Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/mbbOUZ6a4kdgpR58Al1hUCOAar4.roa
File: mbbOUZ6a4kdgpR58Al1hUCOAar4.roa (raw, json)
Hash identifier: dB0O6uTicfrI9VhLBlSDHupDx47ljSFVPYzWUvAkCqc=
Subject key identifier: 99:B6:CE:51:9E:9A:E2:47:60:A5:1E:7C:02:5D:61:50:23:80:6A:BE
Certificate issuer: /CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Certificate serial: 018CC64B46795EA97A522551900E63F0A8EE
Authority key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/mbbOUZ6a4kdgpR58Al1hUCOAar4.roa
Signing time: Mon 01 Jan 2024 18:31:11 +0000
ROA not before: Mon 01 Jan 2024 18:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207065
IP address blocks: 185.119.128.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:48:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:46:79:5e:a9:7a:52:25:51:90:0e:63:f0:a8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Validity
Not Before: Jan 1 18:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99b6ce519e9ae24760a51e7c025d615023806abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0d:12:78:d3:e4:c6:04:10:2f:ca:b2:bb:cc:
2a:7a:ea:57:fd:89:06:c6:21:0f:65:76:c9:c9:24:
93:a8:89:4f:65:38:04:64:9c:21:cc:4e:9f:e9:1e:
f8:3f:9f:f5:27:ab:3e:77:90:b2:f2:cf:5f:f0:ac:
32:32:f2:76:e3:7c:6d:99:d6:24:36:a8:b8:f6:c5:
3c:94:d6:dd:55:eb:96:94:3e:d6:d7:d2:11:4a:10:
34:17:22:77:0b:7c:b0:94:8f:29:c4:ec:43:c2:cf:
0a:1f:ac:9d:f9:cf:84:a6:a9:72:56:56:14:55:d4:
04:9a:79:e5:ff:96:ad:45:2a:1c:79:92:28:90:90:
96:a5:12:28:f5:3a:d9:f6:18:8d:2d:25:a9:99:6c:
81:ab:49:65:3f:6d:2f:0a:28:ae:73:09:1c:5b:ac:
2c:6d:4b:73:5b:8f:db:e3:63:97:97:da:48:9e:d2:
35:56:c4:2d:bd:b1:ff:bd:8b:89:73:49:3f:1b:ae:
26:5d:c9:ec:47:93:71:20:d4:73:6d:52:19:4c:c8:
93:4d:ac:6a:24:10:6a:09:d2:41:de:94:0d:11:0f:
e4:5a:99:1f:cc:d2:6e:5e:de:3b:ca:7b:a6:c4:59:
3a:86:7b:0f:40:25:7c:61:31:60:38:80:9d:b9:cf:
30:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B6:CE:51:9E:9A:E2:47:60:A5:1E:7C:02:5D:61:50:23:80:6A:BE
X509v3 Authority Key Identifier:
keyid:01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/mbbOUZ6a4kdgpR58Al1hUCOAar4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.128.0/22
Signature Algorithm: sha256WithRSAEncryption
31:04:be:b9:9c:f4:55:85:68:c2:b1:c7:14:17:3f:67:bd:76:
46:0d:3c:a4:52:b4:7d:28:2c:af:ee:75:06:ed:88:1f:41:8f:
3d:6f:ca:28:76:7f:a0:1a:03:cd:f4:e7:b9:ff:6e:2a:00:7b:
e3:0c:9d:4c:d0:c0:7c:cf:7f:43:ee:28:e3:a3:27:d7:6e:48:
cd:bd:c8:cd:cb:fe:99:74:d1:d9:61:2a:d9:a0:ff:07:67:f9:
0d:fc:09:dd:9a:89:68:58:3e:ad:4d:de:1f:29:69:b3:e9:c6:
f8:97:a7:95:08:04:7e:7c:94:90:b2:16:e1:eb:61:a8:3d:97:
f2:30:57:6c:47:c4:53:8b:85:ac:0b:c8:bb:b3:21:39:0d:e7:
14:83:06:ee:9d:5f:8d:9d:e3:55:cd:55:8a:1d:6a:a1:34:88:
85:01:51:c4:e5:41:37:09:db:1e:ef:4c:72:a8:a4:75:a0:4d:
0f:cf:94:56:3a:37:dd:a9:8b:7d:e7:aa:a8:8b:dc:9d:d2:4e:
33:62:54:2c:f8:1a:4d:a0:be:e5:e8:3b:6a:e0:60:bd:23:8e:
09:41:c4:78:f4:a0:41:55:1e:22:27:56:2c:8d:53:b1:ca:e4:
c7:49:e4:40:07:d5:fe:ae:c3:4d:35:02:8c:31:cf:5e:07:64:
c5:47:d7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:48 2025 by rpki-client