Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/aca16E5VaQj171RAkApFCdy_8AM.roa
File: aca16E5VaQj171RAkApFCdy_8AM.roa (raw, json)
Hash identifier: G4ycrzna/hWaEUG9yVcWpw/pVvX5KhZDi5jCHJ1gcXw=
Subject key identifier: 69:C6:B5:E8:4E:55:69:08:F5:EF:54:40:90:0A:45:09:DC:BF:F0:03
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 019121844E5DCC2EDC6B7C7FAB7AC9EE7EAC
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/aca16E5VaQj171RAkApFCdy_8AM.roa
Signing time: Mon 05 Aug 2024 07:50:04 +0000
ROA not before: Mon 05 Aug 2024 07:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215655
IP address blocks: 185.145.184.0/22 maxlen: 22
185.186.50.0/24 maxlen: 24
185.186.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 08:09:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:84:4e:5d:cc:2e:dc:6b:7c:7f:ab:7a:c9:ee:7e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Aug 5 07:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69c6b5e84e556908f5ef5440900a4509dcbff003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:b4:fe:c4:44:b0:c9:be:aa:71:ec:26:de:
ed:69:cf:92:85:77:9d:b5:f8:86:c3:fd:30:12:ba:
2e:52:f2:32:37:bb:21:98:a0:84:5b:89:83:c9:2c:
a0:2a:3c:02:02:29:8a:f7:60:2e:84:90:dc:96:7b:
62:21:0b:e8:5a:a2:eb:be:e7:f1:35:da:58:28:2d:
ae:40:f0:00:18:f2:95:78:2a:56:39:a4:81:08:8f:
65:da:36:1c:67:31:33:eb:56:30:9d:a8:9a:64:19:
8b:68:52:64:14:e9:b0:af:53:b9:44:86:64:c5:32:
78:f8:aa:b4:b7:5e:2f:cf:c1:e4:4e:da:b8:2e:cc:
b7:82:d2:60:40:76:07:8c:bf:2b:35:03:da:cc:a0:
3e:4e:77:e5:8d:1a:c7:56:79:c2:db:7e:0b:cf:c3:
14:12:ee:c1:58:d3:94:2d:76:ef:6e:fd:5f:49:1f:
5d:b8:d4:42:bf:45:15:f8:fd:02:02:fe:4b:e1:9d:
03:1e:58:8a:48:b9:47:5b:de:f7:48:43:c1:5a:b0:
cb:36:72:1c:61:ca:b5:14:2a:28:e2:27:7b:45:e2:
60:be:31:00:5e:3c:ec:58:c6:21:2e:13:96:84:c1:
8e:a6:ff:9e:f6:0e:24:4e:89:80:6d:f8:a1:05:96:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C6:B5:E8:4E:55:69:08:F5:EF:54:40:90:0A:45:09:DC:BF:F0:03
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/aca16E5VaQj171RAkApFCdy_8AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.184.0/22
185.186.50.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:ed:d7:05:79:8a:93:bc:21:f4:2f:1d:45:03:3a:a4:a8:d8:
15:91:d8:d7:11:79:78:46:3b:ba:6c:0a:56:7e:82:50:f4:45:
db:1f:39:aa:4c:75:3b:23:96:23:22:0f:e1:40:df:b3:d6:73:
28:58:f9:86:c5:e5:6b:06:91:57:42:78:11:09:e5:34:82:72:
8d:d5:93:2a:84:0c:21:3c:c2:de:99:53:de:09:82:ab:a1:34:
19:0b:4e:92:58:51:6a:68:f5:2f:f1:c7:b9:ec:ff:c3:0d:81:
18:0a:5e:ca:7b:19:74:10:b6:4c:b8:a9:83:09:6f:64:04:01:
70:93:15:4b:34:18:22:f0:6c:a1:be:ff:48:96:1f:f6:7e:85:
5c:47:e4:21:96:0b:f1:ca:4a:91:ab:4d:14:bc:4f:ff:c9:0d:
fb:62:96:1b:8b:07:f3:ed:6f:a4:a9:0e:37:62:f1:49:77:dd:
a7:41:49:d7:4a:e2:cb:da:5c:ea:f3:3c:ae:4e:98:84:25:5b:
f2:2f:07:b3:39:5d:87:91:7f:4a:41:7f:3e:1b:14:55:e2:fa:
0d:20:82:1e:12:95:92:81:58:10:7d:33:53:bf:bb:0c:dd:94:
8f:11:66:6f:49:81:17:15:53:7e:4e:2f:3d:ef:64:fa:ad:83:
96:21:8a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:37:49 2025 by rpki-client