Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/1I24sH6IZKFnLefFFnPYP9geJuA.roa
File: 1I24sH6IZKFnLefFFnPYP9geJuA.roa (raw, json)
Hash identifier: YhoscECoYCMhkWYj30QI4PitWjPxWoywfAPfNPsrk+M=
Subject key identifier: D4:8D:B8:B0:7E:88:64:A1:67:2D:E7:C5:16:73:D8:3F:D8:1E:26:E0
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 018CC7277414919D823AB4748AE02ABFEC8D
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/1I24sH6IZKFnLefFFnPYP9geJuA.roa
Signing time: Mon 01 Jan 2024 22:31:40 +0000
ROA not before: Mon 01 Jan 2024 22:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60171
IP address blocks: 185.10.165.0/24 maxlen: 24
185.10.166.0/24 maxlen: 24
185.10.164.0/22 maxlen: 24
185.10.167.0/24 maxlen: 24
185.35.140.0/22 maxlen: 22
2a00:dd60::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:74:14:91:9d:82:3a:b4:74:8a:e0:2a:bf:ec:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Jan 1 22:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d48db8b07e8864a1672de7c51673d83fd81e26e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:06:32:cc:cc:93:35:89:10:79:4c:b8:30:
fd:12:28:45:e2:fe:99:4d:91:28:74:8e:ec:56:80:
b5:00:f8:51:b1:38:d3:a0:0c:3b:54:df:a6:ca:3c:
eb:34:a0:bc:b2:0b:e8:cd:7f:be:ca:55:3f:0a:b0:
b1:21:73:81:4e:ea:da:26:23:36:71:54:ed:2a:1d:
f0:63:7f:a9:0b:da:a1:8e:b4:7c:6a:cd:d6:9f:9f:
a3:ea:ba:14:f9:c1:48:3c:dd:3f:49:bf:fc:5d:2f:
72:d0:b4:01:a5:85:31:0c:05:bb:07:5f:60:85:68:
50:90:d5:79:e8:45:38:a2:45:a0:40:81:b0:a3:7f:
47:21:34:9d:e0:12:55:34:86:86:dc:34:3a:ad:37:
07:8c:0b:b4:e7:06:ee:ac:53:d3:5b:1f:2f:2a:59:
61:4d:13:51:4b:25:20:15:ec:4c:23:36:e3:5f:cd:
9c:b7:c0:03:a9:17:14:7c:0d:94:f5:f1:99:11:2a:
21:a8:7e:40:40:80:bd:c7:00:3c:31:ce:e5:14:86:
f7:87:c0:08:75:1c:5c:f7:7c:b3:a2:5e:22:c8:29:
e9:de:d4:30:4f:2c:b5:ad:44:8b:74:0e:44:92:c2:
09:b9:21:76:37:25:ad:79:09:e6:65:50:37:8c:56:
67:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8D:B8:B0:7E:88:64:A1:67:2D:E7:C5:16:73:D8:3F:D8:1E:26:E0
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/1I24sH6IZKFnLefFFnPYP9geJuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.164.0/22
185.35.140.0/22
IPv6:
2a00:dd60::/32
Signature Algorithm: sha256WithRSAEncryption
48:3f:b4:3c:d1:43:2d:6a:6d:6b:53:a6:e0:bb:74:e5:f1:24:
84:7d:cc:c5:66:f0:ed:e3:d4:74:4e:5b:87:df:58:e0:fd:eb:
98:cd:8b:33:33:26:c6:bd:cb:d2:e2:b3:88:ba:e9:28:98:af:
81:76:af:aa:1c:61:bd:0f:59:aa:cd:77:2b:14:c1:40:11:ea:
a3:d2:02:4e:6d:59:b8:f4:02:92:4b:83:db:e7:29:f9:d2:24:
dd:56:58:df:94:3e:3e:74:74:e2:83:13:73:4f:31:cf:f9:ad:
9f:33:9e:84:4f:7c:94:ac:08:03:52:77:cd:c8:0c:36:07:39:
37:a5:67:d0:7a:6c:ac:7f:6c:e1:d3:11:fc:72:c1:81:9a:1c:
dd:b3:b7:b0:79:80:63:73:6a:35:bb:c1:9b:f2:da:e3:5e:2d:
81:35:bb:9d:dd:72:a9:2a:99:d6:63:34:38:81:9a:71:a6:19:
83:16:9b:0f:a8:92:bf:f8:fd:70:2b:16:6b:d3:13:43:85:f8:
66:5a:b1:8d:e2:32:5e:ba:89:3c:55:88:fd:5f:c5:f5:a3:3b:
3e:32:f4:81:96:66:10:dd:56:8e:6a:a3:8d:6c:c3:b0:58:31:
bd:28:f7:89:cc:06:c4:94:90:48:4e:c9:69:bc:3c:97:fe:9c:
75:66:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:40 2025 by rpki-client