Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/9iSHrxYb_VPfXQi8oYUGSAtJfN4.roa
File: 9iSHrxYb_VPfXQi8oYUGSAtJfN4.roa (raw, json)
Hash identifier: IKitVPHb5SQjsjDqV1bW98qxX3Us0m16ex3eZA00iJM=
Subject key identifier: F6:24:87:AF:16:1B:FD:53:DF:5D:08:BC:A1:85:06:48:0B:49:7C:DE
Certificate issuer: /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial: 018CC8700C89FF9F15AA6977D839ED855376
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/9iSHrxYb_VPfXQi8oYUGSAtJfN4.roa
Signing time: Tue 02 Jan 2024 04:30:35 +0000
ROA not before: Tue 02 Jan 2024 04:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59754
IP address blocks: 185.73.78.0/23 maxlen: 23
185.73.78.0/24 maxlen: 24
185.73.76.0/24 maxlen: 24
185.73.76.0/23 maxlen: 23
185.73.76.0/22 maxlen: 22
185.73.77.0/24 maxlen: 24
185.73.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:0c:89:ff:9f:15:aa:69:77:d8:39:ed:85:53:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Validity
Not Before: Jan 2 04:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f62487af161bfd53df5d08bca18506480b497cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:0e:c4:c0:5f:e3:e2:81:e8:d6:ec:94:52:
42:b9:c8:fc:11:04:96:85:f8:7c:49:51:38:7b:1c:
9f:ae:a0:7e:44:54:e7:b5:74:ad:00:77:f0:7c:9b:
8b:cc:3c:e1:83:12:73:24:82:93:bf:14:c8:5f:67:
ab:f1:1e:9f:ff:68:20:e7:a9:78:1a:da:1f:19:42:
6f:ea:11:66:68:a8:b1:05:50:4d:49:a0:ad:38:05:
67:75:e8:4d:07:a0:6e:1b:81:1b:a1:f6:cd:1a:be:
8e:75:d9:24:fd:4c:5d:ff:fd:ef:57:18:ba:99:b4:
e1:79:88:7e:59:9f:27:e8:ee:2d:bf:de:16:83:c4:
36:7e:b7:39:1c:bf:6d:fa:03:df:6f:17:61:e7:a2:
39:d6:87:c1:cb:28:ba:75:77:62:f8:4b:b4:0b:4f:
0b:e2:47:2d:2c:fc:7b:6f:1f:88:f2:52:4c:0c:d2:
79:fc:aa:f6:3d:63:15:9a:02:2e:55:e1:d8:1e:7c:
19:1a:84:7a:e0:cc:cc:e6:33:e1:3a:29:d6:6a:f6:
24:f7:bc:e6:0e:44:1b:43:b1:fc:f3:81:2d:15:b9:
39:b5:ee:d1:fd:67:8e:d8:50:f8:1a:31:8c:8b:61:
9d:c7:61:9d:e0:37:d7:9e:e8:2b:de:7e:12:71:25:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:24:87:AF:16:1B:FD:53:DF:5D:08:BC:A1:85:06:48:0B:49:7C:DE
X509v3 Authority Key Identifier:
keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/9iSHrxYb_VPfXQi8oYUGSAtJfN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.76.0/22
Signature Algorithm: sha256WithRSAEncryption
09:c5:16:ea:65:59:0b:a5:34:c1:8c:28:14:c0:90:fe:9d:bb:
87:1d:39:f6:db:9b:67:1e:f2:a9:32:cd:a9:24:32:e8:b4:8f:
28:1c:b6:50:29:87:03:17:ee:30:a5:83:4c:13:e8:b1:6b:12:
1f:29:1b:60:ba:ac:7c:60:c2:fd:fb:8c:28:fb:1b:fd:40:5b:
e3:4c:8a:54:0c:6f:aa:5c:af:d3:9f:74:46:7a:95:f5:17:96:
06:cd:60:87:eb:9d:38:65:c4:23:a5:97:8e:51:de:66:b8:1f:
63:cb:75:ca:91:81:97:13:f9:1b:2e:71:63:ac:17:19:cb:5f:
e8:a6:06:d2:1f:63:d8:f7:f7:75:a3:11:e3:67:c5:10:0c:a4:
6b:18:2b:0a:f7:92:13:a2:5b:5e:73:4b:87:c6:a5:c8:56:6e:
1d:5e:66:38:1c:3e:e6:84:5d:3c:87:c3:5c:7f:03:db:36:06:
f2:d3:0d:1a:47:c5:1b:8b:3e:69:d6:e1:48:c0:b6:e5:f6:9f:
ee:0f:d2:cb:2e:12:42:7a:cd:ec:bc:8c:8f:6f:e8:1e:59:d3:
65:13:e8:98:da:cb:92:b7:4d:35:80:e4:2e:b9:aa:fb:87:46:
16:19:52:bf:9d:e0:16:37:78:55:5a:e2:81:2d:64:07:c4:93:
08:34:be:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:39 2025 by rpki-client