Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/1-V6WWW7k6Dz20LWBlM-CaiXwBp0.roa
File: 1-V6WWW7k6Dz20LWBlM-CaiXwBp0.roa (raw, json)
Hash identifier: cp7KDpUruNDgDN0vBfheKknW+tT25MZ+hTXleZfMToE=
Subject key identifier: F9:5E:96:59:6E:E4:E8:3C:F6:D0:B5:81:94:CF:82:6A:25:F0:06:9D
Certificate issuer: /CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
Certificate serial: 0192BAEE103A61AE5928126E5738A5B13A83
Authority key identifier: 3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/1-V6WWW7k6Dz20LWBlM-CaiXwBp0.roa
Signing time: Wed 23 Oct 2024 19:50:16 +0000
ROA not before: Wed 23 Oct 2024 19:50:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214087
IP address blocks: 185.184.30.0/24 maxlen: 24
185.184.31.0/24 maxlen: 24
2a10:ac82::/32 maxlen: 32
2a10:ac83::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ba:ee:10:3a:61:ae:59:28:12:6e:57:38:a5:b1:3a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
Validity
Not Before: Oct 23 19:50:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f95e96596ee4e83cf6d0b58194cf826a25f0069d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:f4:b4:ca:68:19:be:0a:d6:b7:c6:b5:28:
03:86:2b:d6:ac:46:60:6a:4f:3f:e9:b4:98:20:71:
be:3a:43:9a:9b:12:02:ae:d5:cd:9c:11:3b:9b:dd:
b7:02:18:37:eb:ab:3a:ae:de:18:52:b6:d0:e6:33:
c2:d2:9b:89:e4:4d:39:bf:5f:2a:2b:62:8c:44:44:
57:de:ba:78:36:af:3b:a7:fa:d4:8a:77:49:ca:29:
65:ec:c4:44:f0:82:d7:2d:d8:d0:0b:93:68:16:c2:
4a:a0:46:7a:cc:f4:ca:0b:ba:2f:50:57:6b:c7:a5:
64:7f:96:03:81:74:44:78:8c:32:88:fa:4e:c8:d1:
57:e8:88:c4:22:9a:c3:e2:f4:1a:41:dc:c0:aa:25:
08:68:3c:35:60:ed:56:cd:2b:f9:27:09:27:94:f1:
13:4d:17:5f:5c:f6:74:22:be:ee:52:b1:6e:24:15:
df:87:c8:45:84:7d:db:b9:6a:22:cb:4c:fd:0d:2d:
29:59:e4:90:a1:21:26:72:5b:2e:1b:55:5d:fa:0c:
7b:e1:1c:bb:88:bd:f8:4e:72:f8:07:a8:b4:f0:56:
cf:5d:f5:d2:f6:1f:8b:f6:da:e2:0e:4b:70:43:9d:
b7:16:c8:21:14:ea:85:b5:83:97:3a:e8:54:a8:8e:
3a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5E:96:59:6E:E4:E8:3C:F6:D0:B5:81:94:CF:82:6A:25:F0:06:9D
X509v3 Authority Key Identifier:
keyid:3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/1-V6WWW7k6Dz20LWBlM-CaiXwBp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.30.0/23
IPv6:
2a10:ac82::/31
Signature Algorithm: sha256WithRSAEncryption
06:ae:59:a9:9d:bb:5b:bf:74:87:0b:d4:29:25:48:3a:d0:83:
bf:de:27:d1:56:f8:58:9b:c6:f6:ad:e5:20:dc:1f:2c:19:9f:
0e:57:2b:24:9d:b4:a7:0e:7e:1c:b0:ac:26:54:f3:2b:61:ac:
31:1d:51:29:ac:b0:5d:93:67:cd:57:0f:e5:8f:77:e6:e6:e4:
37:e8:1e:02:83:a2:ec:e3:80:b5:26:ee:6d:ba:18:fd:8c:c6:
cc:73:b7:66:3f:d0:ea:5e:b1:03:01:c9:a0:6e:2c:b4:dc:13:
0f:81:86:47:c5:31:f7:35:93:5b:c0:e0:de:57:39:db:96:a5:
79:8c:5e:78:62:89:5b:4a:fb:a8:5b:f8:ce:21:4a:ae:e8:78:
d6:98:09:50:c2:33:e4:3d:e3:01:c0:a2:08:a5:d5:a9:54:02:
4a:6c:1b:dc:c5:fd:21:b7:a1:76:f7:8c:d5:7d:48:51:87:5e:
6e:2f:12:75:df:7d:f3:de:fb:b3:3e:bf:ed:85:5e:48:92:51:
4e:c6:08:fd:52:e7:1a:69:34:5f:2a:35:e9:d4:89:52:4e:b2:
35:b3:ef:67:35:ae:6b:37:4f:c9:68:fc:81:66:e2:0d:1e:5e:
d2:38:fa:ec:13:f7:23:b4:1e:f2:a8:10:05:f3:3e:1f:a1:de:
9d:39:d3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:53:51 2025 by rpki-client