Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/SReaaIe02as5RaFJONuNZ6Cyzrs.roa
File: SReaaIe02as5RaFJONuNZ6Cyzrs.roa (raw, json)
Hash identifier: /kIs9yR/BhvHFweU7s7GnMozTzQcoowuP/jlnRRaES0=
Subject key identifier: 49:17:9A:68:87:B4:D9:AB:39:45:A1:49:38:DB:8D:67:A0:B2:CE:BB
Certificate issuer: /CN=3092b117062f6065faa1cdfd38915e4bb9c924bb
Certificate serial: 0185CE854C9587A5DD39EA24C832E75D904B
Authority key identifier: 30:92:B1:17:06:2F:60:65:FA:A1:CD:FD:38:91:5E:4B:B9:C9:24:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJKxFwYvYGX6oc39OJFeS7nJJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/SReaaIe02as5RaFJONuNZ6Cyzrs.roa
Signing time: Fri 20 Jan 2023 09:32:00 +0000
ROA not before: Fri 20 Jan 2023 09:32:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.121.143.0/24 maxlen: 24
185.121.140.0/24 maxlen: 24
185.121.142.0/24 maxlen: 24
185.121.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ce:85:4c:95:87:a5:dd:39:ea:24:c8:32:e7:5d:90:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3092b117062f6065faa1cdfd38915e4bb9c924bb
Validity
Not Before: Jan 20 09:32:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49179a6887b4d9ab3945a14938db8d67a0b2cebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:68:81:20:48:2c:44:28:fe:a0:cb:d4:27:
2e:26:ab:c6:8b:2a:4e:4a:34:9c:08:7f:3c:33:db:
e2:2c:77:89:de:d9:6b:de:06:5b:d1:2e:50:ec:04:
6c:e6:e8:7c:2a:8d:15:26:11:48:b9:2a:91:a1:56:
03:ed:3e:cb:13:bd:b1:18:a2:eb:f7:da:77:0c:06:
43:e2:cc:46:24:01:1b:ad:2e:01:f4:d2:08:51:7f:
cb:60:fc:f4:36:d0:f4:04:2d:4f:77:21:f8:be:96:
16:bb:f1:ac:6c:aa:f7:c0:52:32:fe:cf:91:4a:78:
a6:0f:6b:bb:5f:57:dd:c4:20:d7:3c:68:70:0a:c6:
dc:85:59:e4:ca:01:f0:ee:9e:b1:2a:20:d1:66:b2:
8b:f9:81:28:42:ef:cc:96:27:10:b1:13:2b:3a:92:
d4:d2:dd:8d:10:fd:ec:df:f4:63:7d:28:c6:e9:c8:
98:16:07:18:92:5c:20:50:99:02:ee:cd:db:90:1d:
21:36:b2:67:36:10:ec:5e:65:85:92:80:21:b0:12:
30:e0:4e:f1:bd:57:56:ca:f4:13:98:23:46:9f:5c:
ba:64:7f:8b:69:6b:82:bf:d0:da:bd:68:96:db:db:
f9:fa:2e:4a:4d:51:e8:70:4f:2f:a0:0f:91:09:0c:
ff:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:17:9A:68:87:B4:D9:AB:39:45:A1:49:38:DB:8D:67:A0:B2:CE:BB
X509v3 Authority Key Identifier:
keyid:30:92:B1:17:06:2F:60:65:FA:A1:CD:FD:38:91:5E:4B:B9:C9:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJKxFwYvYGX6oc39OJFeS7nJJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/SReaaIe02as5RaFJONuNZ6Cyzrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.140.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:7b:e5:86:ea:52:21:5c:d5:cc:c9:e3:33:ac:96:21:a4:ef:
e4:a0:34:34:6b:a1:18:69:ab:cd:30:6e:fb:4f:5a:a3:8c:10:
9a:3c:fb:24:84:9a:4d:3c:0f:12:67:62:58:25:8a:17:25:18:
45:71:ae:73:10:c2:87:74:53:e9:bc:40:8a:52:cc:ae:c6:73:
c1:83:4c:9e:eb:10:6a:98:73:74:74:e8:ac:97:85:f6:87:33:
d1:01:1a:af:69:dc:56:a9:e7:25:00:59:30:be:33:fe:3c:e0:
8d:13:82:6d:7f:db:72:1d:55:31:69:c4:e6:54:1b:10:c8:13:
d5:9f:db:ca:35:33:2d:89:6e:4b:62:d2:5a:ac:f1:82:86:34:
55:3a:d2:bf:54:f3:56:d8:ea:44:2a:cc:04:f8:6e:7d:18:24:
f9:5b:89:d4:bc:cd:40:06:22:a1:2a:e7:3d:ea:a2:00:80:ea:
6d:b4:dc:35:b5:c1:73:e3:3e:f1:cf:18:42:e7:be:73:59:b6:
97:5b:ba:c8:1f:21:74:9f:af:ab:cc:8d:c7:9e:36:15:e7:35:
52:e3:ff:a7:0c:f5:fb:08:66:9a:07:38:30:31:23:33:13:2a:
27:4a:6a:3a:fe:aa:be:f8:db:8a:aa:dc:30:36:80:81:96:a2:
bb:d1:d8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:25 2024 by rpki-client on console-ams.rpki-client.org