Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/iXDDWCQgNMhB6bA4DR5XGg8Qt4o.roa
File: iXDDWCQgNMhB6bA4DR5XGg8Qt4o.roa (raw, json)
Hash identifier: I9dPh2bejlLHM2ztxEJ3kI/tfac2p4ouftyReAozhCw=
Subject key identifier: 89:70:C3:58:24:20:34:C8:41:E9:B0:38:0D:1E:57:1A:0F:10:B7:8A
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 018CC5007356EA56F4CE68EE1FB67309D5D4
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/iXDDWCQgNMhB6bA4DR5XGg8Qt4o.roa
Signing time: Mon 01 Jan 2024 12:29:50 +0000
ROA not before: Mon 01 Jan 2024 12:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206270
IP address blocks: 185.188.100.0/22 maxlen: 32
2a0a:10c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 18 Nov 2024 21:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:73:56:ea:56:f4:ce:68:ee:1f:b6:73:09:d5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jan 1 12:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8970c358242034c841e9b0380d1e571a0f10b78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:90:05:fe:2b:0d:a6:ac:c9:a0:eb:61:f9:94:
a3:11:e7:d2:eb:1c:57:33:7c:02:ba:67:27:75:6e:
e1:b7:f0:88:e3:c5:a5:6c:f9:d7:6c:c8:33:db:9e:
e5:03:10:ac:82:c5:76:2d:91:f0:bf:2f:eb:75:19:
9a:4e:04:dd:bb:cc:8c:ac:6b:98:1d:34:27:fe:27:
99:17:9c:23:13:32:f4:76:fe:c7:f6:f7:71:1e:2c:
19:53:75:17:90:f1:60:04:f1:4f:bd:39:21:8b:7c:
1e:a7:02:8a:77:87:6a:e1:35:5b:11:42:51:1b:82:
94:fb:9c:b7:d8:c7:44:81:17:91:00:16:07:7d:0e:
3a:29:25:b1:53:f5:0d:aa:e5:31:0b:6e:86:e7:16:
ef:06:19:25:d9:d1:86:9b:f7:25:38:cd:ed:ca:a4:
72:cb:4e:3c:9d:f1:79:76:dd:11:ba:78:73:22:50:
b4:ae:24:a0:e1:d9:f5:05:07:d5:33:4a:91:19:be:
67:c2:d6:9a:8b:ef:99:a0:7b:2d:4e:b0:c4:48:98:
cc:46:5e:44:54:7d:29:d2:d0:7d:61:d8:ab:9e:19:
7a:26:92:90:78:92:8e:0a:95:d6:44:58:66:32:a9:
fa:4d:00:3c:f8:3e:6b:90:e4:37:a9:fc:e9:ec:f2:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:70:C3:58:24:20:34:C8:41:E9:B0:38:0D:1E:57:1A:0F:10:B7:8A
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/iXDDWCQgNMhB6bA4DR5XGg8Qt4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.100.0/22
IPv6:
2a0a:10c0::/29
Signature Algorithm: sha256WithRSAEncryption
77:1f:e5:b6:e3:3e:58:bd:2c:64:41:94:a8:3f:77:31:d3:95:
3b:c3:e6:8e:08:55:4f:2b:21:fd:90:ee:9b:c4:3a:09:04:9e:
dc:bc:61:4d:f1:e1:b7:15:e5:74:fd:7e:ec:07:fd:d7:ed:fc:
a3:f7:c7:11:e4:21:7e:d4:b5:66:f5:86:40:bb:66:2e:33:f2:
83:e4:67:da:04:7e:ea:88:94:e9:a8:fa:97:a1:76:cd:5d:4e:
3b:c5:4f:1d:17:5e:92:f0:df:80:59:fe:19:f0:aa:80:64:44:
73:24:42:08:ab:c1:4a:56:b0:ab:33:1d:cd:04:70:75:de:c4:
25:98:99:65:1d:1a:bf:64:8e:37:97:99:32:f1:97:be:07:13:
d9:19:be:de:f7:ca:71:a1:3c:86:46:d4:3d:49:50:fe:40:7c:
78:7c:90:94:c6:44:ae:20:d9:8e:f5:55:ce:4b:8a:4c:c5:fe:
7b:90:05:8a:ba:ca:c3:92:9f:c7:bf:15:c1:30:0e:61:d6:ca:
58:4a:31:a8:2b:98:3a:b1:73:e5:2b:e2:0c:74:a8:5d:30:ad:
c3:48:84:c5:a9:98:fe:f5:72:74:2e:60:37:4e:1f:0e:c9:be:
47:9e:05:96:4b:33:62:37:46:32:ba:25:1c:66:0f:00:b7:57:
62:f1:25:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:10 2025 by rpki-client