Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/rnbuouY3Gihs5xNczgoPBs7GGlo.roa
File: rnbuouY3Gihs5xNczgoPBs7GGlo.roa (raw, json)
Hash identifier: pys6UXg4eXTEQ8caDkAs1VAXnIqE0qK1ZKwAxkLM45A=
Subject key identifier: AE:76:EE:A2:E6:37:1A:28:6C:E7:13:5C:CE:0A:0F:06:CE:C6:1A:5A
Certificate issuer: /CN=d982791736cdddd1328d0dd0decae92c058d6f25
Certificate serial: 01949F80338225DCBD95F27D57FFEA0502FC
Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/rnbuouY3Gihs5xNczgoPBs7GGlo.roa
Signing time: Sat 25 Jan 2025 22:06:06 +0000
ROA not before: Sat 25 Jan 2025 22:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206389
IP address blocks: 185.173.217.0/24 maxlen: 24
185.173.218.0/24 maxlen: 24
185.173.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Jan 2025 15:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9f:80:33:82:25:dc:bd:95:f2:7d:57:ff:ea:05:02:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25
Validity
Not Before: Jan 25 22:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae76eea2e6371a286ce7135cce0a0f06cec61a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:c3:af:fa:93:8a:7d:45:9d:73:93:99:af:
bf:1a:d6:e4:50:1a:78:da:5e:d9:6f:ef:23:93:a6:
05:54:bc:bd:de:90:01:45:c5:6a:31:06:4e:22:29:
b4:2f:07:77:40:f7:3d:27:03:a7:bf:5c:ff:9f:4c:
00:3b:e8:b8:62:d6:9e:06:61:18:49:31:2c:f6:61:
cf:27:ea:31:c2:38:3b:f3:21:23:73:75:73:08:ca:
ac:c8:47:fc:19:a4:4f:67:47:76:33:0e:a3:ba:73:
1f:af:22:80:41:dd:77:df:89:42:d3:c9:dc:02:05:
c4:7c:39:1c:9f:e6:0b:a6:69:7d:4e:5a:e0:ae:0a:
ae:ec:4e:f0:39:dc:08:0b:2b:b6:d3:5e:43:ec:2e:
57:b5:e5:a0:dc:0b:5f:88:00:22:4a:e5:82:cf:7c:
e6:e9:9c:53:ca:e7:41:20:b5:9c:a6:61:b2:0a:c1:
e5:25:14:b2:86:30:c6:a9:02:a3:cc:2d:2c:39:15:
0e:19:c6:32:96:40:c9:10:4d:fa:db:f6:f4:b8:b6:
9b:f3:d9:fe:d9:ec:18:b4:02:ac:c8:58:99:72:63:
ee:e2:18:57:bf:5a:19:39:43:3e:21:2d:69:5d:96:
46:24:79:ea:1b:ac:c5:ff:f3:c1:9b:b6:a1:de:f2:
58:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:76:EE:A2:E6:37:1A:28:6C:E7:13:5C:CE:0A:0F:06:CE:C6:1A:5A
X509v3 Authority Key Identifier:
keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/rnbuouY3Gihs5xNczgoPBs7GGlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.217.0-185.173.219.255
Signature Algorithm: sha256WithRSAEncryption
93:ef:86:ce:07:fa:26:39:ba:72:97:44:92:fb:2d:4d:f4:9d:
07:97:b7:cf:1e:e0:cc:56:56:f2:c7:79:3c:21:3f:9a:0b:6e:
96:9a:e8:00:7e:15:93:80:09:e8:b3:3c:2a:43:bd:0e:1f:ca:
20:f8:ee:98:4c:99:82:2d:e8:bc:5a:c5:6f:23:d2:20:f0:6e:
29:46:f9:b9:7a:a9:72:d6:06:e5:49:77:5e:f5:05:73:f4:b8:
b7:03:d9:d1:5e:97:65:aa:a3:1d:e3:b8:9f:ef:55:6f:30:e7:
aa:f3:16:19:bb:37:fc:15:81:03:ee:c3:1f:06:13:cb:9b:47:
44:c8:93:30:69:2e:b5:60:86:22:79:95:a9:aa:d9:49:96:4c:
3e:64:de:04:cc:fd:99:a4:78:bc:63:df:2f:4e:8f:df:45:fd:
0c:a7:5a:3a:7b:5c:aa:f3:69:a3:8b:8f:e9:0b:24:82:f4:9e:
f6:38:7d:c0:fa:4b:5f:4b:fd:a8:12:06:aa:48:6e:27:c0:92:
91:5d:6d:66:af:0a:09:db:aa:0e:66:57:25:97:54:a6:2b:16:
ea:54:c4:42:69:53:42:f9:38:29:78:dc:8d:c4:c6:2d:76:b0:
31:28:d2:53:1a:a5:a8:62:12:b7:a4:10:3e:03:ed:74:1d:f4:
01:fc:8e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:27:07 2025 by rpki-client