Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/OOc8Qtp_GKr6W46K1hFcxJV8xjU.roa
File: OOc8Qtp_GKr6W46K1hFcxJV8xjU.roa (raw, json)
Hash identifier: Fjxm/9YbnkHXgIRAsTuCz5mPpU19m4SWxojK3I1TXFU=
Subject key identifier: 38:E7:3C:42:DA:7F:18:AA:FA:5B:8E:8A:D6:11:5C:C4:95:7C:C6:35
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737AC76E2793453FAB55C327DC1077C9
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/OOc8Qtp_GKr6W46K1hFcxJV8xjU.roa
Signing time: Mon 02 Jan 2023 17:15:04 +0000
ROA not before: Mon 02 Jan 2023 17:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60675
IP address blocks: 185.114.84.0/22 maxlen: 24
185.252.8.0/24 maxlen: 24
185.252.10.0/24 maxlen: 24
185.252.9.0/24 maxlen: 24
185.252.11.0/24 maxlen: 24
185.252.8.0/22 maxlen: 24
185.142.192.0/22 maxlen: 24
185.27.136.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:c7:6e:27:93:45:3f:ab:55:c3:27:dc:10:77:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38e73c42da7f18aafa5b8e8ad6115cc4957cc635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:63:a3:9f:53:8c:c7:03:55:64:95:db:4f:6b:
59:59:24:4c:0d:f9:bb:99:f9:8c:83:4e:ef:39:2d:
65:67:26:5c:62:34:62:94:22:82:18:d6:93:6c:d4:
16:0e:d3:ca:e6:e2:88:62:c1:aa:60:bc:12:72:3e:
bf:bb:06:81:13:03:91:04:f2:1d:78:1e:8d:71:34:
f8:e3:75:d5:92:ac:e8:d6:d8:83:f7:24:f1:90:31:
8b:58:01:ec:5f:f5:aa:0e:da:d4:a8:d8:3b:48:7e:
35:a7:a2:36:fa:2d:ea:92:73:66:a3:b0:50:10:58:
ca:cf:5f:51:40:91:bc:59:7f:bf:4a:5b:83:1b:11:
7c:93:a2:05:44:da:d8:58:36:aa:a7:e2:b2:21:c0:
bd:02:8b:06:26:12:f2:50:8e:5f:7d:92:e6:e7:84:
27:7e:45:8c:7f:e8:07:e0:8a:84:cb:58:4d:4b:cd:
51:e0:63:8b:50:ea:0e:2c:96:0f:3f:46:0b:b1:bb:
86:e4:ca:e8:c4:bf:11:4d:4c:51:1c:63:55:16:46:
76:8f:4f:a8:f2:e9:39:52:e6:df:97:71:e5:6b:c5:
d7:bb:fa:c0:61:82:66:ca:ae:59:29:89:d5:72:21:
8c:2b:7e:4d:7a:81:7d:1f:76:68:70:26:82:de:e3:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E7:3C:42:DA:7F:18:AA:FA:5B:8E:8A:D6:11:5C:C4:95:7C:C6:35
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/OOc8Qtp_GKr6W46K1hFcxJV8xjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.136.0/22
185.114.84.0/22
185.142.192.0/22
185.252.8.0/22
Signature Algorithm: sha256WithRSAEncryption
22:2f:26:40:12:f7:5e:0f:fa:a2:c7:de:a7:80:f2:4c:ee:ec:
11:f5:92:cd:8a:ca:6d:5d:f8:28:3a:1c:e8:0d:b8:41:c8:2d:
fe:33:76:15:ed:77:21:bc:84:2b:d8:e9:fd:09:d1:4b:54:19:
e4:d2:86:be:e0:18:4d:96:82:5f:aa:ed:2c:83:ab:89:a1:8c:
f4:19:74:37:d4:a7:af:75:66:24:ff:f1:9e:56:81:a4:3d:67:
34:4e:9e:5e:2d:bc:75:8b:c2:10:2b:72:5e:a3:9a:bf:2c:2f:
d6:30:46:a4:04:9c:01:08:3f:fc:ad:0e:e4:b8:c4:6e:65:fd:
31:ed:84:c2:f1:21:47:52:0b:32:06:51:14:01:ed:ab:f8:65:
4a:08:cc:e2:55:52:33:c7:c5:5f:80:28:54:34:43:b8:42:27:
07:c6:aa:52:c4:bc:8a:32:35:47:76:29:51:ec:0d:1b:30:5d:
e8:43:eb:5a:a3:50:58:e3:85:7c:ff:48:b1:16:53:e1:84:25:
b0:cc:17:d9:e9:da:f6:14:8f:fd:4e:ea:73:a9:9b:e2:9b:96:
b3:34:e6:0b:93:e3:4d:1d:be:23:e5:3d:fc:89:52:5e:99:e4:
a3:0e:7b:cc:a2:fc:99:89:34:3b:25:43:83:35:ec:20:80:27:
e0:6a:0b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org