97:0c:a3:13:26:2b:2d:55:79:3c:0e:8a:5f:2d:56:9b:
d3:48:e6:2f:86:49:d6:a5:ea:d2:43:bb:36:c8:dd:c9:5a:58:
16:44:39:4e:02:2b:ff:82:bb:eb:91:a6:d4:3e:60:30:ee:f2:
24:53:1f:c0:70:3e:ce:71:9a:86:90:fb:47:2c:e2:82:79:32:
07:10:03:c7:24:f6:88:0c:db:8f:7a:3a:91:14:91:71:33:84:
88:c6:d3:93:02:26:c6:7c:10:2b:5f:a6:36:ca:fa:5f:3f:20:
ee:47:15:3a:4d:31:b0:a3:8b:4e:70:81:0d:b2:aa:ba:5d:59:
b1:22:89:33:17:80:4d:3b:75:4c:40:1d:65:aa:f4:b0:1f:69:
44:43:ad:56:52:22:7b:dd:8a:d1:76:cf:5b:33:59:b5:aa:29:
2f:ee:6e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:06 2024 by rpki-client on console-ams.rpki-client.org