Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/hb9s8B0fxi1Tlum7uFfc1grPdM8.roa
File: hb9s8B0fxi1Tlum7uFfc1grPdM8.roa (raw, json)
Hash identifier: 5rTFQsjcQHfCOlP2Xh3S2CNvT7yWcP6cgnniOL11Ed4=
Subject key identifier: 85:BF:6C:F0:1D:1F:C6:2D:53:96:E9:BB:B8:57:DC:D6:0A:CF:74:CF
Certificate issuer: /CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea
Certificate serial: 018CC86F6E2BB4ECF5A2B63C488CF507A007
Authority key identifier: 47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/hb9s8B0fxi1Tlum7uFfc1grPdM8.roa
Signing time: Tue 02 Jan 2024 04:29:55 +0000
ROA not before: Tue 02 Jan 2024 04:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208819
IP address blocks: 185.212.36.0/22 maxlen: 22
2a0b:7040::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:6e:2b:b4:ec:f5:a2:b6:3c:48:8c:f5:07:a0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea
Validity
Not Before: Jan 2 04:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85bf6cf01d1fc62d5396e9bbb857dcd60acf74cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:d9:e8:b9:15:af:f8:f2:59:d7:78:1a:9f:
0d:2d:33:7a:b0:bb:c7:52:60:cb:2a:36:c0:79:9a:
73:51:c3:00:4d:f8:07:e4:97:97:ad:96:0f:b7:41:
ed:c2:56:9e:51:d5:d8:00:7f:0b:4a:12:f8:94:02:
dd:96:3c:94:3e:6e:64:cb:7a:9e:e7:06:c4:c4:21:
62:5c:ab:8b:b0:a8:9a:23:97:6d:d5:e8:2e:10:02:
42:15:2c:f3:30:4e:aa:73:3d:b7:be:10:18:28:4d:
78:d9:79:22:3a:e2:13:79:15:a0:ff:bd:5c:a5:23:
7a:c6:c5:a7:18:05:c0:05:b8:7b:52:37:f8:2a:32:
dc:7a:74:f0:df:76:59:fb:4d:c1:9d:fc:4d:b4:c5:
2c:2d:86:c6:37:b9:fe:eb:48:b4:20:28:55:9c:63:
b0:0f:e4:d0:26:ad:da:05:93:8d:68:d2:4c:45:f7:
1d:f3:24:2d:e3:5f:f9:05:3a:0f:36:db:29:66:34:
16:9f:f8:69:71:1b:57:34:38:de:17:a8:75:e4:aa:
fc:d4:9f:25:07:e5:ac:96:3e:92:34:c7:13:22:b7:
6c:25:20:1b:6b:8b:6c:98:64:5b:24:34:b4:9b:b9:
20:5d:0d:89:ff:57:af:91:d3:45:7d:14:f5:3e:1f:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BF:6C:F0:1D:1F:C6:2D:53:96:E9:BB:B8:57:DC:D6:0A:CF:74:CF
X509v3 Authority Key Identifier:
keyid:47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/hb9s8B0fxi1Tlum7uFfc1grPdM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.36.0/22
IPv6:
2a0b:7040::/29
Signature Algorithm: sha256WithRSAEncryption
0b:af:b4:45:52:25:82:ae:4d:c2:5b:5e:9e:f2:cb:c4:c5:bf:
8b:61:ab:61:b5:99:81:71:e6:9f:6f:6b:b2:05:7f:11:b4:5d:
d6:c2:9b:1e:e5:53:b4:52:8e:44:ac:88:8a:d6:34:b8:6f:8b:
30:8b:e4:08:25:23:26:22:4a:ac:e7:72:19:9b:8b:b4:8f:4c:
97:66:fe:c3:90:85:68:69:c7:f1:96:26:0f:2f:84:02:c2:78:
bc:40:fb:42:1b:45:d4:44:ca:ef:5e:da:70:76:07:8e:f9:1f:
87:68:21:44:cc:42:13:12:92:34:85:7c:05:5b:67:cc:47:fa:
fb:6d:a3:e1:49:8f:ae:ac:84:d3:7d:2c:a6:e3:29:e7:de:48:
a8:59:7c:70:6b:56:8b:07:fd:5a:52:0e:d8:00:b5:f8:5e:f6:
7f:05:ab:51:7d:88:06:5c:1a:d7:f4:47:5d:da:06:03:16:54:
cf:04:1a:d1:d5:3f:dc:60:c1:17:a1:68:76:6c:b3:ec:ca:ba:
b0:dc:2d:70:39:c7:bc:99:eb:44:5f:e3:1a:a1:3a:0f:ab:a0:
4d:75:2d:e6:a1:50:ef:c4:0c:37:53:5a:b6:8d:31:fc:69:2c:
17:8c:9e:6b:dd:b3:57:66:16:07:5a:d3:65:77:a5:e6:ad:88:
67:e2:e8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:51:09 2025 by rpki-client