Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/rcCnyFIx1lOm5NbK9zRSpdPwwZ0.roa
File: rcCnyFIx1lOm5NbK9zRSpdPwwZ0.roa (raw, json)
Hash identifier: 5GTyEVUMFGlHviB9i0per5nM0mzvBM9E1GwifnHb3tg=
Subject key identifier: AD:C0:A7:C8:52:31:D6:53:A6:E4:D6:CA:F7:34:52:A5:D3:F0:C1:9D
Certificate issuer: /CN=7b5754e4d208c6435f1abec937cde20009204dc0
Certificate serial: 0193CA1A03C75863127FE33186CF2F4C37B3
Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/rcCnyFIx1lOm5NbK9zRSpdPwwZ0.roa
Signing time: Sun 15 Dec 2024 11:35:22 +0000
ROA not before: Sun 15 Dec 2024 11:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205709
IP address blocks: 185.123.132.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ca:1a:03:c7:58:63:12:7f:e3:31:86:cf:2f:4c:37:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0
Validity
Not Before: Dec 15 11:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adc0a7c85231d653a6e4d6caf73452a5d3f0c19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:6a:24:c2:ea:9f:3f:3c:d2:e8:23:fc:c3:
7c:8c:3a:e9:8a:4f:b3:90:48:42:38:c4:8f:68:02:
d5:c4:fb:bf:6a:e3:0c:dd:1a:38:e3:21:6c:47:02:
8f:62:ab:e5:03:e3:71:af:d1:6d:db:4c:43:33:36:
49:04:b2:a7:2b:26:51:5a:73:6f:23:49:42:e1:fd:
8b:2c:3a:96:77:fe:ed:c6:d0:27:47:ca:a3:0d:57:
a7:c0:b7:f7:90:48:c8:6e:7d:f6:c0:8a:34:07:8e:
c9:72:2c:ec:f8:9f:30:75:11:c3:f0:81:01:15:33:
d6:1c:d8:e7:57:da:64:9d:1b:87:b2:9e:33:23:8f:
8f:42:b6:1a:26:4b:39:66:95:70:ec:a6:e3:91:27:
37:ff:d3:7e:a2:ec:22:01:8d:e6:ee:b6:65:16:0a:
c6:82:46:da:52:a3:c6:9e:81:0c:bf:48:c7:a1:48:
1b:16:82:b0:e7:9f:56:93:41:18:69:fa:dd:4e:f6:
21:3b:19:44:67:7a:74:9b:a0:13:72:fa:1c:b6:c0:
19:6a:0c:17:d5:93:de:6b:9a:c2:ea:86:c9:31:b6:
de:a9:2f:69:de:4e:f0:7d:14:7b:c2:24:10:4d:12:
83:df:4f:01:d5:ea:54:f4:55:81:7e:d7:ad:c3:87:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C0:A7:C8:52:31:D6:53:A6:E4:D6:CA:F7:34:52:A5:D3:F0:C1:9D
X509v3 Authority Key Identifier:
keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/rcCnyFIx1lOm5NbK9zRSpdPwwZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.132.0/22
Signature Algorithm: sha256WithRSAEncryption
44:91:a2:49:2b:84:9a:f0:fb:46:a2:75:b2:07:df:b3:12:fc:
34:fa:82:6c:19:00:be:6b:cd:17:a2:9a:71:da:03:89:24:d4:
35:12:18:67:58:0b:b2:85:43:fe:42:cf:1d:4e:e1:03:09:db:
7c:46:d7:b7:48:02:17:dc:36:9b:2b:b1:a0:c3:36:1c:ba:d1:
1a:9b:a5:0e:05:6b:e4:e9:14:80:30:75:3f:05:47:b6:59:93:
4a:d6:ea:dd:ba:a8:60:5b:66:ec:a1:d4:fa:b1:fa:65:b5:c3:
d3:15:3e:a0:20:ff:74:d5:8f:af:dc:82:73:fb:e7:0b:a7:4f:
54:40:53:a4:7e:01:b7:dd:bf:ba:e0:98:70:3a:9b:17:33:78:
d5:1c:ed:fc:66:79:cf:85:ee:2c:ee:6b:16:b7:3a:82:1e:c9:
c8:80:a0:19:e3:4e:ec:b8:9f:c1:55:f6:38:7f:ae:4e:fe:a2:
42:d0:11:94:3e:4c:4c:45:64:77:b5:9e:5b:82:97:17:81:e4:
21:79:d1:d3:ef:f6:2b:06:5d:26:0a:25:34:b1:f5:d1:8b:de:
b9:50:fa:07:24:71:8d:05:97:71:e6:f1:f0:14:eb:10:b4:95:
27:c1:94:32:30:77:7a:2a:35:26:24:71:46:83:5c:12:b2:e2:
8c:85:e3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:32:18 2025 by rpki-client