Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/U7YNHO07xInpCt_DXaRXHZH7Wsg.roa
File: U7YNHO07xInpCt_DXaRXHZH7Wsg.roa (raw, json)
Hash identifier: LrgRYxp2B44dbDK9hRzdU9gFuYVlnxGrZy1vhHg7VHQ=
Subject key identifier: 53:B6:0D:1C:ED:3B:C4:89:E9:0A:DF:C3:5D:A4:57:1D:91:FB:5A:C8
Certificate issuer: /CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Certificate serial: 018CC26D48EB7AFF3E650D507A2A300C305A
Authority key identifier: 1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/U7YNHO07xInpCt_DXaRXHZH7Wsg.roa
Signing time: Mon 01 Jan 2024 00:29:51 +0000
ROA not before: Mon 01 Jan 2024 00:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 85.236.136.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:48:eb:7a:ff:3e:65:0d:50:7a:2a:30:0c:30:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Validity
Not Before: Jan 1 00:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53b60d1ced3bc489e90adfc35da4571d91fb5ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bc:ea:95:61:56:49:1a:d6:b3:82:6e:a2:c3:
73:53:e2:af:3e:1d:ae:e8:39:8d:f2:b9:96:1c:13:
70:b8:ab:c1:ac:ca:3d:66:95:83:36:c0:19:12:cf:
fb:48:24:12:39:87:f2:d4:6c:ef:75:32:83:15:e5:
ba:fb:15:88:bf:ea:20:5d:f4:62:eb:78:9c:30:99:
63:1d:ce:0d:b6:05:94:3c:9e:50:3f:68:3d:86:61:
a3:90:7a:87:1a:87:b7:d8:fb:bb:e8:30:fe:7a:80:
52:41:98:2b:b4:40:56:5c:21:5a:1b:08:ab:da:be:
5a:93:6d:cf:dd:97:d8:6d:1f:22:e7:ee:62:33:aa:
8c:dd:63:68:14:bb:69:89:d0:73:46:d6:2c:61:19:
97:e4:e1:27:ba:32:5a:84:da:93:c5:73:8c:1a:6a:
88:c0:90:fd:fe:07:98:ad:de:48:1a:e0:52:e6:e6:
db:59:75:34:91:35:ad:db:03:ab:66:6e:90:45:61:
34:a1:89:ac:0a:0c:c7:2f:44:44:45:fe:47:5a:97:
d0:8a:c2:e5:6c:6a:9b:47:45:de:0d:95:f5:15:34:
ef:63:50:9f:0a:d8:1f:b8:da:ff:39:e8:bf:92:c3:
d5:73:4b:c3:a1:7a:25:34:dd:38:5f:a0:be:0b:2d:
c5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B6:0D:1C:ED:3B:C4:89:E9:0A:DF:C3:5D:A4:57:1D:91:FB:5A:C8
X509v3 Authority Key Identifier:
keyid:1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/U7YNHO07xInpCt_DXaRXHZH7Wsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.236.136.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:d6:5b:17:91:d8:d7:1c:3a:24:9b:da:c7:ed:d9:4c:cb:71:
12:17:7b:64:08:82:42:bb:54:a7:08:01:08:21:a8:e7:f4:b9:
46:db:5f:6d:d6:aa:bf:94:88:77:06:d4:1c:92:63:1b:e3:9e:
48:28:9a:f9:80:a5:aa:0f:6c:d9:94:ca:f7:84:86:98:d1:d2:
85:5a:fb:1a:43:aa:27:e8:4d:05:cf:91:3a:03:d0:63:13:91:
be:a5:53:69:67:d5:e1:06:5d:80:49:2b:b3:31:9e:29:a0:95:
ea:96:65:6e:72:fe:86:e4:9b:da:a0:cf:b2:0e:7b:ae:09:67:
3e:fb:e7:f7:e3:28:e8:f0:ba:0d:5d:d1:ed:29:1b:fd:fe:00:
1e:29:56:5b:c3:97:24:9f:77:1c:e4:4d:d8:15:d0:6e:77:13:
c3:a4:ac:05:47:01:6c:ae:dd:ca:81:99:5f:4b:8a:2e:5d:99:
60:8a:bb:10:31:6e:bb:38:4e:36:3f:82:d0:24:e4:26:2d:41:
26:8d:e9:aa:df:de:6e:ed:aa:62:e7:73:ae:14:6d:c4:40:a2:
22:8d:c2:ed:4d:8d:00:a0:94:84:6a:ac:2c:9e:af:41:f1:75:
45:b1:2c:ad:ba:8c:6e:57:12:aa:5b:7d:c6:ac:6f:35:2f:d6:
c9:d3:88:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:50:11 2025 by rpki-client