Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/sNcCSqQfi33Q7kAmSHEke_K4MqU.roa
File: sNcCSqQfi33Q7kAmSHEke_K4MqU.roa (raw, json)
Hash identifier: 4ZqUnDzQ07RwDbiFJJHyH7RB9ogM1iCrxA9VkvHctIg=
Subject key identifier: B0:D7:02:4A:A4:1F:8B:7D:D0:EE:40:26:48:71:24:7B:F2:B8:32:A5
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 018CC8DFA4D5FE11B72FEDF78926F718DAEF
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/sNcCSqQfi33Q7kAmSHEke_K4MqU.roa
Signing time: Tue 02 Jan 2024 06:32:29 +0000
ROA not before: Tue 02 Jan 2024 06:32:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39392
IP address blocks: 185.247.28.0/22 maxlen: 32
185.247.30.0/23 maxlen: 32
2a0d:b880::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a4:d5:fe:11:b7:2f:ed:f7:89:26:f7:18:da:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: Jan 2 06:32:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0d7024aa41f8b7dd0ee40264871247bf2b832a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:97:a9:2d:25:c5:7a:79:c5:72:e0:5e:5a:19:
2a:c3:ac:b9:07:84:0a:bd:01:7e:b8:93:14:eb:4f:
4d:11:43:5b:8a:9b:bf:88:21:c7:a4:3b:6f:04:a4:
82:86:8b:ef:48:16:d9:3e:2c:49:6b:f5:b5:fc:56:
07:38:66:75:bc:d3:b4:01:cc:0a:e1:ec:9e:f9:9a:
0a:c3:ec:ca:bc:fc:f3:27:7e:a2:b4:23:56:fa:7a:
b0:90:71:dc:db:83:ce:16:e5:ee:2a:f8:c3:a2:03:
fb:ac:08:d5:39:10:74:af:c5:4f:f7:f5:12:63:16:
eb:a5:1e:33:76:b5:4a:b5:d1:a8:a6:a1:1a:33:68:
f9:f4:43:e1:bd:01:77:63:4a:8a:ec:0e:f4:4f:69:
9a:2f:e3:f6:f6:bd:6e:9b:a4:79:fa:70:4c:66:6b:
15:bb:3a:4f:00:80:9b:d7:e7:21:a1:70:26:f7:75:
48:59:f5:3e:0c:3e:dc:6c:11:79:ee:b6:19:77:f1:
ee:17:8e:b9:2a:f6:32:39:77:23:87:83:3e:96:fa:
04:ca:55:cb:31:cd:89:b5:83:cc:f6:ab:6a:f9:be:
75:8c:2b:4e:c4:88:45:91:b0:ae:5e:89:98:97:3f:
fc:2c:d0:0c:7c:de:9a:0e:ab:ed:1b:7a:2d:e2:b5:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D7:02:4A:A4:1F:8B:7D:D0:EE:40:26:48:71:24:7B:F2:B8:32:A5
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/sNcCSqQfi33Q7kAmSHEke_K4MqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.28.0/22
IPv6:
2a0d:b880::/29
Signature Algorithm: sha256WithRSAEncryption
47:36:3f:76:f3:80:44:32:9c:ad:7a:1a:33:e7:e3:1b:24:d6:
5b:68:94:57:45:64:02:b9:c5:64:74:01:c6:8f:51:16:6e:a0:
bd:61:94:8a:9c:c4:cf:96:80:0b:8c:42:8c:75:0c:79:71:15:
11:89:87:d4:9b:40:b2:25:f9:2e:57:e8:10:0a:c9:a0:02:28:
e3:e0:98:27:49:17:82:4e:0e:ce:e0:7f:b1:cc:87:c5:d8:3a:
65:06:89:78:6e:8a:b5:27:3d:da:06:a1:7d:a5:72:f5:dd:f1:
63:e8:65:d0:9a:0b:e6:58:0d:d6:f5:be:77:14:83:55:37:e2:
b1:a4:72:00:0e:59:e5:42:59:61:60:0b:dc:78:0d:af:16:f8:
72:8f:d6:41:5a:41:28:11:37:69:41:00:b3:80:0d:7f:f0:14:
15:e2:0d:d5:9e:11:a8:3d:fe:17:08:58:e1:bc:c0:c9:fd:bc:
34:b6:c3:ae:68:0a:19:dc:45:39:34:f1:78:a4:4a:18:c8:af:
93:f4:be:2f:c5:6a:33:0a:c3:41:36:c1:55:5f:86:91:47:50:
97:36:1d:a3:73:75:23:16:b7:93:d7:61:0f:57:34:4d:bd:8c:
cd:25:ae:f6:51:e1:6b:1f:f4:ec:b1:e3:d1:ff:d5:80:52:0d:
65:1d:75:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:22 2025 by rpki-client