Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/li3ByzbZKOgM5Q4vtV66ZKX627s.roa
File: li3ByzbZKOgM5Q4vtV66ZKX627s.roa (raw, json)
Hash identifier: /VsFITdl1yz2EglTMDUCQlxe1PcNvYf6vrULVAMwbWw=
Subject key identifier: 96:2D:C1:CB:36:D9:28:E8:0C:E5:0E:2F:B5:5E:BA:64:A5:FA:DB:BB
Certificate issuer: /CN=9d581ff8954a8978b34d849101546cce61c4afa3
Certificate serial: 01942368ED90CBB90860961B89A503C75466
Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/li3ByzbZKOgM5Q4vtV66ZKX627s.roa
Signing time: Wed 01 Jan 2025 19:47:46 +0000
ROA not before: Wed 01 Jan 2025 19:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203087
IP address blocks: 185.120.76.0/24 maxlen: 24
185.120.77.0/24 maxlen: 24
185.120.78.0/24 maxlen: 24
185.120.79.0/24 maxlen: 24
2a0d:c6c0::/31 maxlen: 31
Validation: Failed, certificate revoked on Sun 05 Jan 2025 05:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:ed:90:cb:b9:08:60:96:1b:89:a5:03:c7:54:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3
Validity
Not Before: Jan 1 19:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=962dc1cb36d928e80ce50e2fb55eba64a5fadbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:1e:2f:94:4d:91:3c:b8:d2:30:2a:7e:13:
44:e2:a6:67:48:92:00:bb:39:0f:09:43:fb:0f:26:
b3:e1:de:24:e1:bc:fc:56:d5:97:ce:c2:72:70:f7:
38:3c:1b:12:ee:92:03:09:ad:29:e1:a4:19:5d:9d:
f5:04:f1:49:0a:47:2e:30:08:64:cd:bf:d5:45:81:
7b:5e:2d:6c:3f:c8:40:a6:fd:c9:e7:75:cb:8b:97:
c6:5c:61:4e:39:b4:87:e3:5a:6e:44:3d:5f:d9:49:
bb:f1:0e:6f:6c:71:f3:b1:d8:77:fd:5b:5c:e9:a7:
d2:bd:23:99:e3:2d:47:91:33:b5:da:98:9a:4f:30:
b5:59:52:24:ee:8f:97:f4:49:54:66:8d:68:22:19:
d8:5a:16:33:7d:9a:da:61:a8:32:8f:41:6f:89:cf:
bf:1e:4e:17:70:95:24:26:d9:5b:c6:65:73:2c:24:
9f:f8:11:0a:3e:c4:41:b5:c4:4b:82:94:3f:80:4c:
a0:6e:46:07:72:ee:a3:ec:bf:0c:28:a8:02:be:4b:
c6:79:64:e0:a1:a0:94:4e:23:2b:c6:fd:e9:26:55:
9b:a9:13:b1:7a:f8:61:6f:f3:f7:66:2c:92:3b:7e:
13:94:1b:28:09:cb:1e:6f:45:d5:4a:4d:b5:9b:74:
ae:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2D:C1:CB:36:D9:28:E8:0C:E5:0E:2F:B5:5E:BA:64:A5:FA:DB:BB
X509v3 Authority Key Identifier:
keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/li3ByzbZKOgM5Q4vtV66ZKX627s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.76.0/22
IPv6:
2a0d:c6c0::/31
Signature Algorithm: sha256WithRSAEncryption
8f:1c:49:66:a4:5f:bc:3a:74:1f:fa:93:99:2e:9d:04:31:dd:
d3:fd:89:cd:d5:25:b2:29:d4:07:55:21:20:bc:ea:89:f6:ef:
1d:f6:53:f8:04:62:28:17:1a:96:e6:20:1a:ab:c0:1d:0d:20:
24:2e:71:ab:5b:a1:29:a2:40:28:a9:bd:a8:21:34:8f:e4:58:
2f:5b:9a:b5:ab:77:8c:b7:79:7a:19:b3:39:5c:68:1b:e7:fb:
51:61:7a:42:4c:aa:aa:29:39:5e:64:04:5c:dd:61:cc:0b:1e:
be:b8:2d:39:7c:df:4d:c0:a9:43:af:f4:b5:3a:89:0e:d0:8f:
9e:d6:c5:51:43:f6:b5:38:4e:67:ca:80:b2:96:1b:2c:50:71:
89:cc:c0:f0:88:c5:48:f9:50:8a:49:16:bf:ac:3d:9f:c0:85:
b1:fb:0e:86:fb:a6:ca:64:fc:24:d5:de:5f:0a:8e:95:90:16:
c1:ae:45:89:a4:1e:3e:b4:a2:fd:3a:39:8a:62:3c:1c:48:af:
69:5f:e2:52:72:5a:a4:90:c5:cc:34:2e:86:78:85:74:96:e9:
2f:19:33:f3:be:76:a1:32:8a:27:d8:1c:f6:bd:a0:cb:5d:6e:
97:c4:d7:99:2f:2c:0c:4e:c4:a8:52:f1:65:1a:e8:a1:b5:d5:
73:f8:c6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:29:23 2025 by rpki-client