Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/bmY9raQbjn39C3JJ8YuLf4j5RWs.roa
File: bmY9raQbjn39C3JJ8YuLf4j5RWs.roa (raw, json)
Hash identifier: NIN75rVZP/FpJXs/CbQY3BRYGnU1s64JS8Z6Z/H9IUk=
Subject key identifier: 6E:66:3D:AD:A4:1B:8E:7D:FD:0B:72:49:F1:8B:8B:7F:88:F9:45:6B
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 01935E6975D885517961CCA72A4C232DFEBA
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/bmY9raQbjn39C3JJ8YuLf4j5RWs.roa
Signing time: Sun 24 Nov 2024 13:43:09 +0000
ROA not before: Sun 24 Nov 2024 13:43:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205814
IP address blocks: 185.122.253.0/24 maxlen: 24
185.122.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Nov 2024 15:43:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5e:69:75:d8:85:51:79:61:cc:a7:2a:4c:23:2d:fe:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Nov 24 13:43:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e663dada41b8e7dfd0b7249f18b8b7f88f9456b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:15:fb:21:63:93:3a:7a:88:64:7e:cd:b0:
2f:11:24:4a:d9:c6:09:51:d8:b0:43:5b:04:2e:02:
ed:ad:91:c2:6a:4c:90:c6:14:fc:8d:77:ff:6f:0a:
82:92:68:31:ba:5f:ab:96:1b:70:69:23:08:a6:0e:
83:b4:0f:01:1e:e3:54:eb:2f:7b:cd:3b:8f:a4:02:
c8:4a:42:12:bb:37:66:c1:c3:20:38:49:bb:43:ef:
32:fa:5a:91:69:25:ec:04:b9:58:25:30:73:f7:5d:
71:5c:a2:99:52:f9:c1:f7:e0:e5:32:44:ed:80:1d:
f1:f1:b6:f4:fe:f0:3d:42:f8:35:7b:a9:37:9c:bf:
f1:08:a3:6e:1c:19:73:93:93:bc:74:ae:4e:93:e1:
90:a7:18:63:54:16:63:1d:72:e4:88:55:e1:33:2e:
f6:e1:5c:0f:14:62:61:da:db:f7:c0:26:f6:b3:59:
ae:39:16:15:4d:86:5d:85:12:1d:9c:50:f9:4f:69:
db:a8:4c:a1:b8:c0:2d:bb:a7:28:dc:da:39:b0:f3:
12:7d:c6:f2:42:b7:57:22:9e:82:42:c8:b2:19:8e:
86:e9:0f:9d:98:eb:45:28:a4:1e:19:41:08:66:d0:
14:0d:cd:26:d9:da:91:57:55:2b:cf:b0:1f:ab:61:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:66:3D:AD:A4:1B:8E:7D:FD:0B:72:49:F1:8B:8B:7F:88:F9:45:6B
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/bmY9raQbjn39C3JJ8YuLf4j5RWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.253.0-185.122.254.255
Signature Algorithm: sha256WithRSAEncryption
6d:bf:eb:d0:32:62:3e:4f:14:7f:a0:39:08:aa:42:b9:0a:04:
f6:be:6c:3c:2b:c7:05:64:cc:28:7c:3a:58:14:b4:31:d3:a1:
72:bd:53:00:35:22:c0:96:f9:fe:f6:32:c6:32:c8:e0:98:af:
a9:b6:52:3c:54:66:05:31:7b:b9:db:80:c3:e3:75:9d:e0:50:
0f:9b:6a:2d:56:15:08:9c:59:99:92:0a:22:87:6f:9e:7e:78:
cc:d7:56:34:e3:dd:f4:9b:ab:d7:c8:30:6f:0b:e0:28:65:2a:
ea:05:e5:a0:25:45:15:d0:4f:7b:d3:01:53:f0:54:c5:ea:14:
f4:81:5f:df:d2:40:80:e9:f2:66:36:a2:1d:42:57:25:0b:75:
6b:2c:05:26:b9:be:e5:70:10:fb:43:85:56:8b:66:5d:00:69:
b3:71:c8:fd:74:03:e1:12:b9:67:f4:96:d6:5f:31:ca:5b:80:
35:dc:e5:9c:88:2d:99:12:7b:e1:c2:4d:c1:03:cd:8f:ae:da:
a0:15:c5:15:c3:c5:4f:ed:1e:46:b1:a9:c9:49:9b:e4:fb:73:
da:55:c3:36:32:5e:5a:45:96:f3:3a:7f:40:fd:0a:cf:f8:23:
40:be:52:32:7f:93:07:e2:89:c0:3d:04:02:35:9c:fa:e6:b7:
e8:65:c5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:40:41 2025 by rpki-client