Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/n4sL75Q8ebE802vKrefyRQzyE6Y.roa
File: n4sL75Q8ebE802vKrefyRQzyE6Y.roa (raw, json)
Hash identifier: sO709ZqjzzI+3PwAtjazE3EKOVcM/nM0MYWIat5eOPA=
Subject key identifier: 9F:8B:0B:EF:94:3C:79:B1:3C:D3:6B:CA:AD:E7:F2:45:0C:F2:13:A6
Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial: 0192C9A8ADB4DF9A33A8886B025148D4C3F3
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/n4sL75Q8ebE802vKrefyRQzyE6Y.roa
Signing time: Sat 26 Oct 2024 16:28:47 +0000
ROA not before: Sat 26 Oct 2024 16:28:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 185.200.12.0/22 maxlen: 22
185.200.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 16:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c9:a8:ad:b4:df:9a:33:a8:88:6b:02:51:48:d4:c3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
Validity
Not Before: Oct 26 16:28:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f8b0bef943c79b13cd36bcaade7f2450cf213a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:0e:a7:90:3b:59:99:70:59:2b:dd:16:6d:
bf:cc:28:cb:38:6b:3a:d6:91:3d:90:ed:aa:3f:ee:
84:18:ef:3e:b5:b9:34:9b:22:28:ff:21:69:fa:46:
02:87:86:3a:04:0b:42:1e:28:43:0c:2a:8e:f5:c9:
ec:4c:e4:88:61:0b:cd:e2:d0:2f:ee:c0:c0:6f:be:
55:1b:ca:42:2f:72:d3:fc:40:9a:67:04:3f:07:9e:
a6:e4:32:64:7e:4d:1e:8d:39:37:fc:95:9a:3f:8e:
7b:5c:07:77:3e:71:cf:5d:9d:75:b2:ff:ba:ed:98:
d2:ff:2b:ef:47:99:0f:77:87:2e:3f:31:05:fa:fd:
a3:19:31:54:29:cf:31:86:b0:27:54:92:f2:cf:6d:
4b:88:05:37:6d:43:39:79:97:43:d6:71:b6:fe:92:
b4:7b:69:23:5b:19:d6:c2:15:58:20:70:d8:8a:fb:
6f:2e:48:72:cd:a2:79:7b:b9:77:c0:a3:3e:b9:5f:
e5:b0:74:e5:e6:59:e3:e2:e1:ff:9b:01:3b:db:cd:
47:f4:94:0e:e8:78:2f:eb:01:68:3c:9e:b3:3d:1c:
ba:60:2d:67:35:f2:ce:69:48:8c:38:51:61:5f:ad:
43:b9:28:7b:a4:8e:6b:a1:54:7b:5a:71:af:58:e6:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8B:0B:EF:94:3C:79:B1:3C:D3:6B:CA:AD:E7:F2:45:0C:F2:13:A6
X509v3 Authority Key Identifier:
keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/n4sL75Q8ebE802vKrefyRQzyE6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.12.0/22
Signature Algorithm: sha256WithRSAEncryption
95:e4:71:7b:6a:a9:0f:54:3e:dc:2b:72:c3:27:e5:8b:e1:97:
b3:f0:4e:95:ad:40:cf:53:fc:6d:44:8c:bf:6e:3e:54:cb:6c:
d3:5a:5a:6c:16:c0:b4:2c:7c:fe:f9:e7:82:12:9a:db:4c:f7:
49:6c:d4:46:14:3e:b1:56:e9:58:33:29:49:46:c3:a8:e2:78:
c9:50:b4:4c:68:3f:d8:2d:0e:50:c6:0c:48:a9:20:e2:30:03:
46:9b:71:9b:86:18:f3:22:7c:d6:20:b3:07:8e:a5:f9:53:f3:
d2:85:77:cd:0c:98:5c:23:a4:17:bd:38:3b:d1:a0:c8:83:c6:
32:61:03:b1:50:dd:48:c5:ac:d4:db:23:9c:d6:70:0b:27:da:
81:58:f9:f8:cb:1c:ba:57:62:43:4e:fb:50:d1:2a:ec:ad:8a:
7b:32:58:ab:3a:b6:40:43:1d:d9:a5:cd:e9:53:22:cc:0e:f3:
5e:23:43:72:87:c4:4b:59:da:3d:ce:46:67:97:c6:32:cd:f9:
20:51:67:d1:35:e9:04:8d:56:02:02:64:f9:16:84:d6:5d:18:
15:91:bb:0c:0f:e1:1a:6f:e4:54:6c:6d:bc:62:88:d1:90:07:
a7:c2:f8:4a:cc:87:a9:78:59:95:3d:96:d9:ba:24:b5:63:1a:
83:98:67:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:45:38 2025 by rpki-client