Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/9uC-3wfWPdQCebrkdKcPgebndlA.roa
File: 9uC-3wfWPdQCebrkdKcPgebndlA.roa (raw, json)
Hash identifier: Ux6FwXWjc5MMRLG0MwX4AGipD0wm5ZvNYANmbGpNgno=
Subject key identifier: F6:E0:BE:DF:07:D6:3D:D4:02:79:BA:E4:74:A7:0F:81:E6:E7:76:50
Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b
Certificate serial: 018F4DB0647B64A6D3E9B404416D473FC824
Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/9uC-3wfWPdQCebrkdKcPgebndlA.roa
Signing time: Mon 06 May 2024 11:35:56 +0000
ROA not before: Mon 06 May 2024 11:35:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204342
IP address blocks: 185.251.164.0/22 maxlen: 22
185.251.184.0/22 maxlen: 22
188.240.40.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:b0:64:7b:64:a6:d3:e9:b4:04:41:6d:47:3f:c8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Validity
Not Before: May 6 11:35:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6e0bedf07d63dd40279bae474a70f81e6e77650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:09:9f:9d:c5:3f:b0:95:04:dc:d2:b4:4d:
82:45:93:a9:55:7f:61:e5:83:f6:ff:7b:a4:75:d0:
f0:64:8b:ec:a4:f9:59:93:44:26:84:67:71:5e:a8:
3b:43:58:7a:f6:91:8f:0d:17:1c:38:c3:bf:71:85:
1f:c0:42:b6:f4:41:e6:91:8c:dc:4d:e9:61:2b:05:
10:79:c2:3f:7c:1e:ab:8e:de:10:e5:9e:db:52:8f:
f8:79:e9:3e:87:86:7d:c1:80:6c:a3:f0:ce:b4:50:
50:d5:75:6d:f8:90:b1:d3:11:cc:96:c2:f7:30:32:
50:70:16:b9:6c:ca:a0:62:b2:84:81:65:12:2c:74:
0c:12:b7:63:73:23:f1:d6:8e:66:df:80:78:36:8f:
b4:8e:48:b8:07:6f:8b:23:83:04:d8:e8:27:1e:34:
ae:e6:5d:6d:92:db:1b:27:18:e9:aa:8b:c8:4e:e2:
1f:d5:63:90:50:f0:0c:c9:a0:bb:40:8f:d7:9d:56:
ae:17:2f:5d:a2:67:4b:49:d6:cf:18:05:14:63:ee:
63:1e:c9:c8:e9:7a:65:74:6f:7f:08:01:6f:47:72:
76:ec:db:b5:e5:2d:3d:35:cc:0b:5f:f6:31:61:f4:
6b:ce:a8:41:bc:ee:9e:75:b7:f4:b1:29:9b:1c:64:
21:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E0:BE:DF:07:D6:3D:D4:02:79:BA:E4:74:A7:0F:81:E6:E7:76:50
X509v3 Authority Key Identifier:
keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/9uC-3wfWPdQCebrkdKcPgebndlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.164.0/22
185.251.184.0/22
188.240.40.0/23
Signature Algorithm: sha256WithRSAEncryption
52:12:10:87:ac:ef:0c:b7:24:7d:8f:fa:a1:c6:47:ef:19:9e:
eb:85:94:25:a6:46:72:4e:f8:00:be:08:53:3b:96:0c:f1:e9:
59:14:47:2b:0d:a3:19:52:ff:e0:6a:fe:7a:7a:ec:9c:ef:6d:
dd:80:04:33:55:8d:de:05:fe:6a:a1:7c:24:48:a9:a2:d5:da:
c6:7e:65:cd:67:4e:f5:65:6f:f9:c5:de:a5:ad:9e:91:5e:22:
90:27:c0:8b:53:cb:f0:f8:d2:37:ec:b9:89:45:39:96:29:33:
13:9a:4a:61:c8:58:98:2c:7d:a1:2b:d6:97:8d:27:62:9e:5e:
66:cb:e2:69:39:db:17:c9:ee:80:5e:ee:67:b9:65:2b:d1:18:
12:b5:7a:46:cd:be:c5:16:7f:9b:04:58:51:7d:1a:34:29:48:
86:0a:a3:4b:cc:0b:0e:c7:f2:20:3a:ac:28:33:0f:f3:2f:1b:
f4:1a:64:d6:06:1b:6e:60:75:63:46:dc:bc:1e:63:42:b6:a7:
e1:5d:11:40:39:10:d3:0d:93:40:96:6f:f1:25:d5:58:2e:92:
56:e5:c7:4a:8c:d2:c1:49:90:87:b5:d3:44:52:9e:81:18:da:
ca:5d:8b:70:5c:af:1b:da:e8:42:8b:3b:2c:2d:be:9f:f5:47:
38:ef:5a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:39 2025 by rpki-client