Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/M_Ne64yUsvnXCkOWKwcjEFI4cJY.roa
File: M_Ne64yUsvnXCkOWKwcjEFI4cJY.roa (raw, json)
Hash identifier: iGsMbUcGGo7BhT0oBE/jghZc4jxnGwl7CEhzlo+QnuY=
Subject key identifier: 33:F3:5E:EB:8C:94:B2:F9:D7:0A:43:96:2B:07:23:10:52:38:70:96
Certificate issuer: /CN=a3464820dcc46769fd154c8cbae66b8bb38fea03
Certificate serial: 018CC3B710B047EA4C840BE8201FE7CEB7A2
Authority key identifier: A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/M_Ne64yUsvnXCkOWKwcjEFI4cJY.roa
Signing time: Mon 01 Jan 2024 06:30:03 +0000
ROA not before: Mon 01 Jan 2024 06:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16286
IP address blocks: 185.113.112.0/24 maxlen: 24
185.113.113.0/24 maxlen: 24
185.113.115.0/24 maxlen: 24
185.113.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:10:b0:47:ea:4c:84:0b:e8:20:1f:e7:ce:b7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3464820dcc46769fd154c8cbae66b8bb38fea03
Validity
Not Before: Jan 1 06:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33f35eeb8c94b2f9d70a43962b07231052387096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b8:0b:d6:c8:bb:2b:a7:ba:4a:ab:83:28:98:
52:9d:22:8f:93:91:93:9c:fa:79:c7:e1:72:71:30:
0c:3a:c7:4a:58:91:d7:64:ab:53:b1:e9:04:ed:a1:
5e:82:e1:c0:73:1e:2c:b7:d1:a1:bc:e4:55:f9:6c:
7a:c6:16:3c:7c:2c:6b:3b:27:8a:c3:b0:6a:1d:39:
76:e9:d5:c5:f5:49:ac:d0:cd:b7:74:bc:6d:66:a1:
d2:a4:22:fe:b9:bf:6c:9c:d6:87:c0:12:16:85:e7:
43:75:c0:1a:2c:b0:5c:a8:6b:05:69:81:2e:ee:60:
06:38:1e:14:c9:08:ab:6a:f7:c1:16:7f:ae:15:26:
4f:8e:70:85:4f:18:da:0a:9f:f3:23:69:db:f8:0d:
5d:3c:17:dc:1f:3f:5e:18:94:5c:92:c0:83:df:54:
fe:1f:2f:2a:0a:86:35:7d:4e:ea:c0:0b:ad:8f:3d:
d3:fc:b5:97:11:64:25:34:7a:6b:c1:50:38:59:48:
39:bc:78:a1:9d:af:ec:48:aa:d2:d9:cd:1a:f0:90:
41:65:22:ad:58:78:a9:64:7e:e2:a0:12:85:14:2e:
78:0b:d2:b7:da:d7:ce:7d:71:4a:06:71:a0:69:bb:
dc:70:c3:ca:9a:c6:04:20:7e:58:9a:0f:eb:0e:63:
c6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F3:5E:EB:8C:94:B2:F9:D7:0A:43:96:2B:07:23:10:52:38:70:96
X509v3 Authority Key Identifier:
keyid:A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/M_Ne64yUsvnXCkOWKwcjEFI4cJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.112.0/22
Signature Algorithm: sha256WithRSAEncryption
16:0d:ef:15:21:af:f2:a9:cd:a6:cf:23:26:ee:f6:04:e1:d0:
82:00:ca:f7:bc:c6:57:b2:54:1b:73:12:a1:c6:32:0d:46:20:
93:ba:8e:64:2a:67:3b:08:f3:11:66:42:aa:d4:9b:aa:52:0a:
94:1a:b9:f1:fa:53:e5:33:e5:67:04:b8:6e:bc:14:88:03:f4:
59:67:6e:72:5d:7d:b8:8d:ff:16:4c:4e:d4:25:cd:22:0d:3e:
c2:07:fc:e6:33:4f:af:c9:32:85:7a:89:6e:7c:d5:f1:b5:7d:
0b:d1:8f:23:48:e7:7e:f6:2f:72:bc:3a:9f:aa:e1:29:2b:8b:
7e:8e:94:34:5e:1d:9d:91:ba:ec:36:2e:37:3d:06:f1:79:5d:
45:52:78:af:6c:93:a1:d3:77:e4:a2:0b:40:f2:7a:9a:41:df:
36:54:06:fa:97:f2:d4:f9:b2:6c:9f:b6:ac:3a:de:d5:c5:6b:
0c:e8:88:21:57:c4:a9:21:37:67:6b:97:18:8e:e8:c5:2b:7c:
68:08:5c:4c:b5:6d:86:0d:2c:76:bd:60:6e:67:88:1b:73:1e:
7d:1f:da:c9:2d:04:2a:ae:22:4b:60:82:8c:6b:18:71:4b:71:
cc:73:d1:e9:69:c1:ba:e1:39:fc:b6:9e:70:5e:94:33:95:f5:
37:ae:8a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:26:48 2025 by rpki-client