Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/KWZ5maDdvrbsIlGICiiiilXoCck.roa
File: KWZ5maDdvrbsIlGICiiiilXoCck.roa (raw, json)
Hash identifier: VGcH7cKgZ5AILnMLDwkc6Pl+HTpD1fef8clF8YYdN+M=
Subject key identifier: 29:66:79:99:A0:DD:BE:B6:EC:22:51:88:0A:28:A2:8A:55:E8:09:C9
Certificate issuer: /CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
Certificate serial: 018CC2DB280DCFE99AF328CE44AE05194AFC
Authority key identifier: 26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/KWZ5maDdvrbsIlGICiiiilXoCck.roa
Signing time: Mon 01 Jan 2024 02:29:51 +0000
ROA not before: Mon 01 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42889
IP address blocks: 185.190.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:28:0d:cf:e9:9a:f3:28:ce:44:ae:05:19:4a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
Validity
Not Before: Jan 1 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29667999a0ddbeb6ec2251880a28a28a55e809c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:16:e6:d5:cd:91:49:eb:fe:61:64:b2:31:de:
a4:10:b6:26:1c:2e:4d:8e:be:6b:ee:71:23:ad:47:
da:d5:e0:5b:5f:ef:82:38:11:3d:82:47:f6:c5:1e:
93:65:e6:d0:27:1c:d7:f3:d3:a1:48:00:b9:8f:7e:
78:25:76:1f:d5:2d:58:4a:0b:38:92:dc:8f:53:ee:
f7:eb:27:e7:0d:fc:9b:ca:74:21:97:92:c8:47:1e:
ce:47:1b:a9:2f:38:f0:dc:4a:9c:14:cd:fb:7d:95:
21:34:d3:da:f6:c7:9a:98:20:ad:d6:9d:c3:46:bd:
4e:ff:a7:39:08:88:df:60:ce:4a:42:3d:e0:da:b2:
7f:0a:1a:02:52:54:ad:9f:d8:ed:86:54:b8:1f:05:
be:1a:dc:47:02:09:eb:14:13:b8:52:fe:ee:0c:a6:
01:31:68:de:e2:f7:7c:57:ee:2a:e6:0d:7f:4d:7c:
2d:62:9f:18:0c:64:a2:0d:df:70:ae:0b:57:79:b9:
95:69:1c:bd:5d:4d:3d:0d:d3:da:ae:cb:10:91:88:
14:dc:16:a2:05:33:fd:64:65:f0:f3:9d:04:d7:8f:
d9:4f:55:1c:88:7a:76:da:e4:62:84:d4:61:b1:5b:
10:f7:02:56:4e:5c:81:19:0c:f6:21:00:3f:fe:c1:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:66:79:99:A0:DD:BE:B6:EC:22:51:88:0A:28:A2:8A:55:E8:09:C9
X509v3 Authority Key Identifier:
keyid:26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/KWZ5maDdvrbsIlGICiiiilXoCck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.7.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ca:6f:5e:61:b5:de:73:e8:cc:2d:f0:82:b7:11:91:2c:10:
e5:c4:cc:bd:50:13:cc:74:c4:11:16:06:a2:e0:04:e5:38:cf:
3e:5e:51:8e:8e:3a:e3:57:da:38:4a:7f:43:b3:16:bd:bb:09:
cb:e2:6e:0c:8a:e2:53:e3:94:e7:08:ba:71:89:c2:35:76:b6:
aa:e4:88:50:0d:22:20:f3:8f:9a:4a:b9:c4:a6:52:68:a4:9e:
d2:9a:1d:03:58:3c:af:11:9d:95:9a:c4:10:89:32:ed:8c:1d:
1b:45:bf:1e:3e:54:8d:82:71:d8:fb:ed:24:9c:a1:58:93:b5:
74:5f:3a:3c:76:62:d9:33:c6:ed:44:32:98:9a:62:8b:3b:f4:
dc:54:7b:e5:c6:13:b2:de:49:cd:86:c3:4c:72:b4:8c:d8:bc:
d7:6f:c4:98:bd:fd:b5:64:55:6e:4e:0d:f7:ae:92:e3:55:c1:
da:1b:e0:ca:17:98:6c:20:f6:f1:22:9e:60:b5:6f:b1:68:37:
ce:a3:4f:a7:a2:1d:39:d1:5b:b1:56:6d:a2:1d:de:17:af:22:
0d:06:a1:12:1d:fe:57:fa:a4:9e:44:cf:0e:2e:15:29:0e:dc:
29:02:97:37:03:55:8d:6a:3f:38:1d:59:53:59:8d:b4:4f:43:
85:cb:ca:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:16:47 2025 by rpki-client