Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/x-b38H1Q-aEYGedQUNpPc_fDCy4.roa
File: x-b38H1Q-aEYGedQUNpPc_fDCy4.roa (raw, json)
Hash identifier: o0bxZhNRk+q6m+xklHiyoGpGI/Nfvg1ADaqlRYVmcSQ=
Subject key identifier: C7:E6:F7:F0:7D:50:F9:A1:18:19:E7:50:50:DA:4F:73:F7:C3:0B:2E
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 0190CD3BAE64C5247B2270A0DFD344BDEE6D
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/x-b38H1Q-aEYGedQUNpPc_fDCy4.roa
Signing time: Fri 19 Jul 2024 23:02:38 +0000
ROA not before: Fri 19 Jul 2024 23:02:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54203
IP address blocks: 185.147.213.0/24 maxlen: 24
2a03:efc0:200::/40 maxlen: 40
2a03:efc0:500::/40 maxlen: 40
2a03:efc0:1300::/40 maxlen: 40
2a03:efc0:1900::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 19 Jul 2024 23:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:cd:3b:ae:64:c5:24:7b:22:70:a0:df:d3:44:bd:ee:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Jul 19 23:02:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7e6f7f07d50f9a11819e75050da4f73f7c30b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:7c:51:70:d8:57:73:c9:40:18:6c:98:6b:
09:19:61:7d:92:45:cb:ea:78:86:86:b3:41:f8:a9:
41:a4:02:46:e6:0f:ab:aa:37:9c:4f:29:8b:c1:35:
ae:3d:5b:39:55:6e:94:e8:96:e9:4e:b2:33:a5:7a:
f9:39:84:90:ef:12:5f:4f:a3:93:c2:04:5d:34:f8:
c1:ba:71:2e:8b:2d:8c:b2:b8:58:88:ff:66:92:56:
37:20:a6:e5:c5:43:42:74:bb:7c:8d:95:d4:ac:2c:
06:17:f5:51:ec:77:66:db:4c:77:4b:18:be:05:af:
e7:fd:19:b6:00:0d:78:84:a8:af:55:56:8f:d7:c6:
12:aa:ff:7f:cf:5f:19:18:0a:85:ce:80:33:a5:b1:
d3:54:84:fe:e5:9b:07:59:2e:12:6b:85:37:75:8b:
ec:9b:bf:bb:e0:5d:e0:9a:03:b6:09:e6:ac:ce:e7:
a6:eb:09:3a:fe:43:c5:90:d1:3f:0d:5d:fa:24:b1:
36:7e:84:cd:5d:2a:22:ea:c4:b1:86:b3:f4:c4:11:
6e:f7:f2:b5:ea:9e:aa:c1:d5:9c:c0:47:05:3d:b1:
fe:74:7a:2f:6f:e4:f2:ba:75:37:9a:67:be:8c:54:
c3:ff:59:1a:ce:4e:83:36:bf:e3:d4:54:f2:77:8a:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E6:F7:F0:7D:50:F9:A1:18:19:E7:50:50:DA:4F:73:F7:C3:0B:2E
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/x-b38H1Q-aEYGedQUNpPc_fDCy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.213.0/24
IPv6:
2a03:efc0:200::/40
2a03:efc0:500::/40
2a03:efc0:1300::/40
2a03:efc0:1900::/40
Signature Algorithm: sha256WithRSAEncryption
5a:aa:32:cc:4c:41:72:ea:6b:70:9c:27:76:e6:0a:41:1a:97:
3c:00:80:4d:2f:f7:ef:b1:57:7b:7f:a9:d1:15:ba:df:63:ef:
5d:85:0e:6c:58:ac:22:08:7c:88:52:6d:6f:3e:02:2e:de:fb:
70:f7:be:2b:87:46:5e:86:4e:54:c8:5e:d5:02:35:e6:3e:1b:
9f:b5:21:2d:bc:c0:cb:e5:29:9e:33:0a:9b:7b:3d:f2:33:49:
06:bf:11:16:7a:0e:a2:17:4f:50:61:07:8d:7d:81:17:7b:1e:
1c:95:4f:8b:8f:b5:1e:e1:aa:ad:87:ad:04:f4:89:c3:7e:d9:
d0:2f:a9:ec:62:6b:55:7f:69:97:99:78:ba:4e:48:d6:4c:9f:
8f:07:d8:09:ae:86:4b:0c:df:a3:03:dc:e6:e4:d0:a2:13:0b:
be:07:ce:a2:0a:39:0c:a9:8d:55:8a:d6:f4:ff:f1:da:dc:19:
42:f0:d5:e0:73:8c:08:03:54:7d:67:0b:26:fb:1d:13:34:29:
2f:c4:81:86:ad:5a:62:93:2e:64:b8:1a:f7:40:c6:fd:91:62:
14:dc:32:8d:fe:2a:0d:06:01:8a:24:73:90:90:1a:a6:bc:db:
e7:c0:39:65:14:18:e3:1c:24:55:81:10:3b:00:6c:19:f8:d5:
6e:3d:24:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:22:54 2025 by rpki-client