Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/PxcV4U8rKtOJNGoya40pVxZ4oA8.roa
File: PxcV4U8rKtOJNGoya40pVxZ4oA8.roa (raw, json)
Hash identifier: oeLKbySkiXdYcJ4tbNPrPP/Kj0zMQ5FhMfz7ufnHPRU=
Subject key identifier: 3F:17:15:E1:4F:2B:2A:D3:89:34:6A:32:6B:8D:29:57:16:78:A0:0F
Certificate issuer: /CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
Certificate serial: 018D30710DDBB6C50B706C2A4EA94E3C92E2
Authority key identifier: FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/PxcV4U8rKtOJNGoya40pVxZ4oA8.roa
Signing time: Mon 22 Jan 2024 09:12:11 +0000
ROA not before: Mon 22 Jan 2024 09:12:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13030
IP address blocks: 185.167.79.0/24 maxlen: 24
2a13:182::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:71:0d:db:b6:c5:0b:70:6c:2a:4e:a9:4e:3c:92:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
Validity
Not Before: Jan 22 09:12:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f1715e14f2b2ad389346a326b8d29571678a00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:57:85:08:91:d3:67:3b:24:f9:c4:b1:15:
40:13:b4:62:50:70:ea:92:21:be:3d:3d:1b:9c:06:
48:15:74:fc:62:fc:6b:4b:b3:f0:8e:b8:aa:ea:ef:
c2:54:21:85:08:f0:d3:3d:0a:5e:ea:6d:49:f4:f3:
a5:3e:bb:a1:b7:ab:02:4a:d8:7b:28:cf:d2:f0:90:
6e:45:9b:21:dd:34:25:f6:ef:3d:56:d2:5a:85:f4:
74:75:7b:94:bb:e1:98:6e:27:a3:57:c1:d9:fb:61:
14:17:0d:8c:5d:5b:4f:21:e0:92:5a:17:b9:f8:59:
da:dc:1e:44:7a:e8:34:5f:ea:e7:b2:50:58:38:83:
1b:cf:be:d3:81:29:5b:ce:af:ef:40:0d:68:d9:04:
a4:88:05:9c:1e:65:8b:b0:09:88:4d:39:14:63:cf:
bd:92:5f:fc:e9:c6:74:3f:a3:0a:8c:d8:f7:a0:57:
8f:b2:fa:39:70:da:56:c6:d7:5a:4a:39:42:d6:3f:
5a:9a:78:d3:3c:fd:14:f5:ae:27:6c:89:b4:a1:95:
84:17:af:65:8d:03:41:44:9e:12:cd:f2:26:ec:36:
e7:02:fd:5d:40:0d:d6:35:93:e4:ce:b0:c6:56:d3:
4d:2c:39:4a:86:c6:52:39:c6:09:f5:63:6c:82:f6:
d4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:17:15:E1:4F:2B:2A:D3:89:34:6A:32:6B:8D:29:57:16:78:A0:0F
X509v3 Authority Key Identifier:
keyid:FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/PxcV4U8rKtOJNGoya40pVxZ4oA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.79.0/24
IPv6:
2a13:182::/32
Signature Algorithm: sha256WithRSAEncryption
30:c5:99:b8:57:8e:c3:ba:a9:de:fa:4a:63:e4:19:5f:55:f1:
8d:54:98:00:b0:8d:bd:61:38:5f:19:c2:82:57:a2:46:ce:09:
02:ef:e1:4a:77:53:82:89:c0:9a:c7:07:c5:e3:58:c8:c8:0c:
8e:32:3d:58:67:93:af:c7:30:5f:eb:e2:20:cb:0d:dc:7a:e2:
76:64:80:91:bd:0f:34:88:a7:dc:1a:a9:d2:b6:de:7d:50:cf:
73:25:2f:0c:dc:c3:dd:c6:f7:d6:48:f9:d0:0c:b5:b9:9f:48:
da:7e:00:b5:7c:0c:53:55:9a:8f:b1:0d:d6:f4:bf:7f:1d:84:
75:41:e9:af:f3:64:da:da:89:72:68:7d:ed:c4:59:ca:35:77:
18:6b:5d:53:4e:00:30:c5:5c:1e:f8:e3:4d:89:24:fe:56:dd:
54:06:55:2f:a7:7d:a7:73:f2:d2:73:02:4a:1c:a4:a9:bd:9c:
9c:cb:c3:02:f9:59:94:04:90:16:ed:71:f8:8b:49:e1:c9:9b:
31:66:cf:02:96:90:2e:46:bd:b5:78:82:2c:e9:21:b2:1a:6a:
db:45:f1:8b:5b:72:9e:65:e9:96:83:bc:33:85:80:f4:d7:da:
9b:2a:a6:2d:c7:a6:69:7d:5a:4f:22:2b:68:61:df:f0:e8:dc:
e2:6e:42:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:21:53 2025 by rpki-client