Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/dSeBkksGz0fniTtq6Qkf78kt2V4.roa
File: dSeBkksGz0fniTtq6Qkf78kt2V4.roa (raw, json)
Hash identifier: f8rdeIlPstF4EbjjQg350U+PHH4y/nAxjDGA8KAWMbE=
Subject key identifier: 75:27:81:92:4B:06:CF:47:E7:89:3B:6A:E9:09:1F:EF:C9:2D:D9:5E
Certificate issuer: /CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Certificate serial: 018D68F274AE2D4158324A1BA6C90841997C
Authority key identifier: 5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/dSeBkksGz0fniTtq6Qkf78kt2V4.roa
Signing time: Fri 02 Feb 2024 08:32:16 +0000
ROA not before: Fri 02 Feb 2024 08:32:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204918
IP address blocks: 185.171.93.0/24 maxlen: 24
185.171.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:68:f2:74:ae:2d:41:58:32:4a:1b:a6:c9:08:41:99:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Validity
Not Before: Feb 2 08:32:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=752781924b06cf47e7893b6ae9091fefc92dd95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:c3:91:1e:7a:b2:71:38:5c:47:2a:ca:1e:
a4:b5:35:99:53:94:6e:3c:e7:ac:65:a9:e3:30:e1:
e4:09:c7:fc:c6:c3:7d:35:cd:40:aa:2a:fe:13:6b:
1f:6c:4d:2b:5c:7b:72:39:49:c6:dc:a0:1b:55:50:
d8:9c:db:9c:c2:c2:7d:34:a6:a0:b5:49:44:8c:04:
19:52:80:f3:2d:02:7b:bf:1b:d5:26:7b:55:3a:c7:
22:7e:15:64:6c:5e:d9:ab:4e:54:5c:84:c6:dc:ed:
0f:73:15:a0:c0:ed:02:1f:91:0a:7d:16:5c:11:86:
88:0b:98:ca:0d:ff:d5:d1:81:a1:a7:46:9e:70:39:
f3:03:27:a1:2d:46:19:7f:5b:da:2a:f8:39:3d:17:
bd:b6:90:a4:a0:97:d0:89:b0:9e:ae:05:15:ef:7d:
37:eb:41:31:5d:0f:f7:3d:27:52:aa:42:06:ba:4a:
52:de:73:35:a4:33:17:cd:b3:1d:33:84:9b:c1:65:
c6:56:b8:45:84:90:c6:73:f1:46:82:80:0e:fc:2c:
fd:83:29:38:b0:14:fa:c1:cb:c3:b3:22:7d:bc:55:
9b:f4:90:4c:a6:dc:28:f2:8d:a8:97:64:55:73:00:
75:63:2b:8c:02:7f:1f:4e:84:a1:2e:61:88:97:41:
ea:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:27:81:92:4B:06:CF:47:E7:89:3B:6A:E9:09:1F:EF:C9:2D:D9:5E
X509v3 Authority Key Identifier:
keyid:5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/dSeBkksGz0fniTtq6Qkf78kt2V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.93.0/24
185.171.95.0/24
Signature Algorithm: sha256WithRSAEncryption
65:7f:87:2a:4c:1c:64:64:4b:10:26:e2:ba:93:96:dd:a1:4d:
dd:c2:62:4f:78:bc:03:0e:9c:16:32:d4:a1:53:bb:be:54:ce:
1e:6f:4a:1f:59:3d:f5:74:90:26:dc:af:4f:2a:74:69:65:27:
4a:a9:3a:3e:60:5b:b7:3e:d8:33:8d:b9:95:4b:48:43:61:be:
47:d2:f7:45:39:f0:d3:2f:5b:be:25:21:cd:45:fd:14:33:3f:
ad:49:38:de:7a:65:6a:1f:68:60:0f:12:42:4f:bf:21:84:d0:
d2:9c:2e:8d:09:cc:7f:fb:d3:09:7b:e8:44:97:a2:b2:ea:68:
b3:cf:28:3a:f1:9a:66:8b:96:ab:cb:51:af:d2:01:4a:20:fd:
9b:06:de:d6:fe:0c:84:59:73:8d:ab:1e:31:e2:4f:d0:df:c5:
22:59:8c:42:e8:a2:8a:e2:14:c6:db:ae:05:f1:8b:2c:a6:1a:
73:ce:b3:e9:ee:ce:a4:e2:e9:65:98:79:c3:0f:4b:08:9d:1d:
f5:de:3b:14:10:2c:b9:63:74:2a:b9:9b:07:a6:d5:06:3e:75:
01:fe:c6:f7:73:e8:ad:a8:e6:53:3d:9d:8d:73:cc:04:99:4c:
81:de:e5:2c:07:1d:db:fb:fd:10:32:fa:31:36:ab:6e:17:c4:
f4:29:c1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:05 2025 by rpki-client