Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/hWUmq7DSBCUT0TRUozcG22ZJPJU.roa
File: hWUmq7DSBCUT0TRUozcG22ZJPJU.roa (raw, json)
Hash identifier: /4M78/E4SZcarbE2B4FvP+qTLydO2UBKIIKltzldnAs=
Subject key identifier: 85:65:26:AB:B0:D2:04:25:13:D1:34:54:A3:37:06:DB:66:49:3C:95
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 01939FE45859ABA2C52141560DE8463CE1BA
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/hWUmq7DSBCUT0TRUozcG22ZJPJU.roa
Signing time: Sat 07 Dec 2024 06:52:42 +0000
ROA not before: Sat 07 Dec 2024 06:52:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.126.158.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9f:e4:58:59:ab:a2:c5:21:41:56:0d:e8:46:3c:e1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Dec 7 06:52:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=856526abb0d2042513d13454a33706db66493c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:20:f5:ec:ed:bf:ba:f1:fc:d1:5d:a2:04:
6c:d6:20:13:9a:2f:14:33:58:f6:ff:be:75:bf:83:
a1:25:4b:36:6a:a3:af:90:9a:d0:72:18:c1:61:c5:
0d:bb:b3:d9:72:ea:7d:6b:b9:f6:fd:62:62:ba:05:
3d:d8:18:50:cd:db:c6:8d:63:4e:17:2b:11:4e:b3:
45:0a:a2:ca:70:ff:61:18:57:0c:2c:d3:bf:af:15:
69:3c:29:08:f6:ea:dd:43:b0:d7:0b:37:14:24:d8:
57:b0:43:ec:05:fc:0b:0a:30:12:46:a3:d3:45:a8:
3e:de:8e:7b:88:40:d9:8e:76:17:f8:98:47:23:ab:
1c:23:b0:8d:1d:df:e9:d3:a8:e7:26:eb:52:63:f4:
1b:91:70:a9:08:3e:18:96:02:81:0a:63:be:33:17:
c8:39:c2:2f:0c:a9:9b:8e:a0:7f:c9:3a:35:97:19:
47:56:e6:d2:76:bf:ad:31:e3:da:f9:f7:42:00:b4:
f1:43:33:e9:d9:5b:bb:ff:ed:2a:5d:b4:2e:85:68:
f3:77:e3:dc:e1:c4:e8:ea:d4:0e:33:01:a5:29:eb:
c5:cd:f1:09:1b:25:73:45:4b:2f:2e:66:29:15:af:
2e:80:92:d9:9e:c8:1d:31:11:72:bf:2a:9a:40:72:
e9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:65:26:AB:B0:D2:04:25:13:D1:34:54:A3:37:06:DB:66:49:3C:95
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/hWUmq7DSBCUT0TRUozcG22ZJPJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.158.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:13:55:9d:0e:74:db:41:c9:a1:f1:4a:c9:f2:8e:16:2e:98:
7b:44:e4:a5:9a:ae:9f:5f:f8:ea:a5:ec:6d:75:4c:a2:3b:69:
7d:a5:08:a7:aa:70:b5:b3:58:75:28:67:fc:8f:5d:a4:3e:7b:
6f:64:30:84:56:af:f5:0c:2a:9d:d4:97:6b:7c:1e:6a:b4:fa:
41:4a:64:45:e8:77:09:3f:2f:3b:4e:25:66:83:79:0f:82:d2:
e0:98:2f:36:45:19:a0:59:f2:f6:ca:ff:24:d6:03:0c:60:c3:
11:6a:f5:40:93:00:f3:82:03:ca:e0:68:e8:d9:75:8c:c8:13:
64:3b:22:58:d5:7c:8c:ef:84:ef:a5:51:44:16:16:b1:b7:0e:
05:39:bf:9f:f6:8b:88:b9:81:22:64:fa:93:fc:64:3f:92:f0:
f4:74:97:a6:66:86:f6:2b:44:48:4c:1c:5a:e4:03:f2:72:fe:
19:b3:b0:fa:b6:cb:68:91:9c:a6:a2:7c:e8:ea:c9:9b:17:1c:
37:6e:d9:80:97:ca:6b:30:94:e6:17:c3:05:f0:00:30:d1:a9:
b1:6b:7a:23:ef:46:ef:8e:b4:6f:1b:3d:9e:5b:f0:b9:83:f9:
b1:c0:17:40:d3:30:19:74:59:bf:b4:ef:14:2f:1f:f1:0d:75:
b1:de:2f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:01:53 2025 by rpki-client