Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/1Iq7ArAbqFXmT5LCupw2cLc9HkQ.roa
File: 1Iq7ArAbqFXmT5LCupw2cLc9HkQ.roa (raw, json)
Hash identifier: UBqqDjL0br0FETY2JUZxP4ik15xaPluvx8MDgPjqPko=
Subject key identifier: D4:8A:BB:02:B0:1B:A8:55:E6:4F:92:C2:BA:9C:36:70:B7:3D:1E:44
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 018CCA2A49A26F8933C125834A9E2C19021A
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/1Iq7ArAbqFXmT5LCupw2cLc9HkQ.roa
Signing time: Tue 02 Jan 2024 12:33:38 +0000
ROA not before: Tue 02 Jan 2024 12:33:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206398
IP address blocks: 185.178.187.0/24 maxlen: 24
2a0a:6680:a000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:49:a2:6f:89:33:c1:25:83:4a:9e:2c:19:02:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Jan 2 12:33:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d48abb02b01ba855e64f92c2ba9c3670b73d1e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ed:27:1f:ae:23:14:63:f1:23:96:0e:3d:34:
16:e1:66:55:f3:f0:1d:26:17:a3:93:3a:0b:3c:d7:
c0:8b:4f:62:b8:c2:49:e9:40:c6:c6:27:34:7e:b5:
50:49:1e:a2:3c:7f:ef:25:34:c2:2e:d0:bd:65:2e:
78:fa:51:29:46:6a:36:4b:c2:a4:73:3e:7a:08:41:
16:96:fd:c2:6c:12:71:c5:3a:af:51:d8:19:20:fd:
5e:40:ef:d7:6f:aa:27:46:7a:c8:b8:19:98:ff:b0:
d8:34:7b:d9:df:61:ef:76:65:dd:86:1f:59:53:5f:
41:9f:cc:26:0e:ee:85:cb:2b:2c:76:7d:38:d8:12:
70:c6:7f:f2:60:32:1d:ea:61:74:87:40:e0:d1:17:
d9:92:a7:4e:48:ac:0d:e8:68:5c:9b:1a:89:8c:64:
9f:85:ad:06:3c:f7:55:22:69:9a:6b:90:3d:a9:c7:
b3:1a:a5:a1:24:66:15:4e:81:97:93:e4:74:c7:5d:
24:e6:c9:b0:56:a1:d9:a9:1f:36:0b:97:8f:b6:b3:
31:e6:3c:53:a8:bd:5d:07:91:33:bc:17:51:ff:42:
70:6f:73:ae:f1:49:d9:aa:a8:68:dd:e6:ca:c4:57:
58:ab:d8:1f:11:28:04:9a:3e:f1:da:63:44:a0:dc:
74:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8A:BB:02:B0:1B:A8:55:E6:4F:92:C2:BA:9C:36:70:B7:3D:1E:44
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/1Iq7ArAbqFXmT5LCupw2cLc9HkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.187.0/24
IPv6:
2a0a:6680:a000::/36
Signature Algorithm: sha256WithRSAEncryption
7d:f5:dc:c1:d1:a7:16:22:41:7f:52:c0:41:bf:c3:01:39:5d:
e9:8e:ed:d2:e3:97:97:7d:2d:86:2d:7b:61:f1:a9:3f:52:fb:
b1:91:28:98:e0:54:7f:cb:4e:90:56:c5:3c:cc:7d:10:a7:25:
24:30:bd:f1:87:39:6b:c8:8a:11:2b:12:60:f7:e4:ca:e1:9f:
a9:f7:d7:d6:8e:9a:94:40:31:eb:8b:07:5e:c8:81:c9:64:ea:
5a:18:be:46:78:75:6d:de:ce:7e:88:1b:57:67:7a:b3:ae:73:
e8:af:db:a3:9c:29:d9:b8:c2:15:57:a4:0f:ba:c9:ce:41:58:
3f:e2:0a:4c:0e:7b:15:ac:fa:a0:53:2e:04:40:ac:5d:75:8c:
d7:fd:6a:ee:bd:cc:3c:16:43:d7:66:cf:00:f0:cd:18:31:65:
97:24:17:f9:ac:10:7c:60:64:41:cd:49:12:bb:fb:a9:90:f6:
56:4e:61:a7:8b:59:7d:b9:c8:e8:2c:23:92:95:b0:6e:a9:fe:
32:1f:c6:ff:a6:2c:ca:76:0e:c7:4d:b6:5a:8f:75:be:48:3a:
c5:07:d7:0c:35:88:cb:9e:f8:30:46:5f:bf:ed:46:e3:d3:c0:
80:2c:15:86:a2:1d:26:e7:1b:60:d1:9e:0b:50:18:d0:bf:bc:
cd:d8:ae:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:15 2025 by rpki-client