Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IsWYWNfRBd8vV_leyQCfggWtcyI.roa
File: IsWYWNfRBd8vV_leyQCfggWtcyI.roa (raw, json)
Hash identifier: lp2uYpvZbzp+hXe0Rcu9IUJtNrCFPB65PO1flTfWYv8=
Subject key identifier: 22:C5:98:58:D7:D1:05:DF:2F:57:F9:5E:C9:00:9F:82:05:AD:73:22
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018DFA93376303C27EC710AC4105AE85A67F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IsWYWNfRBd8vV_leyQCfggWtcyI.roa
Signing time: Fri 01 Mar 2024 15:12:48 +0000
ROA not before: Fri 01 Mar 2024 15:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8038
IP address blocks: 185.150.0.0/24 maxlen: 24
185.165.44.0/24 maxlen: 24
185.217.118.0/24 maxlen: 24
203.25.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 18:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:93:37:63:03:c2:7e:c7:10:ac:41:05:ae:85:a6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 1 15:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22c59858d7d105df2f57f95ec9009f8205ad7322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:62:f1:9d:ea:08:4d:bb:09:e0:c4:7c:c4:
51:3b:92:62:25:aa:ed:cd:1e:a4:38:45:f8:54:64:
ff:17:74:b8:e3:bf:8a:04:5e:29:23:6f:7b:57:18:
ae:26:30:d1:87:b3:db:14:35:74:10:1a:6d:d3:0d:
7e:8e:48:2d:3e:76:49:01:51:55:f9:17:a3:1f:44:
2d:2e:22:d7:ff:53:95:8d:9d:35:4d:8f:7a:68:d8:
be:c8:01:b1:22:29:11:8e:0b:2f:c8:68:12:46:e7:
19:2b:ad:79:c8:23:9e:ed:3d:5b:4e:53:0b:f6:e1:
4a:d8:40:4e:21:ff:90:2e:b8:40:d6:32:a1:c2:50:
71:a0:ef:94:8f:b3:fb:38:d6:0f:34:98:78:2c:2a:
bc:19:b4:76:1e:ea:84:0f:1f:ba:81:7b:10:a4:ce:
db:ea:78:1f:45:ca:a1:41:d5:f5:b6:9b:09:49:96:
02:99:99:79:e9:bf:2c:e2:e2:3b:53:2d:2f:1d:e7:
3c:ca:ed:44:6b:70:00:9f:07:a0:77:11:d2:32:33:
4d:de:f8:b0:5f:3c:09:c3:b0:48:01:83:b4:11:d5:
4e:36:dc:cf:95:4c:4a:46:46:00:f8:67:6e:51:88:
d9:d3:ed:5d:dd:0b:04:24:69:cc:83:4f:1b:ec:a5:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C5:98:58:D7:D1:05:DF:2F:57:F9:5E:C9:00:9F:82:05:AD:73:22
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IsWYWNfRBd8vV_leyQCfggWtcyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.0.0/24
185.165.44.0/24
185.217.118.0/24
203.25.124.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:3d:93:bb:5e:8d:b0:e7:6e:be:0d:ca:03:af:3f:80:67:e1:
36:a7:a4:36:8c:78:12:54:7b:b0:58:be:1b:1d:53:04:df:3b:
3a:dd:09:9e:53:0b:18:75:02:09:c5:37:2e:0d:92:fa:a9:61:
19:9a:8e:0d:36:bf:12:4a:0c:10:3b:9d:5b:11:65:5b:5d:1b:
82:12:db:ef:53:b8:41:cb:4d:1a:c8:1c:f1:8a:51:cd:24:56:
8c:48:d7:b2:bf:e6:21:66:70:5a:e0:b5:b6:66:73:76:af:9c:
cf:f6:85:cd:1e:e7:0f:a2:d6:d3:61:e5:a1:2f:f2:78:64:a4:
32:cc:de:3b:67:03:63:31:10:b7:51:bf:9b:f8:e0:26:c4:88:
c3:a6:69:eb:ac:4b:0e:c5:90:55:fe:7a:24:51:bd:39:ba:08:
e8:3d:7e:b0:ef:c7:af:3b:b4:88:6d:bf:cc:62:c0:b1:66:67:
74:4a:70:90:7f:4f:1e:d0:11:bd:8b:3f:ae:14:a3:f9:7b:cb:
55:ff:c2:d7:ef:11:57:7c:19:94:57:c9:bc:76:9f:82:f5:5d:
4f:21:23:04:83:70:69:41:9a:40:cd:f4:52:d1:8e:b8:37:63:
42:73:98:76:fe:6c:e4:41:f4:09:04:e2:d0:46:90:ff:35:85:
54:3e:48:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 23:46:24 2024 by rpki-client on console-ams.rpki-client.org