Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/O0I-ElXb4RL1PREqClyQe4izh7Y.roa
File: O0I-ElXb4RL1PREqClyQe4izh7Y.roa (raw, json)
Hash identifier: lwmKNCzXclN6LnzDe7bw3vnTf440tzDUhFJM8B07zxM=
Subject key identifier: 3B:42:3E:12:55:DB:E1:12:F5:3D:11:2A:0A:5C:90:7B:88:B3:87:B6
Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial: 018CC8DD07D24B6DC5134B1FC9C54221F35C
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/O0I-ElXb4RL1PREqClyQe4izh7Y.roa
Signing time: Tue 02 Jan 2024 06:29:37 +0000
ROA not before: Tue 02 Jan 2024 06:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51142
IP address blocks: 185.189.211.0/24 maxlen: 24
185.189.210.0/24 maxlen: 24
185.189.209.0/24 maxlen: 24
185.189.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:07:d2:4b:6d:c5:13:4b:1f:c9:c5:42:21:f3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Validity
Not Before: Jan 2 06:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b423e1255dbe112f53d112a0a5c907b88b387b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:c3:13:b1:8a:1a:b5:d5:71:1b:ce:e9:3e:
94:d3:38:49:69:0f:92:fa:d2:23:5d:20:9f:9d:80:
21:55:e2:e6:91:0c:3a:b4:5e:ac:50:aa:cc:e6:bd:
ca:e9:40:88:82:d7:2f:43:68:49:75:55:1d:2b:1e:
20:c0:fd:45:63:5a:b0:f8:2d:ce:e8:1a:a0:6b:a9:
ae:09:2e:d2:6a:b2:de:a4:ba:9a:89:8c:e6:00:90:
92:9d:72:dc:9c:fb:f4:e0:3c:08:04:e1:28:17:16:
23:8f:5e:49:4e:14:e2:f9:53:be:f7:95:42:18:e0:
b9:5d:ef:9c:0b:df:34:18:c3:be:3a:b1:f7:7c:85:
51:28:1c:8c:a3:eb:49:73:3d:21:a3:10:7f:c2:67:
91:29:66:4f:d8:11:9c:60:c2:01:dd:79:d1:be:1c:
4c:78:62:73:cc:46:cb:41:bd:13:ec:eb:28:8e:12:
da:57:ed:af:f2:e3:25:47:09:51:61:26:ea:cd:8a:
5f:41:d2:0d:45:9d:eb:84:64:7b:c2:85:f3:8b:fe:
38:68:5c:70:90:d8:35:ae:68:cb:01:c0:c4:25:66:
4a:d0:25:82:c5:26:80:2b:af:d1:23:fd:74:e1:a7:
28:09:23:04:93:66:67:0b:f2:13:26:df:f6:e4:44:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:42:3E:12:55:DB:E1:12:F5:3D:11:2A:0A:5C:90:7B:88:B3:87:B6
X509v3 Authority Key Identifier:
keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/O0I-ElXb4RL1PREqClyQe4izh7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.208.0/22
Signature Algorithm: sha256WithRSAEncryption
08:f3:4a:b0:32:59:55:51:6e:92:c2:ad:93:97:b2:6c:b7:65:
9d:c7:f4:ff:5e:6f:0e:76:92:17:80:cf:28:b1:57:12:3e:df:
76:e8:c5:16:50:7e:ff:26:ef:e4:48:64:33:f5:4b:5d:58:36:
f5:cc:33:df:33:a6:03:ee:98:c9:ee:6b:cf:26:68:9c:5c:1b:
fe:a1:81:32:d0:ad:ee:0d:0e:37:19:d3:b9:24:77:b6:c7:da:
11:9d:57:d0:d0:c8:ce:eb:41:f9:41:9c:f3:df:cf:9b:c6:58:
67:68:4b:be:c9:ea:34:27:27:c8:40:c5:d2:04:e1:7c:84:64:
a3:77:52:df:bb:f3:4d:ca:94:38:a5:e7:bb:4c:58:6d:c2:26:
44:4d:69:6d:a5:8d:e6:e0:31:fa:1c:09:36:e1:90:17:f6:ec:
18:bc:a9:6e:5d:c9:c5:6d:79:9e:54:91:dd:90:29:3b:60:d0:
18:8f:a1:cd:6a:d3:a1:28:40:e6:c4:90:91:94:e2:8e:c3:ab:
0d:37:93:f6:93:27:d3:b7:10:40:3f:ae:d8:bf:26:e0:21:e2:
c9:97:cc:33:d8:d2:c3:78:72:81:9a:d5:80:4e:68:9c:e4:27:
7e:d6:e5:5b:f3:d8:1d:47:c3:fb:fd:72:92:86:b9:01:b3:20:
f3:e0:3b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:46 2025 by rpki-client