Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/Ii8TxhukAfqZzS80Nu3fSUle3mA.roa
File: Ii8TxhukAfqZzS80Nu3fSUle3mA.roa (raw, json)
Hash identifier: NRnDu93VDHKflq7FsmneN22fUBO+LfE7yRer0IU9xcg=
Subject key identifier: 22:2F:13:C6:1B:A4:01:FA:99:CD:2F:34:36:ED:DF:49:49:5E:DE:60
Certificate issuer: /CN=e5de0de73e73874bbc66738805d373cab833b7a5
Certificate serial: 01933F2F7AFCFD1687A99243B1E455DA40FC
Authority key identifier: E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/Ii8TxhukAfqZzS80Nu3fSUle3mA.roa
Signing time: Mon 18 Nov 2024 12:11:36 +0000
ROA not before: Mon 18 Nov 2024 12:11:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.137.156.0/24 maxlen: 24
2a10:a100::/48 maxlen: 48
2a10:a100:1::/48 maxlen: 48
2a10:a100:2::/48 maxlen: 48
2a10:a100:3::/48 maxlen: 48
2a10:a100:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 19 Nov 2024 11:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:2f:7a:fc:fd:16:87:a9:92:43:b1:e4:55:da:40:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5de0de73e73874bbc66738805d373cab833b7a5
Validity
Not Before: Nov 18 12:11:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=222f13c61ba401fa99cd2f3436eddf49495ede60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:eb:f3:2b:a7:62:be:e8:19:23:d7:d3:d8:
29:81:35:01:68:d8:91:24:17:95:65:b9:b4:cc:a7:
ea:4d:91:9c:75:5e:bc:7f:55:52:9c:e6:a5:b2:e0:
5f:57:64:de:38:39:10:0b:88:39:cd:a0:f2:51:6f:
d1:63:7a:5e:1a:2b:ef:fa:2c:f0:3f:31:9c:7c:a2:
a9:fb:fd:44:21:be:2d:dc:3c:3b:ad:99:5e:d6:24:
b8:01:60:73:c5:eb:a2:40:b9:f9:26:48:c3:37:b3:
78:5c:1a:91:28:0b:8a:56:8b:62:9a:b5:09:6d:3e:
71:9e:7b:72:c6:6c:8a:e2:6a:a4:d7:7f:8e:0d:80:
4d:39:73:96:5e:04:e2:af:ea:41:4c:01:d5:60:7b:
64:a0:97:73:3b:4c:50:a3:e0:dc:4e:b6:42:0e:6d:
3e:a3:95:b7:44:a2:18:b5:8a:28:5a:29:62:7a:cd:
81:50:b6:9d:52:f1:0f:62:5b:75:d0:c4:1e:32:b1:
dd:4b:0a:a2:bd:c5:76:da:91:d4:fb:a3:32:c2:a3:
a4:23:d4:67:c4:4b:9d:1e:99:8d:01:7f:8a:27:3b:
db:41:d7:ce:2e:49:16:ad:87:33:cd:1d:7a:1f:f9:
6f:6a:e6:c1:05:8d:7c:30:dd:2f:fc:fb:1b:3d:9b:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2F:13:C6:1B:A4:01:FA:99:CD:2F:34:36:ED:DF:49:49:5E:DE:60
X509v3 Authority Key Identifier:
keyid:E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/Ii8TxhukAfqZzS80Nu3fSUle3mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.156.0/24
IPv6:
2a10:a100::-2a10:a100:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a9:7b:78:6e:f2:b2:a6:64:4b:39:d1:73:e4:99:d4:eb:0e:a9:
89:cb:bc:fc:cb:d8:4f:e8:6b:62:89:40:84:3c:bb:df:4e:0c:
bc:55:09:e4:4c:90:82:60:09:8b:b4:2d:ee:b2:45:68:45:a6:
38:52:02:aa:fd:c3:92:c2:a5:8c:4c:fb:c2:58:35:74:09:d0:
3a:32:94:85:3b:bc:f1:a2:96:55:01:bc:98:39:09:26:04:12:
e4:a6:67:f3:85:3f:91:2e:c3:44:c4:18:ee:30:f5:9e:a4:00:
42:fd:82:c3:c5:50:c7:ff:d0:7b:c5:06:78:92:ed:e9:5b:d1:
d8:dc:13:a2:b6:4b:2d:d3:eb:ec:96:2a:16:e3:dd:a3:57:19:
31:d5:c3:9b:40:c5:95:8e:db:09:c2:cc:12:4f:bd:ab:95:91:
d9:0e:18:86:c5:64:e8:08:9f:1c:5d:2b:70:89:3f:8b:3b:45:
f0:90:5a:2e:c6:3f:c5:a5:02:34:e3:71:52:a4:57:73:ee:06:
a6:5b:14:bc:40:11:00:98:bf:1d:8d:08:b1:5f:7a:eb:13:83:
f4:1b:e9:79:07:3c:d4:00:2e:7a:7c:09:db:c2:1b:bf:5c:84:
69:55:3d:67:e6:cd:5d:bd:09:e7:35:ea:2f:93:3f:ae:78:47:
c9:97:6e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:48:23 2024 by rpki-client on console-ams.rpki-client.org