Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/n4G7r8LX3Zm-edDWajxZmcBsZPA.roa
File: n4G7r8LX3Zm-edDWajxZmcBsZPA.roa (raw, json)
Hash identifier: Ke42LIgp6dZs+X19liqrXdmUTzVB3SZDAiN6xGMzE8c=
Subject key identifier: 9F:81:BB:AF:C2:D7:DD:99:BE:79:D0:D6:6A:3C:59:99:C0:6C:64:F0
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 019373211C1EEE7CD61584D198E0C9B81287
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/n4G7r8LX3Zm-edDWajxZmcBsZPA.roa
Signing time: Thu 28 Nov 2024 14:16:09 +0000
ROA not before: Thu 28 Nov 2024 14:16:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32831
IP address blocks: 185.183.244.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Dec 2024 10:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:21:1c:1e:ee:7c:d6:15:84:d1:98:e0:c9:b8:12:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Nov 28 14:16:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f81bbafc2d7dd99be79d0d66a3c5999c06c64f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a4:1b:fa:df:7c:60:9f:94:b9:74:41:67:0e:
79:fc:d9:f6:ec:cf:1e:85:88:cf:18:86:42:2c:e0:
94:3c:a3:57:fd:a3:01:b5:a2:a8:4f:1f:68:28:07:
af:95:b9:62:e0:72:4b:94:0d:15:f2:af:14:bc:f6:
1f:fc:00:72:26:64:ec:66:c3:63:ed:4f:2d:99:8b:
a2:08:1b:d7:96:6f:65:26:ac:5d:63:98:92:d9:42:
15:bf:60:47:93:f1:2e:5f:0e:18:db:3d:78:06:2b:
8b:bf:f7:35:81:f0:97:a9:e2:9c:ce:fc:2f:95:48:
cc:a5:9a:7b:83:39:6d:f6:a2:c2:a5:ff:b8:b8:b6:
55:a0:85:ad:b9:b4:15:7c:ba:36:2e:44:d9:df:ec:
c2:d2:3d:89:43:55:3b:aa:b7:14:e6:86:12:99:00:
b2:fd:e5:45:dd:b6:ff:7f:c5:5d:cf:4c:ce:9c:74:
d4:2e:29:5a:9e:b0:41:75:5e:f3:bd:2c:dc:d1:be:
c6:18:e5:ed:78:89:2a:a6:5e:26:91:ba:14:10:38:
be:b0:ce:8a:e4:b3:85:d9:24:f2:b0:f7:c8:a0:3e:
f4:cf:9f:08:35:9d:f9:d2:c7:9f:dc:04:07:5e:3a:
2a:45:2d:57:79:a5:d0:f4:ed:88:2a:6d:80:aa:7c:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:81:BB:AF:C2:D7:DD:99:BE:79:D0:D6:6A:3C:59:99:C0:6C:64:F0
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/n4G7r8LX3Zm-edDWajxZmcBsZPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.244.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:8b:d8:95:6b:fd:12:28:2c:d9:bc:80:c8:04:12:d6:4f:86:
bb:e0:06:28:08:20:11:70:56:8f:c9:4a:ef:07:ef:03:c3:49:
93:b7:4e:c7:41:31:d5:68:39:58:40:b8:4e:04:c2:7e:2d:40:
4b:42:d5:cb:52:f5:24:b1:0b:57:95:cb:ee:53:4b:ed:53:22:
15:e1:ba:75:e6:e1:0c:4d:9f:06:21:f7:29:be:57:a0:d9:7c:
ef:48:c5:0d:5c:52:44:4b:d8:dc:a4:bd:ca:05:34:31:8c:30:
ff:65:17:14:25:56:15:26:60:5a:23:60:ca:e0:53:27:02:91:
7a:d4:fa:ff:30:45:6e:ff:9c:7b:fa:b7:f2:83:4c:ea:45:53:
07:27:aa:f0:4e:b1:46:27:77:dd:88:21:11:9f:62:93:88:e1:
28:78:d4:da:ad:ae:39:5c:21:bd:60:dc:f6:9e:e3:17:fb:68:
a5:7f:b9:47:8b:90:91:69:12:d7:3f:78:be:f4:52:06:b6:8a:
2d:22:57:f5:5d:0c:06:c1:b3:cb:04:ce:d3:d7:d5:ef:fd:c7:
b7:d4:c7:8b:5c:1b:f2:69:03:73:38:31:83:b6:b5:d1:07:e8:
95:46:d9:e7:c8:d4:ff:4c:f8:6e:f8:24:7d:bf:e7:9a:19:6c:
73:69:ed:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:01:15 2025 by rpki-client