Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/IlMSfXy0RUlufMQb9FGoaFbBOvk.roa
File: IlMSfXy0RUlufMQb9FGoaFbBOvk.roa (raw, json)
Hash identifier: gqcGRTGs4V9t3bBdkl8eyWs8uqOUar7c23JLcsHukVI=
Subject key identifier: 22:53:12:7D:7C:B4:45:49:6E:7C:C4:1B:F4:51:A8:68:56:C1:3A:F9
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185A69475D2401F67B9D640C870DA847D35
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/IlMSfXy0RUlufMQb9FGoaFbBOvk.roa
Signing time: Thu 12 Jan 2023 15:23:45 +0000
ROA not before: Thu 12 Jan 2023 15:23:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205507
IP address blocks: 185.200.188.0/24 maxlen: 24
185.244.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Oct 2023 11:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a6:94:75:d2:40:1f:67:b9:d6:40:c8:70:da:84:7d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 12 15:23:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2253127d7cb445496e7cc41bf451a86856c13af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:b2:69:db:9d:fb:b9:41:5f:ee:5f:77:ff:
04:52:f4:b7:7c:7f:d6:b9:1c:fc:71:95:bc:40:0d:
df:22:4c:8c:b8:ba:3c:15:e0:1f:33:a2:1f:cf:1a:
17:7d:81:c7:64:29:63:76:3e:24:3f:c8:5a:ed:07:
33:6c:1b:b2:57:a9:88:eb:43:bc:28:f7:11:58:3e:
8f:ec:69:c5:07:69:0d:26:15:09:41:89:74:41:21:
29:42:96:ff:49:21:0e:25:88:3d:44:be:84:99:77:
cb:d0:09:41:a8:4f:77:6c:d2:3e:44:54:89:81:6a:
81:0b:fc:dd:1c:51:2b:f2:54:7f:a3:34:8b:5b:b4:
6a:4c:af:8e:55:54:09:ec:1e:e9:f0:df:ab:54:4e:
fc:23:60:71:a8:fa:13:44:65:9a:15:f7:6c:53:68:
3a:26:3d:42:1a:9b:0d:80:41:65:5a:8e:f6:dd:10:
8d:ed:19:12:da:f3:1a:d6:2a:f4:15:a7:41:a2:20:
3b:1c:4f:90:05:f8:b3:db:82:d9:a2:51:b1:e8:8d:
36:db:6d:78:04:9a:a5:ae:26:a3:80:27:f4:ff:bd:
77:ff:0a:4e:2a:d6:23:30:2d:3f:2f:3f:89:2c:2a:
94:3f:a3:e0:b3:7e:dc:85:6f:9c:89:45:2c:28:24:
c7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:53:12:7D:7C:B4:45:49:6E:7C:C4:1B:F4:51:A8:68:56:C1:3A:F9
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/IlMSfXy0RUlufMQb9FGoaFbBOvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.188.0/24
185.244.174.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:e1:90:c7:af:af:d9:c7:e9:ac:b6:eb:64:ea:1d:3c:cc:0c:
cc:d5:be:92:95:c7:c0:4f:75:b1:3b:6e:eb:80:27:43:52:54:
11:6a:02:89:72:28:48:ba:19:23:a3:ac:39:df:ce:62:2d:a8:
89:71:b2:f2:6d:9d:f9:5b:5b:0c:a2:cb:25:52:4a:d7:c1:9e:
d0:a7:da:f4:62:2e:d6:3d:ab:ea:c8:ba:3c:8a:f5:08:ad:7f:
39:7e:20:9e:56:ac:c7:dd:99:30:bb:88:1b:e2:84:65:86:54:
6e:52:50:7a:27:59:62:cb:3b:ec:31:29:ad:9e:49:dd:2d:0e:
32:d2:a2:cb:4c:cd:47:fc:f7:e1:06:d2:7a:23:0f:39:9c:47:
86:5a:c6:b4:07:55:9c:bd:a0:fe:57:2e:4d:fb:72:73:ce:01:
7f:f4:45:17:78:1c:db:39:9f:53:5c:b4:bf:ad:d7:6a:e4:f9:
ce:bb:3e:65:0a:56:d6:28:02:74:5b:2a:d3:f5:cd:d6:9a:fb:
1b:98:fc:3a:ab:75:6e:23:dd:32:4b:a3:cc:a1:ef:99:2d:e1:
30:24:1c:bf:71:bc:15:1d:eb:f7:19:16:e6:5d:8a:57:d7:db:
c4:84:ce:b3:88:05:17:da:a3:18:7e:28:cc:7c:3f:f5:5a:cf:
ba:4a:ec:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org