Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/cAxqBk0WekSSAelO9-BPWEn8Hik.roa
File: cAxqBk0WekSSAelO9-BPWEn8Hik.roa (raw, json)
Hash identifier: OjAmxzYdEOcxOv/IYHNO0YdlkwaICCEkyC+Is5wPfwk=
Subject key identifier: 70:0C:6A:06:4D:16:7A:44:92:01:E9:4E:F7:E0:4F:58:49:FC:1E:29
Certificate issuer: /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial: 018CC6B791CB5B3436A4720FCFAA61294818
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/cAxqBk0WekSSAelO9-BPWEn8Hik.roa
Signing time: Mon 01 Jan 2024 20:29:28 +0000
ROA not before: Mon 01 Jan 2024 20:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201178
IP address blocks: 185.155.148.0/22 maxlen: 24
185.81.236.0/24 maxlen: 24
185.81.236.0/22 maxlen: 24
185.81.237.0/24 maxlen: 24
185.81.238.0/24 maxlen: 24
185.81.239.0/24 maxlen: 24
185.153.248.0/22 maxlen: 24
2a05:8a00::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 17 Apr 2024 11:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:91:cb:5b:34:36:a4:72:0f:cf:aa:61:29:48:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
Validity
Not Before: Jan 1 20:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=700c6a064d167a449201e94ef7e04f5849fc1e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:26:65:e4:8c:a8:9a:1b:6e:57:03:19:cb:
df:16:d6:5d:f8:30:c5:0e:12:54:a0:1c:17:ce:db:
fc:9d:28:8a:43:62:e7:c5:d3:bf:b5:89:9c:db:5e:
3f:3f:a2:2f:48:03:28:4d:c9:69:d2:6a:92:25:ae:
1b:00:d1:af:11:dc:35:d8:fe:b9:68:c0:de:a0:61:
3d:ae:67:ed:48:b1:4b:c1:9d:fd:b3:f5:6c:bf:a9:
3d:7a:c1:31:c7:24:55:73:db:d7:cf:6a:b7:b4:4d:
60:11:e6:0d:df:2f:cc:ac:1b:63:76:f2:47:49:1e:
5c:f4:bf:fc:59:47:25:5d:b6:6b:f8:dd:ff:0e:e5:
f4:cf:61:7c:f0:d1:10:54:9a:38:08:0a:0a:a3:c7:
ee:87:dc:66:2f:b5:2f:bf:70:a4:99:49:71:12:91:
ad:df:9d:cd:61:60:de:cb:08:e0:a4:9c:a6:f4:1f:
ec:ee:d3:8a:bf:14:64:7f:ca:74:f2:7a:57:e8:95:
7a:46:69:02:7e:7d:47:72:78:ce:77:39:31:03:a3:
28:34:8d:d4:d7:06:db:c5:25:6a:34:65:e2:08:dc:
f1:ae:c6:7f:17:5e:70:20:a1:35:96:0f:92:9e:de:
02:9c:0a:7e:35:3d:1f:08:82:c1:18:58:1e:bd:d2:
d9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0C:6A:06:4D:16:7A:44:92:01:E9:4E:F7:E0:4F:58:49:FC:1E:29
X509v3 Authority Key Identifier:
keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/cAxqBk0WekSSAelO9-BPWEn8Hik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.236.0/22
185.153.248.0/22
185.155.148.0/22
IPv6:
2a05:8a00::/29
Signature Algorithm: sha256WithRSAEncryption
2e:1d:20:a0:42:d3:f4:c5:9f:fa:7f:50:3f:5d:ec:d6:3d:f5:
58:7f:63:ed:ac:ee:11:41:98:11:29:10:04:84:e2:55:85:3e:
da:59:85:c4:59:6b:3e:4c:a5:4b:0b:8b:a2:0c:5d:1a:d9:57:
f5:42:41:bb:da:6a:e0:ce:03:81:0e:d5:db:7f:54:b2:bb:19:
c9:b1:16:a7:5a:dc:27:31:67:6b:1f:7e:b1:1c:ab:68:be:52:
09:c9:15:1e:31:6f:16:37:fa:3a:33:0f:ea:a9:ef:b4:de:f4:
da:56:0a:66:f9:95:29:77:26:d8:02:87:8e:4c:73:a8:8d:41:
de:2d:9c:b1:b7:08:09:2e:1f:46:74:0e:e2:cd:97:f4:a6:3c:
5d:28:21:c8:a3:7b:74:50:29:dd:9c:bc:15:b3:b6:cd:bc:9a:
08:9d:c8:0e:41:62:31:b7:66:c2:c4:56:b0:55:1a:5c:21:ef:
24:ba:db:36:68:13:8e:60:22:5c:2a:25:38:b8:87:cb:f4:1b:
b1:b4:1d:e6:c2:14:53:5c:f4:8f:83:61:8b:6c:1c:61:7d:c9:
93:0c:e0:9e:e3:9e:ca:e6:51:85:eb:15:12:24:7d:c0:14:51:
3f:0f:00:15:fb:61:3c:df:7b:71:31:26:6e:86:6d:ed:4d:5c:
7a:2f:0f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:43 2025 by rpki-client