Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/X3ZuM2ZTFEBepDoYw7QpTMo-H3g.roa
File: X3ZuM2ZTFEBepDoYw7QpTMo-H3g.roa (raw, json)
Hash identifier: wddqV9fIqw9IWVJtcoNL0hIPAYQryVVwKMG0c4ivWdA=
Subject key identifier: 5F:76:6E:33:66:53:14:40:5E:A4:3A:18:C3:B4:29:4C:CA:3E:1F:78
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 018CC3494B10E242ED12C3AE20890F747703
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/X3ZuM2ZTFEBepDoYw7QpTMo-H3g.roa
Signing time: Mon 01 Jan 2024 04:30:09 +0000
ROA not before: Mon 01 Jan 2024 04:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35819
IP address blocks: 185.133.181.0/24 maxlen: 24
185.133.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 07:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:4b:10:e2:42:ed:12:c3:ae:20:89:0f:74:77:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Jan 1 04:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f766e33665314405ea43a18c3b4294cca3e1f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:30:d0:95:ed:7f:42:40:e8:cb:58:be:f4:51:
1e:54:ce:e1:00:94:8b:c0:33:b4:79:0a:60:20:fd:
5f:ab:ae:64:69:bd:6b:f1:f3:d8:fd:d5:ac:9d:fb:
d5:9b:d0:36:51:e5:18:ef:21:5b:24:89:d8:91:cf:
dc:4b:bf:31:0b:36:09:50:5d:32:97:1f:6f:29:e1:
9a:fa:59:00:e6:eb:65:60:41:c9:68:b5:24:d0:fc:
0e:98:75:fa:d7:30:52:35:8d:0f:e8:8d:61:85:af:
9d:bd:0b:f2:57:70:52:00:72:25:22:70:25:d7:05:
ee:32:a4:0c:c4:12:12:12:39:53:46:63:85:cf:6d:
27:fe:de:27:8f:ec:60:f8:58:1d:f0:d6:8b:f1:fe:
52:16:4f:b9:f8:ed:0c:de:b4:ea:d0:1a:d9:03:88:
36:d4:95:71:72:18:50:7c:1b:f1:ec:42:f9:fe:57:
74:9e:c1:c9:29:84:da:dc:34:ab:80:43:6b:3d:3b:
14:66:3d:f2:13:d4:6b:e9:18:c6:bd:9c:94:e4:97:
78:06:02:b7:8a:21:90:22:1c:7d:8d:46:d0:cb:2c:
73:30:45:42:1d:5b:15:c7:f7:b6:29:cd:c5:17:57:
e5:58:24:c3:cc:50:ef:68:75:c9:3e:b0:92:ac:b3:
79:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:76:6E:33:66:53:14:40:5E:A4:3A:18:C3:B4:29:4C:CA:3E:1F:78
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/X3ZuM2ZTFEBepDoYw7QpTMo-H3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.180.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:0e:c0:c6:50:fd:72:38:21:14:0c:82:f4:c3:36:e2:13:b8:
6f:57:b9:e2:51:9a:b2:8c:96:a8:1f:3c:59:ae:e4:07:39:52:
3c:f5:c3:01:c9:16:d8:68:09:d0:99:9c:bd:25:89:17:cc:62:
47:93:6e:41:76:52:ff:64:be:5c:61:fc:2b:ae:2e:aa:fc:e3:
2a:02:3c:ab:9e:10:92:06:e6:2d:bf:0d:cc:1b:99:30:39:24:
f7:48:88:19:ff:f0:e3:71:65:37:30:ef:ec:27:21:f8:81:89:
79:fc:7d:84:5e:02:cf:6b:47:71:97:dc:3e:b7:16:9c:c3:7b:
99:db:d7:ad:fd:04:5a:9f:1b:e6:d1:f4:21:03:2c:74:3a:74:
0b:f2:b3:b6:10:0a:cd:e8:20:1f:39:56:c9:b4:9f:c1:0c:61:
07:78:7a:59:fd:69:17:ad:ed:61:6d:b5:5b:96:65:fa:c6:17:
43:4d:d4:d0:7d:05:b6:89:b1:ed:4d:28:c4:28:50:34:64:37:
e9:f4:3b:0d:6e:f2:ba:1b:f9:dc:fc:a0:82:af:e7:c1:23:03:
aa:08:fc:26:ff:42:57:3b:18:dc:97:89:73:5f:db:59:08:2e:
d2:6d:96:a6:02:29:e0:0d:cc:0f:f4:db:15:0e:74:b9:5e:a4:
fd:8c:4e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:40:21 2024 by rpki-client on console-ams.rpki-client.org