Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/IHjHApx7vGHC6v-Fp8RomfIjol8.roa
File: IHjHApx7vGHC6v-Fp8RomfIjol8.roa (raw, json)
Hash identifier: BTlic7cleekfq3OXyTVUaLOMdNXP0Q2S8Xx/7qhKCFc=
Subject key identifier: 20:78:C7:02:9C:7B:BC:61:C2:EA:FF:85:A7:C4:68:99:F2:23:A2:5F
Certificate issuer: /CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
Certificate serial: 018FD8307E4F2936D61FA7FAFFD075A33C98
Authority key identifier: 35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/IHjHApx7vGHC6v-Fp8RomfIjol8.roa
Signing time: Sun 02 Jun 2024 09:03:27 +0000
ROA not before: Sun 02 Jun 2024 09:03:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56548
IP address blocks: 185.188.114.0/24 maxlen: 24
185.199.208.0/24 maxlen: 24
185.199.210.0/24 maxlen: 24
185.199.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Jun 2024 15:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d8:30:7e:4f:29:36:d6:1f:a7:fa:ff:d0:75:a3:3c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
Validity
Not Before: Jun 2 09:03:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2078c7029c7bbc61c2eaff85a7c46899f223a25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:33:e0:16:c9:fa:6b:8b:a0:9a:b4:d0:a5:
ff:48:cb:26:aa:c9:ae:6a:4f:96:ab:8c:56:73:30:
08:b5:b9:f4:1d:bf:16:69:7b:b2:fa:14:99:26:0e:
80:13:64:1d:4d:61:b7:31:9d:67:77:37:e9:e7:65:
20:e1:be:00:84:39:79:c0:5f:de:ce:fe:5e:c6:16:
63:ba:91:c4:24:2c:76:ad:71:ac:40:72:a4:4c:17:
b4:c9:91:53:5c:6d:50:e2:96:9e:88:2d:66:ac:76:
1a:93:3b:c8:1d:92:b6:13:06:f4:f1:de:f9:77:0a:
72:18:87:93:eb:85:3b:6f:23:21:2f:c7:ae:39:2c:
b8:5e:93:ed:e4:11:da:99:00:22:9b:02:03:1c:ad:
f6:a9:9e:0b:71:d0:a8:5a:17:c1:d8:f1:d9:98:6d:
98:57:13:6e:19:d3:1f:e9:54:b4:5d:9d:65:1e:0b:
00:9d:a1:8d:2f:c8:32:19:d9:03:75:21:8f:af:5b:
bf:21:c2:60:fd:43:5a:5e:35:51:70:35:54:a3:a0:
e1:31:d0:31:79:de:09:38:6a:f1:47:46:aa:d2:3d:
39:e4:ff:67:bf:2c:aa:2c:a0:d1:b3:bd:b1:1d:57:
c6:22:02:22:fe:e7:f7:74:a8:90:e4:85:75:bf:73:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:78:C7:02:9C:7B:BC:61:C2:EA:FF:85:A7:C4:68:99:F2:23:A2:5F
X509v3 Authority Key Identifier:
keyid:35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/IHjHApx7vGHC6v-Fp8RomfIjol8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.114.0/24
185.199.208.0/24
185.199.210.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:9e:76:b2:43:f4:cd:92:df:01:b4:4f:4e:a0:c6:01:31:39:
4f:90:4e:0c:0b:ec:b2:69:93:c6:93:0f:c1:f1:ff:a1:af:fd:
0b:f0:7b:4a:25:60:04:08:ba:85:60:a0:44:f5:71:2b:bc:91:
ca:6c:78:66:52:e5:cd:7c:8e:14:db:b1:29:62:07:d7:42:87:
6d:97:07:84:af:84:7f:6b:de:0d:01:29:3f:ad:66:07:db:41:
63:07:f9:a5:db:3f:d0:30:e0:95:e4:18:59:39:82:bf:b2:92:
cc:00:07:ea:a9:7e:0b:6d:50:42:d6:77:2e:91:b3:1b:a0:24:
1e:bf:40:3c:85:aa:4d:bd:c2:df:91:c1:13:0d:69:8e:63:9b:
f5:3e:72:3c:17:cd:a9:91:c0:13:bd:f8:f8:64:0a:c2:f2:c7:
e4:73:da:07:fd:5d:45:e0:1f:c9:19:66:5b:19:2b:b9:f8:4d:
a6:28:70:d7:3e:92:01:d2:58:2e:9b:d8:18:ce:21:6b:56:38:
c9:71:1a:b8:50:37:9a:f1:b9:2c:de:05:2d:65:15:5f:86:51:
ac:32:d4:60:da:0d:d8:ea:3b:4c:0d:ac:3a:a4:27:9c:be:c5:
72:47:ff:8c:06:ea:0a:72:f9:88:59:ef:ec:f7:75:01:6b:f9:
10:3d:eb:af
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY/YMH5PKTbWH6f6/9B1ozyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NThiYjQ3ZGUzNTRlMDllMGZjMmNiMmMxZmExNGQ3MWQ5
MjZlZTgwHhcNMjQwNjAyMDkwMzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDc4YzcwMjljN2JiYzYxYzJlYWZmODVhN2M0Njg5OWYyMjNhMjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntYz4BbJ+muLoJq00KX/SMsmqsmu
ak+Wq4xWczAItbn0Hb8WaXuy+hSZJg6AE2QdTWG3MZ1ndzfp52Ug4b4AhDl5wF/e
zv5exhZjupHEJCx2rXGsQHKkTBe0yZFTXG1Q4paeiC1mrHYakzvIHZK2Ewb08d75
dwpyGIeT64U7byMhL8euOSy4XpPt5BHamQAimwIDHK32qZ4LcdCoWhfB2PHZmG2Y
VxNuGdMf6VS0XZ1lHgsAnaGNL8gyGdkDdSGPr1u/IcJg/UNaXjVRcDVUo6DhMdAx
ed4JOGrxR0aq0j055P9nvyyqLKDRs72xHVfGIgIi/uf3dKiQ5IV1v3MQiwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCB4xwKce7xhwur/hafEaJnyI6JfMB8GA1UdIwQY
MBaAFDVYu0feNU4J4PwsssH6FNcdkm7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlZpN1I5NDFUZ25nX0N5eXdmb1UxeDJTYnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hMGZhY2EtZGI3Zi00ZWQ4LWIxMWEt
ZWVjNDZjYTgyYTMzLzEvSUhqSEFweDd2R0hDNnYtRnA4Um9tZklqb2w4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hMGZhY2EtZGI3Zi00ZWQ4LWIxMWEtZWVjNDZjYTgyYTMz
LzEvTlZpN1I5NDFUZ25nX0N5eXdmb1UxeDJTYnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAubxyAwQA
ucfQAwQBucfSMA0GCSqGSIb3DQEBCwUAA4IBAQC1nnayQ/TNkt8BtE9OoMYBMTlP
kE4MC+yyaZPGkw/B8f+hr/0L8HtKJWAECLqFYKBE9XErvJHKbHhmUuXNfI4U27Ep
YgfXQodtlweEr4R/a94NASk/rWYH20FjB/ml2z/QMOCV5BhZOYK/spLMAAfqqX4L
bVBC1ncukbMboCQev0A8hapNvcLfkcETDWmOY5v1PnI8F82pkcATvfj4ZArC8sfk
c9oH/V1F4B/JGWZbGSu5+E2mKHDXPpIB0lgum9gYziFrVjjJcRq4UDea8bks3gUt
ZRVfhlGsMtRg2g3Y6jtMDaw6pCecvsVyR/+MBuoKcvmIWe/s93UBa/kQPeuv
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:45:19 2025 by rpki-client