Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/DR9MlesimPvkd7JOeUpIlvP0Bvs.roa
File: DR9MlesimPvkd7JOeUpIlvP0Bvs.roa (raw, json)
Hash identifier: jyO31gcgFfQiIvEv6IdsYrAzwoVfKChylTc7SWc8k6Y=
Subject key identifier: 0D:1F:4C:95:EB:22:98:FB:E4:77:B2:4E:79:4A:48:96:F3:F4:06:FB
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 018CE8BC40E102A4772AD1DF7F90643AB7F0
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/DR9MlesimPvkd7JOeUpIlvP0Bvs.roa
Signing time: Mon 08 Jan 2024 11:01:40 +0000
ROA not before: Mon 08 Jan 2024 11:01:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.239.176.0/24 maxlen: 24
185.239.177.0/24 maxlen: 24
185.239.178.0/24 maxlen: 24
185.239.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:bc:40:e1:02:a4:77:2a:d1:df:7f:90:64:3a:b7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: Jan 8 11:01:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d1f4c95eb2298fbe477b24e794a4896f3f406fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:ff:6c:07:87:c6:6f:77:e2:8d:3c:1b:59:
46:89:f1:dc:68:41:64:cd:ec:8e:53:93:c7:61:b2:
2c:65:f2:d3:84:53:77:69:c5:c3:45:06:a9:04:7d:
23:4e:96:22:2f:d6:db:21:8a:1f:6d:c6:d4:12:81:
10:39:5a:b4:2a:42:42:45:d6:32:25:c5:de:4e:2a:
c8:a0:8b:0c:cb:16:0e:92:0c:b1:a9:90:dc:90:c9:
7e:1b:44:05:b7:4c:36:0b:89:90:9e:0c:9f:7c:40:
e4:39:b4:b3:8c:ef:c7:a6:33:c1:30:04:a8:52:b8:
5f:7f:ca:55:7e:f0:02:7e:dc:3b:59:05:13:ac:54:
e5:01:51:57:8b:c9:3b:e9:7b:ce:54:de:87:27:a6:
2e:35:bc:4a:a0:3a:ec:75:90:c9:16:69:01:9e:ed:
ec:fb:f3:a9:0d:f2:18:4b:0d:69:80:e6:d4:7f:58:
37:a3:2e:23:f0:3e:d4:a2:5f:01:42:52:46:0c:cc:
99:7a:56:d0:07:7d:3c:a4:4d:f6:35:f4:b6:8d:5b:
0a:b9:67:fd:6e:b2:03:3b:a1:cd:33:60:c7:05:1d:
9f:0a:20:9a:d4:47:d5:19:13:af:56:b3:f9:48:f6:
d2:85:d1:3d:a4:c2:2e:5e:17:a6:35:2e:7c:f9:13:
28:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1F:4C:95:EB:22:98:FB:E4:77:B2:4E:79:4A:48:96:F3:F4:06:FB
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/DR9MlesimPvkd7JOeUpIlvP0Bvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.176.0/22
Signature Algorithm: sha256WithRSAEncryption
95:17:ba:0d:62:18:2e:a4:dc:94:e9:7c:f8:17:ba:84:5a:05:
ee:a5:24:8f:ff:86:48:43:da:f6:dc:85:a1:b4:0c:65:8f:86:
86:f7:93:ed:22:89:ec:2a:a7:bb:c9:6d:a4:00:ab:69:c2:85:
31:65:48:b4:f0:a3:a0:5c:f9:00:13:97:17:bb:9d:b1:0c:a6:
49:05:99:2e:34:cc:13:46:27:8a:f7:6f:06:e1:52:3e:4d:f4:
a1:26:d1:2e:12:f1:bd:68:b4:ce:d7:19:f3:eb:ce:e3:3a:44:
0e:d3:2d:0e:5a:1f:3c:f1:b5:07:65:c6:42:4e:6e:3e:26:50:
22:84:54:47:13:b0:7a:0f:aa:d3:da:36:27:e6:0b:54:39:40:
9c:d8:65:aa:c8:1c:16:e7:82:a2:5d:3e:20:57:06:b5:c0:7a:
d6:91:b9:2f:7b:65:95:ee:a5:f8:a5:28:a2:05:2d:83:87:e5:
a4:b0:5f:09:1d:ec:35:bb:27:63:5c:74:72:bc:d6:60:f4:ca:
ed:71:46:04:a0:20:13:0e:8c:c5:1e:33:4f:c5:2d:e7:41:65:
aa:b7:b1:bc:48:ca:da:e4:82:03:9a:fa:89:24:f6:0c:a9:17:
c4:b2:ee:ae:8c:f1:d5:c2:07:44:aa:c6:d4:11:9b:9b:28:34:
de:61:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:48 2025 by rpki-client