Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/0y0fD0TrXbklT_tStK_6qgJuY70.roa
File: 0y0fD0TrXbklT_tStK_6qgJuY70.roa (raw, json)
Hash identifier: c3wJcFUB8eWgi7qCGpue7aDRi1+Ie3MPUUmgtDW3g90=
Subject key identifier: D3:2D:1F:0F:44:EB:5D:B9:25:4F:FB:52:B4:AF:FA:AA:02:6E:63:BD
Certificate issuer: /CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Certificate serial: 0193B2DEBE7B2CA870DACFBE3A99C721BA87
Authority key identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/0y0fD0TrXbklT_tStK_6qgJuY70.roa
Signing time: Tue 10 Dec 2024 23:19:22 +0000
ROA not before: Tue 10 Dec 2024 23:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49770
IP address blocks: 185.186.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 13:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b2:de:be:7b:2c:a8:70:da:cf:be:3a:99:c7:21:ba:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Validity
Not Before: Dec 10 23:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d32d1f0f44eb5db9254ffb52b4affaaa026e63bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:24:54:b0:4a:d9:72:d8:bc:27:0a:12:fe:6f:
4a:73:77:0c:26:9a:c0:86:ce:f3:b1:11:d1:da:a4:
42:19:8e:d5:54:55:e0:0c:87:0a:ab:0d:eb:42:9c:
ed:59:71:93:cc:ae:e4:05:86:fd:ba:e1:d4:4c:dd:
df:d4:e9:42:60:74:11:7e:f6:a4:e8:53:02:28:93:
20:28:85:f8:4d:3d:ef:eb:c2:6d:58:aa:14:4d:66:
b5:fa:e9:92:d2:a1:39:4e:62:ae:1f:77:21:7a:88:
eb:3d:b5:3d:bc:e8:a2:d5:ec:f6:af:bb:c8:06:af:
7f:5e:b8:88:68:e6:3f:73:b2:5e:be:b8:50:66:3b:
7b:4b:9f:19:3b:95:52:c9:10:8c:53:6b:54:22:01:
b6:a5:10:79:70:6a:a8:96:c1:4e:b3:58:b8:ea:0e:
54:9f:0a:f8:12:34:05:84:a9:f4:3c:83:9f:ae:17:
a4:3d:80:51:d7:d6:24:ee:b3:24:b0:5e:d4:6f:c7:
fb:1b:c1:e2:85:23:05:f4:4b:bc:a4:28:55:94:10:
04:5d:0e:ef:0d:cd:fc:33:f1:50:35:eb:b8:f5:a1:
df:85:cc:21:2c:26:6a:06:70:16:81:1c:a2:71:c1:
5a:58:3d:eb:ce:a5:55:37:89:23:13:2c:72:ac:45:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2D:1F:0F:44:EB:5D:B9:25:4F:FB:52:B4:AF:FA:AA:02:6E:63:BD
X509v3 Authority Key Identifier:
keyid:8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/0y0fD0TrXbklT_tStK_6qgJuY70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.78.0/24
Signature Algorithm: sha256WithRSAEncryption
41:cb:94:9f:d5:f4:53:3c:da:9c:e6:06:18:47:63:65:b5:57:
1f:46:e5:b8:e4:a8:a9:7f:02:9c:b2:34:ea:0a:c7:56:f3:d6:
e2:14:0e:82:19:5c:2d:53:1b:ba:ef:85:cd:76:99:ed:a1:e1:
ad:d2:3f:de:4a:7e:c3:05:33:74:7e:95:aa:3f:59:78:fd:74:
b6:78:4d:10:2e:2a:99:73:6b:30:b2:18:a0:a4:75:b3:30:0e:
f7:87:20:9c:5a:48:23:a2:ea:a7:e9:d6:ad:5a:8f:ea:ea:f3:
b5:05:b7:f5:b7:c3:1a:5d:f8:69:80:56:8e:6e:7e:f3:14:a8:
32:93:20:87:f6:32:43:c8:f8:d1:a0:5a:bb:f8:c9:a3:20:df:
9d:52:3b:fa:f8:9c:34:ee:fe:b1:de:c6:cb:f7:a5:40:75:73:
e2:49:6d:56:17:22:8d:84:b1:eb:e9:18:96:40:54:92:72:3e:
2d:c3:3b:a5:ff:1f:ca:18:9a:cc:5c:ac:d3:0d:b4:1b:f8:e2:
4f:56:c0:7e:58:93:fb:50:05:32:c1:ea:96:20:42:ae:0d:6d:
10:4c:29:5b:27:39:de:d3:81:60:da:ea:5d:d9:df:8c:22:77:
2c:78:4e:0e:4f:37:0e:07:e5:5f:e1:ed:40:7e:a4:ed:73:17:
dc:fe:15:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:51:34 2025 by rpki-client