Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/s8EUrDn1_cDjIo0ai0wQiiFvnTc.roa
File: s8EUrDn1_cDjIo0ai0wQiiFvnTc.roa (raw, json)
Hash identifier: Y+nWpEDcmBreiQ+l4kmMxt/J2usGInBdzHxjb3PyZAs=
Subject key identifier: B3:C1:14:AC:39:F5:FD:C0:E3:22:8D:1A:8B:4C:10:8A:21:6F:9D:37
Certificate issuer: /CN=73340fd7b3c285637adc00f1e61e2b8e402658f3
Certificate serial: 018CC9B88049997EFB0436BFFFB9FA9C4054
Authority key identifier: 73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/s8EUrDn1_cDjIo0ai0wQiiFvnTc.roa
Signing time: Tue 02 Jan 2024 10:29:21 +0000
ROA not before: Tue 02 Jan 2024 10:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51299
IP address blocks: 185.158.144.0/22 maxlen: 24
194.61.87.0/24 maxlen: 24
2a07:ae00::/31 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:b8:80:49:99:7e:fb:04:36:bf:ff:b9:fa:9c:40:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73340fd7b3c285637adc00f1e61e2b8e402658f3
Validity
Not Before: Jan 2 10:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3c114ac39f5fdc0e3228d1a8b4c108a216f9d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:94:40:ba:e8:c0:dc:e1:84:eb:07:50:fb:77:
9e:84:96:73:fd:13:52:1a:9a:26:10:5d:ee:85:ef:
61:12:3c:47:5f:0f:94:12:2f:e9:91:cc:04:31:90:
6a:da:50:c2:ed:a3:67:9a:6f:00:73:3b:54:17:1b:
22:b7:df:cc:94:3e:2d:7b:26:a4:e2:2a:c2:d4:95:
7a:86:24:b6:32:a9:9c:e9:81:81:b6:d8:37:ff:64:
6d:fa:26:f0:80:d2:bb:d8:3a:db:ae:35:89:ef:39:
d9:ef:26:79:b9:19:69:1e:0a:75:ce:cf:8f:4f:a7:
3f:37:52:77:95:1d:7a:47:d8:41:a1:6d:45:7a:98:
3c:2f:bd:06:c1:e8:84:57:41:96:41:46:fe:24:4b:
c8:f5:2d:c9:f6:10:f8:e3:0a:ef:03:2f:35:6e:59:
0f:d4:02:3f:6c:ca:39:0c:69:b0:c3:87:2c:e2:36:
71:1f:91:ea:a6:8d:30:56:08:ae:fc:89:6e:f8:20:
df:6d:53:8e:5b:28:9a:aa:50:3e:87:19:49:60:f6:
aa:c6:30:3c:8e:dd:e5:0b:76:ce:bd:a2:5e:db:4a:
2d:d8:05:39:88:95:b7:83:92:28:86:21:e9:ce:86:
68:78:32:9b:53:e8:7d:13:43:c8:82:e2:a9:5d:af:
a6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C1:14:AC:39:F5:FD:C0:E3:22:8D:1A:8B:4C:10:8A:21:6F:9D:37
X509v3 Authority Key Identifier:
keyid:73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/s8EUrDn1_cDjIo0ai0wQiiFvnTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.144.0/22
194.61.87.0/24
IPv6:
2a07:ae00::/31
Signature Algorithm: sha256WithRSAEncryption
29:85:7a:ab:22:97:8a:9f:4e:cd:fa:a1:24:01:54:7e:db:02:
c8:4a:00:e2:9a:c7:54:64:9e:ab:0e:b3:42:9f:d7:0e:97:01:
ed:c8:07:9e:ac:88:a3:1c:7e:57:a5:de:22:fc:ad:53:2a:b8:
1e:f5:e2:dd:14:fa:8f:4d:24:5a:9b:d9:81:17:73:32:1e:5b:
a2:66:83:05:b4:4b:97:f1:d8:71:7e:9a:e9:7c:bd:75:e8:51:
4f:93:1c:36:56:7d:05:a4:36:28:df:bf:40:1b:8a:0f:42:29:
85:6e:b0:79:03:0c:f1:8d:20:b9:4f:42:30:e3:2e:6d:d4:06:
d3:6d:07:a2:4d:cd:92:f5:5f:12:b4:c0:42:f6:54:d7:d7:21:
7a:6e:f1:f7:71:2a:46:6a:76:6a:bc:7d:5c:ca:00:6a:9a:c7:
41:0a:10:46:93:d4:87:0d:e9:a9:31:2d:ec:67:7c:c4:6a:1e:
fb:94:8a:21:b5:f5:30:8b:6d:64:6d:b0:8f:89:33:50:97:5c:
dc:c0:6b:0c:b9:e2:c5:96:8d:03:34:06:56:58:74:39:49:ec:
13:81:db:67:e2:e2:27:45:7d:b7:fb:8a:ce:29:c4:ad:03:79:
71:e6:1a:9e:98:fd:9e:58:c7:d4:c2:f3:d9:86:73:8d:a7:2c:
b2:3a:f7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:10:51 2025 by rpki-client