Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/Bta8VJ1iB3aUOH094-VnuYZOu1M.roa
File: Bta8VJ1iB3aUOH094-VnuYZOu1M.roa (raw, json)
Hash identifier: M5VoHrKeWoWKseSiFwwUxKOKWdd5t0oHMLlTiJLPEn4=
Subject key identifier: 06:D6:BC:54:9D:62:07:76:94:38:7D:3D:E3:E5:67:B9:86:4E:BB:53
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 018CC5DCD576C3E8CAD8F88D9F1F890565EA
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/Bta8VJ1iB3aUOH094-VnuYZOu1M.roa
Signing time: Mon 01 Jan 2024 16:30:33 +0000
ROA not before: Mon 01 Jan 2024 16:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211104
IP address blocks: 185.182.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:d5:76:c3:e8:ca:d8:f8:8d:9f:1f:89:05:65:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Jan 1 16:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06d6bc549d62077694387d3de3e567b9864ebb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:c4:14:3f:aa:a5:ad:fb:c9:58:ee:05:1b:
d2:86:de:c6:64:99:2a:26:c3:da:aa:58:77:fe:cb:
e6:cb:9d:79:77:9d:fd:f1:62:0b:58:4c:90:fd:4c:
6a:de:63:be:29:5f:34:be:7f:94:2c:bd:3c:16:31:
d0:f2:b7:96:1d:b8:92:b4:49:6c:2c:1c:97:c1:13:
e2:e6:92:4d:07:2a:25:6d:aa:69:8d:01:f5:f9:7b:
3a:85:95:5f:93:22:97:bf:6d:9a:27:fe:32:1f:9f:
f2:eb:dd:a8:51:bf:ee:58:fa:60:29:55:94:9d:b9:
e3:87:90:7e:ac:66:d9:24:d6:22:d9:bc:56:30:a6:
35:29:4e:a6:68:e9:eb:29:bb:26:78:b0:b5:ee:bd:
09:bc:83:44:dd:e1:82:ed:30:d9:9e:e0:b7:78:ec:
88:f9:6c:80:d0:89:05:fc:c7:1b:4d:b2:83:6a:e8:
27:bc:be:cc:6d:bf:f1:d0:c3:cf:a2:56:d3:5d:7f:
db:86:e2:30:e1:e3:19:a2:39:d1:09:88:17:c9:76:
6c:a8:46:32:f7:90:22:51:17:77:83:45:6e:2b:50:
0f:4a:68:57:1d:9e:0c:f6:c0:30:ee:b9:43:af:9c:
67:d7:c3:e9:be:ee:fc:8a:9c:84:29:58:30:f4:62:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D6:BC:54:9D:62:07:76:94:38:7D:3D:E3:E5:67:B9:86:4E:BB:53
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/Bta8VJ1iB3aUOH094-VnuYZOu1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.156.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:31:55:d8:1f:3d:59:a8:5a:74:d4:e0:2a:42:e5:47:e3:e9:
cf:85:bb:bf:f7:66:1b:02:47:93:22:c4:80:26:d6:a3:df:ba:
fe:df:f6:ac:77:c7:f3:96:70:87:e3:5e:6c:d5:f1:03:be:4e:
e0:f2:ba:8f:65:5d:4f:0e:9f:4f:27:13:c5:2c:7b:b1:bf:35:
9d:b6:df:b9:a8:6e:9d:57:ba:63:f4:2f:c6:a9:ae:1b:26:2f:
9b:09:2b:b1:57:ee:bf:93:74:45:a7:2b:c5:78:e1:40:a1:5a:
4c:8e:bb:df:ec:0d:5e:3f:89:62:62:24:59:24:ac:4a:c0:c5:
ad:ae:0d:c4:fd:e8:70:bf:63:2c:21:fa:0d:15:d1:35:00:ee:
b3:82:e5:17:fd:1c:f8:ff:77:58:9d:c8:52:86:4c:d1:6c:a4:
f1:02:80:aa:63:47:e1:33:71:fb:d6:19:70:93:56:d8:52:22:
44:45:e5:11:42:0e:3d:88:cf:e1:1c:8d:10:ff:51:0d:35:b5:
0f:a3:ed:22:af:dd:2e:ea:78:85:79:1b:29:c8:74:c6:85:52:
7d:fc:67:26:e0:62:37:de:d0:01:59:64:79:d9:42:0c:14:18:
77:16:2c:d0:a2:c3:6e:5e:d9:05:4d:9c:8e:14:57:78:36:09:
5b:46:3c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:35 2025 by rpki-client