Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/fV8eq0s4PZtQw_rmbX7dSVeGpyE.roa
File: fV8eq0s4PZtQw_rmbX7dSVeGpyE.roa (raw, json)
Hash identifier: twYd4ia5ik7a/UxXJ/KHMcJKd70S+BVCo10ylsoT19s=
Subject key identifier: 7D:5F:1E:AB:4B:38:3D:9B:50:C3:FA:E6:6D:7E:DD:49:57:86:A7:21
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 018CC348F6E5403187AA9BC8B5CD1878D910
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/fV8eq0s4PZtQw_rmbX7dSVeGpyE.roa
Signing time: Mon 01 Jan 2024 04:29:48 +0000
ROA not before: Mon 01 Jan 2024 04:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211368
IP address blocks: 185.239.158.0/24 maxlen: 24
185.239.157.0/24 maxlen: 24
185.239.156.0/24 maxlen: 24
185.239.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f6:e5:40:31:87:aa:9b:c8:b5:cd:18:78:d9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Jan 1 04:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d5f1eab4b383d9b50c3fae66d7edd495786a721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:e2:18:20:87:b2:ff:b6:9d:c3:66:6e:69:
54:9b:40:7b:b6:65:94:94:24:89:01:a9:58:48:22:
76:7d:7b:45:ae:86:2c:c9:d3:b3:9c:53:90:00:af:
e8:9f:a8:0f:53:67:79:aa:ea:a4:70:46:4f:59:f0:
c7:8a:be:41:6f:7a:cf:fb:57:3d:d1:cd:05:1d:e9:
99:f1:f8:03:ca:f4:da:7e:7c:2a:54:74:24:6c:d3:
f6:26:e3:ee:64:b5:aa:2e:9a:5d:da:df:19:1b:b1:
f1:df:18:92:5e:dc:0b:b4:89:74:41:08:6a:e1:6c:
ee:66:19:93:9f:e9:5b:43:d9:e2:d8:c9:7b:fd:98:
27:00:02:1a:80:72:54:51:b2:6f:c8:10:44:94:5f:
e4:12:17:e4:c1:7f:8e:11:dd:77:68:d2:f8:35:67:
22:ea:ca:e3:3f:df:c8:db:e9:cb:46:ea:75:72:c2:
f2:68:f3:bd:25:55:e9:5d:c2:4e:22:8a:f0:e4:32:
a3:78:47:a3:0b:32:10:35:28:81:df:63:4e:73:a0:
ed:db:6b:ae:e5:ba:49:d1:e7:3a:50:41:1e:f0:98:
d8:84:1e:b8:94:65:c3:7e:12:d4:69:91:0b:09:ae:
7a:8b:3c:cf:7b:24:c5:80:be:8e:25:0a:18:58:44:
09:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5F:1E:AB:4B:38:3D:9B:50:C3:FA:E6:6D:7E:DD:49:57:86:A7:21
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/fV8eq0s4PZtQw_rmbX7dSVeGpyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.156.0/22
Signature Algorithm: sha256WithRSAEncryption
17:38:94:91:cb:86:5c:77:e1:41:d4:80:80:6b:9a:4c:71:1e:
92:2f:d6:5a:e5:de:77:f0:8e:ce:55:2a:69:64:16:0a:b4:ff:
18:1b:39:77:61:56:1d:40:3c:58:53:7b:a7:46:ab:90:b1:02:
6b:80:54:6f:de:22:64:2e:2b:a5:76:8d:95:27:29:d3:1e:12:
aa:17:13:e3:68:e4:ac:4a:c4:58:a5:38:0d:ac:20:24:af:c6:
33:5d:bd:74:84:57:b5:6a:63:57:f2:c2:4a:ed:ff:c6:8b:2b:
a9:9d:90:d8:b4:17:2b:48:64:8c:d3:b3:a8:27:a6:81:6a:6b:
ff:cd:7b:1f:9d:89:67:cc:7e:f6:24:36:cd:0f:ff:2c:92:26:
93:2b:c5:e4:01:b5:17:e6:87:4a:55:ed:39:b2:62:0d:9d:27:
bb:9f:8a:03:7d:bb:dd:fa:f7:85:ad:6e:02:15:d8:00:12:2b:
f4:74:ec:b2:d1:9d:af:d0:62:d0:ca:50:61:f9:9d:19:4e:70:
ce:cb:0f:d0:5a:45:2e:24:8a:ba:ec:72:c1:9d:8f:c0:5c:89:
b9:d5:7d:f9:97:36:16:11:a2:eb:dd:4e:59:ab:77:65:ed:b0:
0d:53:75:33:46:2d:76:fc:ee:a2:27:4f:e4:20:63:14:15:d6:
33:b5:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:51 2025 by rpki-client