Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/IvowB9AV5SRH01KVDKYN1LU9s3Q.roa
File: IvowB9AV5SRH01KVDKYN1LU9s3Q.roa (raw, json)
Hash identifier: qVClRADd1jFZWevocjxmfHe/TaVIN09LebOCd5aJXb4=
Subject key identifier: 22:FA:30:07:D0:15:E5:24:47:D3:52:95:0C:A6:0D:D4:B5:3D:B3:74
Certificate issuer: /CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Certificate serial: 01941F8C5CDA5DABE06FA09C8E72EA115A5B
Authority key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/IvowB9AV5SRH01KVDKYN1LU9s3Q.roa
Signing time: Wed 01 Jan 2025 01:48:00 +0000
ROA not before: Wed 01 Jan 2025 01:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.12.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 12:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5c:da:5d:ab:e0:6f:a0:9c:8e:72:ea:11:5a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Validity
Not Before: Jan 1 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22fa3007d015e52447d352950ca60dd4b53db374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:f6:56:ec:4a:57:59:6c:59:0e:06:5c:7e:
84:92:f3:b8:14:e4:29:2f:96:a9:f8:e5:53:b8:e6:
d2:79:7d:e7:04:f8:ee:0d:67:12:af:c4:1d:05:a7:
0a:9d:87:74:69:e0:1d:68:6e:d9:f6:9a:1f:1c:a5:
24:0f:fd:52:2b:e5:fe:5c:e0:49:e3:40:a2:0c:58:
99:28:ac:2c:b3:4c:05:08:89:94:ae:ce:13:e6:56:
41:42:27:60:ee:3a:71:da:88:4b:07:c2:e3:10:b9:
08:c5:7b:16:83:05:a4:02:78:dd:ca:be:8d:ef:97:
91:7e:a5:0c:4a:fc:2a:65:41:24:ab:2f:9b:f4:7e:
a1:38:ac:66:d5:cc:01:38:1d:57:72:18:e0:66:fa:
3c:96:39:47:b6:c5:ce:15:28:c2:bd:e8:de:41:07:
e4:97:87:2e:06:77:38:ee:1f:23:f3:33:f1:41:28:
97:f8:47:26:82:d6:6d:13:76:c9:43:be:19:c1:82:
bc:87:66:8b:89:f8:93:97:13:65:f0:4a:f3:7d:35:
97:ee:b8:39:30:b1:9b:37:f8:fd:42:8d:e3:a1:68:
b5:f2:a1:0f:62:97:13:e9:46:8d:cf:e4:1c:55:72:
21:57:ec:ff:8a:1e:20:12:b8:e0:9c:46:a9:a2:82:
2e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FA:30:07:D0:15:E5:24:47:D3:52:95:0C:A6:0D:D4:B5:3D:B3:74
X509v3 Authority Key Identifier:
keyid:3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/IvowB9AV5SRH01KVDKYN1LU9s3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.141.0/24
Signature Algorithm: sha256WithRSAEncryption
80:96:c9:7c:9f:93:ff:72:07:30:21:cc:7f:20:63:60:33:a0:
2d:d9:bd:7a:f1:bf:dc:21:a5:ad:9f:28:d1:a9:93:57:e7:e6:
2d:50:d0:dd:23:2c:ad:0d:01:ad:57:e3:82:10:6a:1d:4f:05:
43:09:f8:8d:0f:9b:51:dd:b2:22:44:90:7b:49:7c:dc:fc:bb:
b5:5e:da:9b:11:b5:21:ad:56:1a:66:cf:21:9a:c8:a0:d7:41:
dd:2a:e6:91:11:5e:d9:20:9b:7e:e7:e1:1f:c6:a4:b5:74:9e:
7a:f0:30:36:ef:9b:73:a3:8f:d4:76:ab:e2:ab:95:fa:20:e9:
d5:d6:70:79:9a:6d:b9:c0:5f:9e:7e:ae:39:1c:ab:6a:d3:4d:
df:80:62:a0:87:db:d2:be:60:dc:8b:68:fe:57:46:e9:32:9b:
05:a7:2a:16:ba:70:f3:fb:6d:2f:0c:1e:17:3e:63:7c:44:02:
3d:09:45:18:13:80:29:2d:31:ac:02:12:78:f9:18:36:91:83:
fb:93:04:0d:f2:f6:62:0f:16:d6:75:eb:be:0f:b7:4b:69:78:
68:f9:aa:63:bb:88:4a:48:fa:57:db:1b:a8:0a:c6:91:67:ee:
d3:f8:0c:a3:b0:46:1d:04:45:10:2b:5b:55:12:8f:05:d5:9e:
3c:c3:27:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:02:43 2025 by rpki-client