Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/kWQIKsXrC82k-j0yM0DAdq_gOmQ.roa
File: kWQIKsXrC82k-j0yM0DAdq_gOmQ.roa (raw, json)
Hash identifier: RJFpbrdLKLmXt5azOMYm5PM3XwvSc0dPhLT4uwPDxm0=
Subject key identifier: 91:64:08:2A:C5:EB:0B:CD:A4:FA:3D:32:33:40:C0:76:AF:E0:3A:64
Certificate issuer: /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Certificate serial: 019422FC206A9A8CEF9E0A6BBC1FCFB06346
Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/kWQIKsXrC82k-j0yM0DAdq_gOmQ.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211261
IP address blocks: 185.204.200.0/24 maxlen: 24
185.204.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 11:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:20:6a:9a:8c:ef:9e:0a:6b:bc:1f:cf:b0:63:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9164082ac5eb0bcda4fa3d323340c076afe03a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:44:9b:49:1f:fb:a4:a2:67:2a:c4:62:95:
77:30:6b:b3:1e:df:0e:e4:aa:a3:4e:94:bb:ce:8b:
fa:f5:55:c6:ae:44:b7:d1:b3:a7:9a:82:22:c1:39:
64:5c:79:ad:dd:9b:82:db:85:f4:a4:21:b5:35:41:
5a:8a:60:d7:db:f9:57:ab:ad:23:68:c0:8f:1a:34:
59:6f:11:62:21:66:59:38:d8:93:c4:e0:02:fd:96:
b1:ca:aa:3a:1d:62:c0:40:b3:57:4c:04:8c:14:c8:
db:8e:52:a7:19:36:6c:7a:b6:9f:86:3e:4e:5f:05:
b8:99:fc:4c:6d:fa:93:ec:14:9a:c8:e5:3f:00:10:
42:2c:db:6e:ac:ac:da:7a:06:f8:b8:74:bf:da:14:
c8:3c:8f:1c:77:0d:e6:ea:59:a1:96:f1:96:3b:73:
92:84:2d:7d:b5:4d:7e:91:4f:ba:c9:21:db:1c:2c:
88:2e:85:06:02:af:09:de:79:0a:4a:a7:d0:db:0c:
0e:08:21:28:e5:5f:31:ad:93:de:23:63:8d:a2:fb:
33:4c:b0:a4:f8:5e:7b:43:65:1a:66:f1:b9:9b:d2:
75:65:3d:c4:2a:c3:c4:9b:b9:39:4c:f6:f4:5b:ef:
a6:19:e2:b8:9a:99:83:65:5e:f1:94:2e:76:e5:80:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:64:08:2A:C5:EB:0B:CD:A4:FA:3D:32:33:40:C0:76:AF:E0:3A:64
X509v3 Authority Key Identifier:
keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/kWQIKsXrC82k-j0yM0DAdq_gOmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.200.0/23
Signature Algorithm: sha256WithRSAEncryption
90:cd:cb:3d:a0:73:ff:df:e5:2f:57:69:ea:90:e4:f2:5a:57:
a3:bb:b2:99:a7:44:9d:0c:ac:65:a0:f2:f2:45:15:b1:2b:57:
fb:7f:3e:e1:b9:67:17:2c:4b:e4:06:c7:12:9c:bd:9f:8d:51:
0f:dc:56:44:95:6c:c0:2f:f8:53:07:47:da:2a:35:69:20:d3:
e4:22:97:fc:0a:8a:a2:5b:6e:12:2a:40:a0:61:54:16:e8:26:
91:fc:4a:b6:3e:0b:5c:ea:6b:a8:87:49:16:7e:d8:f5:22:25:
8c:c0:19:df:14:52:59:86:af:f8:32:d7:62:f6:1c:f2:36:f1:
45:13:3b:02:74:86:5a:b4:4f:63:5e:ee:08:85:5c:e1:b1:5b:
29:85:62:ea:02:48:cc:a2:2f:04:09:10:13:e7:38:e8:b0:22:
93:00:3f:57:cf:05:c0:a3:a4:07:29:f1:79:c3:c6:8f:ea:8c:
10:01:53:03:b1:21:14:a7:e1:d7:7b:20:07:fd:e6:a9:89:31:
cc:20:91:43:d5:38:fc:cc:90:5a:35:6d:29:84:b6:50:c3:60:
95:a9:b7:fe:91:ff:86:9a:c5:1a:03:14:f0:7e:65:ce:3d:fa:
7c:91:27:3e:8e:66:25:b2:b7:4b:96:94:85:4b:62:71:96:3e:
7b:23:3f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:43:19 2025 by rpki-client