Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/v0YDVl6UKVfuk8zui7mzd_GesqQ.roa
File: v0YDVl6UKVfuk8zui7mzd_GesqQ.roa (raw, json)
Hash identifier: 7zNKt9mKBfCfO++EuMDgI+BBH5M2PA9WhT3cqKdiGuM=
Subject key identifier: BF:46:03:56:5E:94:29:57:EE:93:CC:EE:8B:B9:B3:77:F1:9E:B2:A4
Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Certificate serial: 018CC7942D2F122343ED8B52A2EA0C74BDD9
Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/v0YDVl6UKVfuk8zui7mzd_GesqQ.roa
Signing time: Tue 02 Jan 2024 00:30:26 +0000
ROA not before: Tue 02 Jan 2024 00:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200645
IP address blocks: 185.177.156.0/22 maxlen: 22
185.100.44.0/22 maxlen: 22
185.174.200.0/22 maxlen: 22
185.117.136.0/22 maxlen: 22
185.179.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:2d:2f:12:23:43:ed:8b:52:a2:ea:0c:74:bd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Validity
Not Before: Jan 2 00:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf4603565e942957ee93ccee8bb9b377f19eb2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:5f:49:96:02:00:ff:25:d8:4c:ff:29:7e:
aa:c2:73:07:19:c4:57:86:3d:d5:7f:4a:30:ca:f9:
8f:2b:76:fb:0e:bd:0c:60:55:ff:41:a3:df:55:9a:
94:42:af:34:7e:38:96:e7:1c:50:0b:0e:d3:54:d0:
d9:c7:35:67:f9:51:92:d5:99:5d:5e:db:f8:12:f1:
41:aa:c7:77:7d:39:5b:4d:bb:89:26:e3:82:35:47:
0c:c5:ab:29:e8:3f:47:b2:f0:89:3f:43:63:bf:b7:
1e:7f:6c:76:d5:be:50:7f:78:23:89:a9:da:b8:1c:
d1:c5:a9:8b:6a:ed:f6:f1:37:27:ff:c9:3d:33:53:
14:2a:ec:26:d1:74:35:2c:c7:b3:02:ee:f3:0e:fe:
47:85:e2:51:2f:5f:95:5f:28:5e:d2:65:fa:a4:e9:
37:ea:42:00:9a:5d:11:b8:e3:d7:2b:a0:3b:db:6d:
15:04:bc:6f:fc:1a:1c:21:12:a5:a3:22:04:f4:2b:
ed:fb:1d:06:2c:51:ab:0b:9f:ca:36:5f:99:8a:b5:
df:a7:53:84:ef:6c:fa:ea:5d:de:18:f8:a4:9a:c7:
06:76:d2:46:18:64:d8:3d:44:72:ca:47:97:b2:79:
e3:1b:98:1e:22:02:bc:aa:6b:26:8c:7a:33:fc:56:
f6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:46:03:56:5E:94:29:57:EE:93:CC:EE:8B:B9:B3:77:F1:9E:B2:A4
X509v3 Authority Key Identifier:
keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/v0YDVl6UKVfuk8zui7mzd_GesqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.44.0/22
185.117.136.0/22
185.174.200.0/22
185.177.156.0/22
185.179.220.0/22
Signature Algorithm: sha256WithRSAEncryption
01:36:9f:45:9a:d3:39:7c:fd:20:9d:4a:9f:f2:2d:f0:a0:fd:
f5:da:ea:ef:24:f8:7b:d8:7a:11:ae:3f:74:04:1a:f4:c4:eb:
e1:3f:ae:bb:7f:f8:02:73:bf:98:ba:ac:ce:66:20:88:33:15:
90:59:89:58:9a:a3:ce:df:d1:96:7f:22:97:b5:96:90:26:b4:
2d:06:8f:45:1a:d1:25:18:b3:ea:be:d0:f2:c5:fa:67:4e:05:
b1:d5:19:59:1f:22:e3:13:f5:51:b7:60:83:28:1a:58:b3:47:
36:15:00:d3:0c:1e:f4:12:32:43:63:e4:81:d6:7f:a4:c7:c0:
4a:eb:bd:61:01:c3:a6:e4:8f:c6:d6:e7:08:d3:e2:34:c9:02:
18:d3:18:f8:d8:e0:d6:53:24:6d:bd:d9:b9:23:2d:1c:d9:c1:
01:c9:95:40:43:52:d3:a1:b1:7c:45:72:ee:42:ab:ef:d9:97:
6d:32:52:55:a3:d9:1c:1d:70:d5:eb:2f:fe:31:fb:b7:2f:a0:
4e:2e:7b:6c:e2:70:b0:ab:43:58:74:3e:19:04:f8:dc:5f:98:
21:da:a2:15:6b:89:f6:39:2a:d8:23:a8:6b:dc:99:44:9b:af:
2b:51:31:3a:40:1e:f5:4f:06:67:f0:0a:90:4e:dd:92:b2:25:
bc:b2:e8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:48:58 2025 by rpki-client