Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/pDPS0XRGbq9tkWvZck3cQklU45I.roa
File: pDPS0XRGbq9tkWvZck3cQklU45I.roa (raw, json)
Hash identifier: 9Nr+BiGNK2zGDMNnohM6003IpPBtqp366dcYf6L3SFc=
Subject key identifier: A4:33:D2:D1:74:46:6E:AF:6D:91:6B:D9:72:4D:DC:42:49:54:E3:92
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 018CC9BC3E234177361371B66428813C89B6
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/pDPS0XRGbq9tkWvZck3cQklU45I.roa
Signing time: Tue 02 Jan 2024 10:33:26 +0000
ROA not before: Tue 02 Jan 2024 10:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8412
IP address blocks: 185.237.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:3e:23:41:77:36:13:71:b6:64:28:81:3c:89:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Jan 2 10:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a433d2d174466eaf6d916bd9724ddc424954e392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:03:00:c9:fd:44:0a:d9:b5:17:79:cf:23:
01:50:3e:d8:b7:06:ae:db:38:da:ed:8a:d5:1a:70:
dd:18:37:39:8a:2c:12:f8:02:d6:11:b4:29:47:5a:
25:a0:fb:c5:c2:0a:54:65:b8:1c:32:59:70:8d:4d:
79:02:de:57:8d:e2:21:be:03:22:66:03:2e:55:1a:
69:40:68:89:4f:df:1a:ee:fa:db:48:d4:79:40:8e:
c4:7b:37:7e:c9:64:2c:c4:06:bc:90:9c:a6:87:c5:
70:9d:69:d5:ac:f8:93:52:46:4a:bf:55:b3:c4:b5:
ad:df:b3:6e:98:7a:9e:aa:32:ce:fa:eb:4e:80:6e:
53:d4:57:60:b8:29:4f:88:c0:25:70:21:ff:88:2d:
1c:ce:e8:3f:13:09:e4:f5:1c:be:ca:33:0a:b1:56:
14:3a:67:01:84:ff:b5:54:fc:34:24:50:e3:9f:64:
ff:2e:53:fb:5b:db:7a:10:39:c0:b2:f9:0a:41:bf:
a3:bf:30:80:2f:8b:9a:25:5e:2d:79:68:f2:7f:53:
d4:d6:0a:dc:08:35:be:91:0f:8d:fd:ac:73:f8:e8:
0e:e9:94:40:03:36:6c:33:95:23:ef:20:12:33:2d:
8d:02:f1:a6:b0:9b:58:b3:a5:92:0f:95:1e:b5:70:
0b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:33:D2:D1:74:46:6E:AF:6D:91:6B:D9:72:4D:DC:42:49:54:E3:92
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/pDPS0XRGbq9tkWvZck3cQklU45I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.168.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e5:4c:48:90:4e:9d:22:6e:fb:ed:aa:a9:38:48:b3:dc:00:
25:89:e6:ad:2a:90:2f:61:ff:d4:57:d8:36:f6:db:7c:4e:49:
03:ed:68:23:14:1c:f2:b6:43:99:a1:ac:4f:28:93:03:e4:58:
6a:35:b9:1a:40:7e:1d:64:9d:8d:be:cc:ca:79:1c:65:88:fe:
54:36:6f:bc:fa:49:45:01:64:3f:58:a3:3a:7f:6c:56:87:b5:
e3:10:cb:7c:2a:ad:1d:7f:2e:7d:d7:bb:a0:ef:e7:38:1a:d5:
76:c6:d9:62:89:92:7b:08:62:9c:9d:a7:34:d8:29:35:91:db:
00:1b:db:34:95:f2:15:9c:f6:43:ce:a8:ec:a4:72:d0:45:34:
8f:3f:71:29:bc:0a:61:c8:77:38:6b:ee:2e:8e:df:9c:34:4e:
fd:48:6c:7e:92:9c:fc:55:15:da:9c:af:c7:13:b8:82:53:2b:
8a:a2:12:ec:2e:9f:7e:9a:2c:df:b2:8a:b3:a8:c6:45:82:e4:
e3:f5:4b:cc:f6:e8:a4:f4:7a:11:8d:a6:b2:2b:7e:d2:c2:3d:
34:38:e0:3a:ac:ce:6d:47:ff:0b:d0:6e:6f:84:95:75:33:a4:
85:27:9c:16:74:31:d3:2e:f4:23:4c:50:4d:c9:be:76:49:8f:
5f:d9:62:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:30 2025 by rpki-client