Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/W7sY2O89jT41F7N0OhBFWpuDF9k.roa
File: W7sY2O89jT41F7N0OhBFWpuDF9k.roa (raw, json)
Hash identifier: aXPkUdPTyxCKQnlUmuPz+3ses5rdgi7skn/Pb4P7VRk=
Subject key identifier: 5B:BB:18:D8:EF:3D:8D:3E:35:17:B3:74:3A:10:45:5A:9B:83:17:D9
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 018CC94E54860D79AE996584BFD7FE559D04
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/W7sY2O89jT41F7N0OhBFWpuDF9k.roa
Signing time: Tue 02 Jan 2024 08:33:23 +0000
ROA not before: Tue 02 Jan 2024 08:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203754
IP address blocks: 185.124.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:54:86:0d:79:ae:99:65:84:bf:d7:fe:55:9d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Jan 2 08:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bbb18d8ef3d8d3e3517b3743a10455a9b8317d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:6a:8d:75:10:ba:87:eb:d8:f2:41:2e:a4:
51:0c:58:83:65:f2:43:6e:80:ea:f2:28:9e:62:87:
f0:50:c5:7e:19:90:80:c7:68:66:5e:2e:7f:44:eb:
44:0b:a1:51:cd:8b:ce:ef:1c:58:d7:0a:3d:3f:81:
86:9b:3b:bd:1c:a1:a7:40:91:09:32:8d:7e:6f:82:
74:72:70:ac:b3:c2:ba:c7:15:90:01:47:b3:2a:2e:
93:c3:06:44:76:d1:16:4a:bc:91:30:15:4b:04:7b:
f7:4d:e4:35:f5:33:9d:1f:0b:69:b0:d3:22:50:54:
f1:79:88:37:a5:bb:5b:80:5f:0e:57:13:5c:fc:69:
bb:3d:a7:83:3b:d7:b1:4c:3f:5c:b3:0a:01:68:f2:
b0:77:a4:54:1c:cb:3e:4e:e0:32:ec:89:f3:f5:2c:
9c:27:96:2b:22:c4:a8:16:0f:c1:1b:06:b7:c8:f0:
fc:09:ba:6f:3c:1b:58:a4:fd:05:a7:6a:81:1d:4d:
01:52:d8:7f:06:b7:46:75:01:27:ce:7f:a3:8e:5c:
29:e0:4c:73:12:ca:18:3f:d1:ad:2d:1c:de:7a:59:
1e:c8:ce:b7:96:58:ec:12:8b:61:03:3c:d6:29:bc:
bd:ff:a0:5b:35:77:e1:9a:29:62:aa:f9:81:64:a3:
f2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BB:18:D8:EF:3D:8D:3E:35:17:B3:74:3A:10:45:5A:9B:83:17:D9
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/W7sY2O89jT41F7N0OhBFWpuDF9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.204.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:20:c5:05:fe:94:f9:2f:82:4a:e2:c7:2f:d9:be:00:5a:7d:
ef:12:30:5a:0d:4a:24:30:6b:80:1b:85:be:8a:ed:0f:51:e6:
46:02:63:50:01:78:58:2d:3f:02:69:e6:b9:45:6d:af:46:f7:
1c:75:35:2f:91:11:73:52:b1:d4:12:ec:d1:e0:61:b0:36:95:
ac:7c:5a:88:9c:b9:b1:c6:57:b5:3d:7b:61:86:87:28:48:de:
8c:5e:55:72:07:12:1f:5b:6b:60:d3:1f:2f:df:a1:76:ce:ee:
68:dc:83:d1:17:ea:f5:aa:59:aa:1f:f7:0e:bf:1c:67:9e:46:
75:32:ad:1b:13:50:59:8f:7a:5f:7e:a5:13:f5:34:48:83:98:
f1:5e:1b:47:c4:20:23:cd:9d:65:66:ef:6a:99:8c:d2:96:a5:
63:e3:61:32:c8:8c:f4:bb:a5:8d:95:74:96:50:87:83:67:9c:
3e:f2:c4:d0:a9:5a:92:e0:fc:7b:55:ca:81:c6:a8:5e:36:c7:
26:f0:a2:4d:65:d8:b6:7d:71:9c:ff:dd:50:13:4a:2c:85:81:
8d:cb:55:35:00:b5:1d:95:01:43:02:8b:91:4e:e9:b0:9a:5c:
78:3b:c7:28:b6:9e:1d:a0:ba:10:3a:59:22:3c:68:fe:5c:3f:
6d:5c:e7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:05 2025 by rpki-client