Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/8bJJ0XbG2GGsRJ6eB_smMxSqOUY.roa
File: 8bJJ0XbG2GGsRJ6eB_smMxSqOUY.roa (raw, json)
Hash identifier: Sv0oxvIAZRXAM5O6x5vEyySc0CWfaL6sjHXCP9ry8JQ=
Subject key identifier: F1:B2:49:D1:76:C6:D8:61:AC:44:9E:9E:07:FB:26:33:14:AA:39:46
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 018F346E0617803BCB02BC90866A3190D00E
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/8bJJ0XbG2GGsRJ6eB_smMxSqOUY.roa
Signing time: Wed 01 May 2024 13:52:56 +0000
ROA not before: Wed 01 May 2024 13:52:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 185.233.184.0/24 maxlen: 24
185.244.49.0/24 maxlen: 24
185.250.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 13:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:34:6e:06:17:80:3b:cb:02:bc:90:86:6a:31:90:d0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: May 1 13:52:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1b249d176c6d861ac449e9e07fb263314aa3946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:8e:59:04:3e:00:84:72:2f:16:69:d2:85:
76:e2:a0:57:db:69:db:f8:91:7b:4d:46:3e:15:3b:
35:a4:48:92:56:fa:ea:bb:c4:35:49:4f:4f:e2:c4:
c9:6f:af:4a:cd:e1:ff:53:b3:be:f8:88:b8:d1:de:
bd:07:55:e6:2f:3e:b6:8a:3e:ca:ad:79:76:a0:b0:
0e:29:e0:9c:5e:29:9f:ce:b9:d4:09:d3:84:bf:e1:
c2:72:35:97:d5:09:ca:cd:79:97:7d:5f:8d:36:f5:
7d:0e:6c:0e:a6:82:e9:e9:e9:fd:47:65:1c:c9:9e:
ee:95:bb:7c:cd:ef:72:01:df:97:9d:78:8a:ac:e0:
eb:8e:42:8c:d0:cc:4f:6b:40:3f:48:8f:d5:3f:f9:
0b:44:96:c1:db:ae:e4:9a:3e:29:55:50:6d:2a:09:
75:29:4b:ba:29:3a:37:86:fe:79:fa:0c:32:8b:0d:
1e:87:19:e7:83:cf:98:ff:bf:80:4f:a6:b5:9a:01:
cc:f4:68:e7:fc:ad:7c:c6:30:f6:87:b8:e6:ba:7f:
04:c8:05:e6:f2:f9:15:f9:24:20:60:7a:57:ab:97:
cb:5d:05:e5:8e:c1:5b:c5:ed:51:a4:d0:2a:18:9b:
c9:c3:5f:1e:a3:69:c6:16:89:be:56:6c:3e:1d:3a:
53:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B2:49:D1:76:C6:D8:61:AC:44:9E:9E:07:FB:26:33:14:AA:39:46
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/8bJJ0XbG2GGsRJ6eB_smMxSqOUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.184.0/24
185.244.49.0/24
185.250.45.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c6:06:46:cf:4d:17:ea:ed:cb:b1:9d:75:03:0f:f9:a4:67:
48:f9:d3:58:b6:f4:0e:68:23:fe:1c:02:79:81:3b:7b:0c:6a:
6a:64:ba:e1:b3:d2:53:d1:89:a3:e3:91:2a:8d:01:6f:13:24:
0f:a8:63:2b:4e:f6:9e:b3:b4:72:15:ea:fe:b2:63:01:e5:3e:
bf:96:3b:be:6b:24:7b:4e:74:33:de:89:ab:29:b0:36:53:e0:
fd:a5:a8:7d:4b:d2:eb:1d:26:e3:c0:d3:c3:56:3c:f4:ce:01:
34:26:f0:10:ab:8f:a5:c6:98:08:cf:83:85:81:50:88:8e:df:
73:6a:23:85:37:2d:01:95:0d:f6:26:47:1f:e4:a6:11:f1:90:
3c:d4:0c:d5:48:19:c5:d7:0d:28:54:84:a9:78:24:b7:08:78:
36:25:4a:ce:af:7a:5d:69:6c:ba:ab:74:c7:9f:1b:b3:56:a5:
87:cb:4d:59:5f:e1:9d:73:48:b0:43:5f:69:13:50:71:3d:83:
3f:5c:c3:9e:79:d1:2d:d8:09:92:22:87:05:05:c5:ed:86:dd:
b0:af:fd:89:21:94:ee:71:a0:ef:68:72:61:84:45:9c:0d:5b:
da:e4:2d:28:c6:82:35:f5:40:8d:8c:59:9b:8b:8c:ba:ca:25:
ae:d9:22:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:21:03 2024 by rpki-client on console-ams.rpki-client.org