Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/i0FLyocnkonaSrLLzXRGe-sFUkU.roa
File: i0FLyocnkonaSrLLzXRGe-sFUkU.roa (raw, json)
Hash identifier: drxoPK2yVXqRycbyIzzXzIvM8EH4151tknqyJEjgdJs=
Subject key identifier: 8B:41:4B:CA:87:27:92:89:DA:4A:B2:CB:CD:74:46:7B:EB:05:52:45
Certificate issuer: /CN=96329aae02b366ed1a01b52ac33abe760593a806
Certificate serial: 018CC6B7AB8F59118CDD43C794BAB4F6D7BB
Authority key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/i0FLyocnkonaSrLLzXRGe-sFUkU.roa
Signing time: Mon 01 Jan 2024 20:29:34 +0000
ROA not before: Mon 01 Jan 2024 20:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202796
IP address blocks: 185.134.56.0/22 maxlen: 22
185.18.236.0/22 maxlen: 22
2a05:1e80::/29 maxlen: 29
2a03:fb40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ab:8f:59:11:8c:dd:43:c7:94:ba:b4:f6:d7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96329aae02b366ed1a01b52ac33abe760593a806
Validity
Not Before: Jan 1 20:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b414bca87279289da4ab2cbcd74467beb055245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5d:2f:78:c7:04:bd:b7:54:80:62:93:a6:45:
a8:d6:21:48:f7:c7:b8:15:25:bb:d4:61:fe:63:57:
63:a1:11:44:c3:d0:cd:a9:5a:7c:3c:23:2c:73:4c:
9d:69:38:67:63:4e:a9:24:93:48:d4:f5:35:b5:c9:
f5:7f:2e:48:be:18:1b:7d:8f:85:95:9b:fe:0f:aa:
6f:59:d3:af:d7:ca:b3:4e:34:d4:37:66:e2:0d:41:
f0:81:26:b3:92:56:d5:b0:6d:9c:36:36:51:bd:ca:
3e:68:4d:c7:3c:9d:88:c0:17:9c:29:b5:e8:a2:08:
0c:82:d7:e0:4d:87:64:5b:20:1a:72:7e:d4:aa:89:
a0:42:eb:dd:be:9f:11:65:5b:80:be:dd:62:9f:8d:
06:00:cb:57:38:ef:8c:50:e8:57:06:7e:56:e5:2f:
13:16:26:21:b5:9a:62:bb:cd:d1:50:2e:87:f3:13:
01:64:ab:53:b6:a8:1f:cb:06:67:5f:1a:d9:31:e0:
b8:af:f9:ab:9a:6a:f1:98:e6:9f:00:26:ee:ae:6b:
fc:d9:33:4b:c3:a4:31:29:64:e4:58:3e:4e:c2:92:
c2:64:ab:b7:e5:0d:d7:0d:cd:61:9f:e0:2b:9e:8c:
91:54:c6:70:3b:99:1a:e6:42:d9:2e:4f:7c:a5:82:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:41:4B:CA:87:27:92:89:DA:4A:B2:CB:CD:74:46:7B:EB:05:52:45
X509v3 Authority Key Identifier:
keyid:96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/i0FLyocnkonaSrLLzXRGe-sFUkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.236.0/22
185.134.56.0/22
IPv6:
2a03:fb40::/29
2a05:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
5e:d7:a6:32:2a:16:54:ca:b0:d7:ad:68:af:70:f3:f6:5c:0b:
17:28:51:0c:43:5b:5a:9e:c6:7c:e3:1b:7c:8c:7e:87:33:02:
46:4d:b0:ef:5e:91:61:7a:31:32:e7:cf:d6:aa:1f:5f:5a:4b:
08:a1:16:74:eb:73:f3:af:67:7e:3e:78:f6:4b:74:88:27:91:
db:da:17:06:f2:a7:57:dc:65:50:ed:b9:51:11:25:83:d0:fe:
eb:7f:d7:1f:87:95:39:b5:a0:1d:5c:52:81:58:2a:81:d4:bc:
7b:38:0b:f1:81:14:e2:c8:3a:f9:8f:b7:71:b3:c7:3a:f9:4f:
29:fd:89:0d:2d:66:39:5a:f1:c5:88:45:21:ac:5d:6a:3b:c5:
69:37:15:0d:a3:e1:8c:d6:97:eb:d0:61:46:a2:67:d6:00:2a:
c1:12:89:be:ca:c4:1b:24:94:82:3c:42:7f:8d:fb:27:c4:11:
73:11:b1:d6:52:50:38:2b:52:a4:9b:24:aa:06:e9:bc:80:c2:
00:c1:77:57:a4:b8:8b:cd:90:88:d4:e1:92:4c:f9:a6:4e:4b:
f4:81:57:59:cc:57:66:71:db:34:07:5a:74:e4:33:3b:e6:a1:
f1:e7:4e:0d:24:9a:7a:c8:e2:df:22:1a:cf:54:60:f9:91:90:
22:82:3c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:23 2025 by rpki-client