Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/pN1zl-ZE7xzdgefdFcM6iozirQc.roa
File: pN1zl-ZE7xzdgefdFcM6iozirQc.roa (raw, json)
Hash identifier: nJlRAfLC/CDeBzv8GPd1t89JiLUQZwLZY4rqL9tasSE=
Subject key identifier: A4:DD:73:97:E6:44:EF:1C:DD:81:E7:DD:15:C3:3A:8A:8C:E2:AD:07
Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Certificate serial: 018D45C03003B291CA5455119657F9A56210
Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/pN1zl-ZE7xzdgefdFcM6iozirQc.roa
Signing time: Fri 26 Jan 2024 12:30:39 +0000
ROA not before: Fri 26 Jan 2024 12:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199984
IP address blocks: 185.8.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Feb 2024 10:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:c0:30:03:b2:91:ca:54:55:11:96:57:f9:a5:62:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Validity
Not Before: Jan 26 12:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4dd7397e644ef1cdd81e7dd15c33a8a8ce2ad07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b1:05:f0:54:f9:88:ed:e3:78:af:85:33:6c:
ca:1c:5a:57:0b:79:c4:02:f9:65:e5:10:ff:63:e6:
b0:15:78:34:95:f9:0b:d8:25:46:52:60:3f:dd:4d:
0b:bf:77:6f:56:28:e2:25:d2:4d:50:ff:c9:c9:ed:
66:78:58:88:56:13:7a:41:61:e8:2f:dd:a1:d6:39:
02:eb:26:ea:28:96:44:ae:9d:ab:e0:f9:cf:56:13:
09:90:df:a6:44:f9:9d:51:c0:ff:66:f6:3c:43:6e:
df:b8:7b:91:5e:a7:30:74:a5:bb:42:be:64:73:e0:
8d:25:cd:ed:f1:e9:fc:63:a3:80:e4:3c:fd:d5:5e:
c6:d3:72:6b:de:ae:f7:80:ff:ad:d2:44:1e:09:4c:
4e:b3:6f:24:89:cf:24:6f:19:c7:1a:3c:36:6f:ee:
ab:ae:1d:22:68:82:e3:14:1f:d2:3e:20:3e:2d:be:
62:4c:e1:d5:2c:0e:a3:25:a5:f2:a1:59:0c:33:12:
10:24:7a:d6:9e:dc:d8:6f:7f:5d:66:35:d2:1e:31:
b2:8c:09:70:84:9a:6a:d6:68:ff:bf:7a:8f:64:06:
62:85:bd:75:77:10:46:c4:c7:e5:29:ae:00:1e:ce:
2b:a1:bb:8c:c1:41:87:b0:a7:47:e6:fa:bd:93:52:
f2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DD:73:97:E6:44:EF:1C:DD:81:E7:DD:15:C3:3A:8A:8C:E2:AD:07
X509v3 Authority Key Identifier:
keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/pN1zl-ZE7xzdgefdFcM6iozirQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.35.0/24
Signature Algorithm: sha256WithRSAEncryption
95:bd:ff:6f:e8:2a:43:ac:7f:22:71:62:66:9e:d8:2c:37:35:
25:b5:b0:16:5d:42:0b:80:1b:13:b9:d9:c0:fc:7e:ea:56:a3:
c0:fa:a8:75:a7:22:cb:b0:84:a8:9a:d8:8a:ab:50:4d:50:49:
18:31:01:57:dd:b8:56:ec:01:14:da:74:ae:25:bd:69:73:b0:
f5:b6:3f:a6:6d:1b:ae:c2:dd:04:b7:c6:44:8b:ad:e8:2e:96:
ad:5e:a3:7b:de:2e:32:05:31:b1:2b:fa:84:d0:36:1d:53:77:
0f:7a:c7:55:2d:b0:cc:1f:ed:54:56:0b:07:4d:52:66:43:a8:
a5:de:a9:be:8b:d2:c7:da:07:96:0f:fa:c1:e3:05:18:e1:1c:
8d:43:11:ba:db:45:f9:fd:0c:7e:59:63:78:57:2f:e9:d0:fd:
cf:18:d6:8b:03:5a:82:32:67:43:d5:db:0b:d4:f1:9d:30:c8:
c8:aa:6f:60:03:9a:06:b5:7e:f3:ed:e5:8f:b3:ee:c3:e1:51:
a7:6f:01:6c:6f:54:d0:57:86:b7:23:f1:57:68:a8:c9:d5:e5:
4b:65:27:ab:9c:20:e0:0b:94:21:2a:bb:f2:8e:40:ca:75:d4:
08:80:0d:57:de:a0:5b:67:83:6b:17:dc:82:b6:51:8a:4b:fa:
f2:47:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:01 2025 by rpki-client