Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/Mb462fse89Fx-KNGg0W-iqwDTOI.roa
File: Mb462fse89Fx-KNGg0W-iqwDTOI.roa (raw, json)
Hash identifier: JNFSdDGsFjBEC2feoKT8sTDSPorcRZQ+qLS6azBSSx0=
Subject key identifier: 31:BE:3A:D9:FB:1E:F3:D1:71:F8:A3:46:83:45:BE:8A:AC:03:4C:E2
Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial: 0194DC212374BF3B856E12D55E6D71A94C82
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/Mb462fse89Fx-KNGg0W-iqwDTOI.roa
Signing time: Thu 06 Feb 2025 16:39:06 +0000
ROA not before: Thu 06 Feb 2025 16:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 194.179.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 14:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:21:23:74:bf:3b:85:6e:12:d5:5e:6d:71:a9:4c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Validity
Not Before: Feb 6 16:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31be3ad9fb1ef3d171f8a3468345be8aac034ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b6:2d:b2:25:62:c6:20:c4:62:7d:42:46:a5:
e0:03:6b:ec:a5:4f:4c:63:4f:c9:40:e5:30:80:aa:
43:94:24:9c:d3:15:67:1c:03:94:1d:71:e5:12:2c:
6d:96:d9:5f:b3:1f:c3:20:a9:f6:8c:9d:ee:53:cc:
86:6d:fc:a8:89:54:03:2b:a7:50:7a:de:c6:1d:a7:
2f:90:ad:de:11:3a:ac:c0:44:64:9a:a4:88:d2:1b:
71:6f:e5:6b:33:c3:c9:c9:36:ad:88:1b:39:d2:e1:
f2:cc:40:bf:fc:79:57:68:eb:b0:b4:44:6a:81:ed:
9a:da:ad:68:97:9b:87:bd:ca:06:35:27:d8:65:10:
5c:bd:67:62:d2:b0:8a:eb:e4:b1:28:b6:e0:2e:f2:
be:3d:8f:5f:f9:e4:a6:90:53:65:62:b0:03:1b:7e:
43:18:0a:93:c8:94:2e:02:e0:42:bc:82:a2:9a:a2:
9a:a1:2a:85:68:c3:8d:e1:61:85:cc:ee:0b:9b:db:
f8:65:5b:12:58:05:c2:c5:04:7d:e7:c1:ac:03:0f:
85:fc:33:1e:bd:47:4e:9d:55:3e:31:4e:1c:4c:b7:
03:5f:92:31:8d:fc:73:7b:62:88:ea:bd:48:90:13:
f4:ec:36:66:9e:7f:34:37:db:0a:81:ac:72:09:c9:
65:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BE:3A:D9:FB:1E:F3:D1:71:F8:A3:46:83:45:BE:8A:AC:03:4C:E2
X509v3 Authority Key Identifier:
keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/Mb462fse89Fx-KNGg0W-iqwDTOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.179.192.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:2b:0d:2d:15:4a:22:5c:83:a1:03:41:81:9d:0b:bf:98:cb:
c7:ca:88:8d:a9:49:20:4d:54:58:21:66:6f:4b:ac:8d:2d:a6:
70:95:5a:76:4c:cd:05:c4:da:01:22:3c:44:89:c6:0e:c1:8c:
9c:9d:de:86:8a:01:c6:55:24:f8:76:9d:26:6f:90:d2:a6:73:
02:a5:b6:49:85:49:e9:fa:c1:1a:08:e3:5a:7e:20:43:a0:ba:
d8:24:a4:1e:fa:9d:95:e6:a6:fc:49:dc:24:0f:cf:3b:12:92:
e1:e8:a2:04:e6:53:36:a4:39:94:0a:2f:2a:0e:40:ff:d0:98:
53:a7:90:f6:5c:b9:9a:e5:60:4d:f5:97:ae:3a:93:a7:82:56:
25:22:31:b4:cb:6f:86:58:d3:36:38:d3:08:2a:d5:4c:e4:9c:
4b:17:9b:3e:a4:af:df:61:4f:62:c6:1c:9c:5f:4f:d9:63:84:
5f:29:b2:8e:5f:15:99:9d:06:71:d6:b3:6b:5c:7d:18:0f:67:
a2:97:24:e9:ae:68:55:27:f9:e8:ac:30:b9:36:29:20:63:df:
86:9e:c8:1e:c7:7e:15:37:f8:06:0b:3a:5a:d4:26:4c:57:dc:
d4:fd:82:5b:fe:dd:54:64:25:a8:5f:76:cd:4f:33:20:80:c0:
d6:4b:59:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:10 2025 by rpki-client