Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/T8XOtgLJpqmWOpJyQqVEl2VFU5M.roa
File: T8XOtgLJpqmWOpJyQqVEl2VFU5M.roa (raw, json)
Hash identifier: AZDcA62qITSy5rLrgjy6a1M2uFENLgF/n5v0mViZeg8=
Subject key identifier: 4F:C5:CE:B6:02:C9:A6:A9:96:3A:92:72:42:A5:44:97:65:45:53:93
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 0194266BCFCDF81E634A54FDA0E2E2AE8459
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/T8XOtgLJpqmWOpJyQqVEl2VFU5M.roa
Signing time: Thu 02 Jan 2025 09:49:47 +0000
ROA not before: Thu 02 Jan 2025 09:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201032
IP address blocks: 185.23.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 07:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:cf:cd:f8:1e:63:4a:54:fd:a0:e2:e2:ae:84:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fc5ceb602c9a6a9963a927242a5449765455393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:30:c0:92:df:2a:05:36:e0:00:eb:49:22:
8f:78:78:4c:cf:6d:8e:ee:e9:1a:c4:b2:41:5e:74:
40:21:1f:6c:39:ce:54:f1:3e:80:bc:4c:9c:ba:70:
21:30:03:6b:63:57:b0:0f:ad:be:5b:01:89:bc:3e:
17:4e:07:61:12:e3:d5:5c:7f:d7:b0:14:94:27:27:
3c:19:d6:d7:93:90:07:5d:a2:fb:d1:e1:d8:8d:81:
75:04:09:da:eb:25:c1:06:59:60:cf:33:24:db:86:
88:37:48:35:ba:11:2d:73:58:05:a9:b8:f1:49:2e:
58:73:be:8d:01:10:57:44:b2:ad:3b:4c:62:4c:72:
88:b2:60:0c:9f:7d:f7:d0:1f:01:f0:90:16:41:f1:
87:46:2b:2d:50:e9:4b:1b:1f:a4:8d:15:5f:97:2a:
96:09:5d:40:a0:48:87:ef:9b:86:2d:0b:df:ad:fd:
05:d4:26:94:10:c4:ef:f6:bf:03:b1:2c:7d:c3:aa:
0a:71:1e:0d:6d:69:3c:6b:d2:95:18:57:ed:4b:16:
04:2e:0b:46:06:28:01:37:db:6e:fa:04:70:99:52:
12:fb:0c:4b:79:80:a9:df:52:df:4b:d0:6f:20:86:
61:11:c6:8c:63:40:a7:63:f7:d2:d0:ef:34:ee:23:
0f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C5:CE:B6:02:C9:A6:A9:96:3A:92:72:42:A5:44:97:65:45:53:93
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/T8XOtgLJpqmWOpJyQqVEl2VFU5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.75.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:e6:4a:e7:cd:48:18:9c:35:fe:26:53:c9:0c:4d:c8:9f:c9:
fe:19:e2:8f:73:1d:58:8d:8e:43:e7:0b:72:95:e7:84:f3:ae:
43:92:9c:d2:be:b6:c7:b2:d3:d3:0e:f1:e7:02:bc:38:5e:60:
6e:a4:e2:60:2c:71:e9:44:87:b6:d2:39:4c:98:88:83:33:6f:
f3:e4:93:e5:35:21:ab:03:42:d1:70:c2:9d:b7:3f:f3:35:2a:
3d:b0:4f:a7:e6:59:1c:e0:4c:4a:71:23:e4:14:a3:e4:e7:d3:
91:9e:2c:26:f6:fc:2e:b7:bf:92:97:14:03:16:a9:b6:62:cd:
f5:7f:13:63:ab:75:6b:9b:fe:4b:1a:1f:ac:6b:a2:3d:d0:ff:
18:45:b4:74:72:cb:6b:fe:00:70:ab:a3:a4:c5:bf:c7:3c:4c:
af:98:e0:9c:3f:2f:30:ae:7c:a7:76:dd:61:01:b3:2f:e1:e7:
eb:17:b2:19:f0:5d:4e:a7:a6:54:99:ec:9a:4d:8e:0b:e0:53:
1e:d1:6f:cd:3a:b5:05:53:b8:aa:b0:d0:b5:f4:38:f9:6a:19:
d9:19:71:dc:ca:6b:36:a1:b4:17:1b:84:86:85:dc:8e:ac:a6:
0e:27:be:be:88:ee:5a:16:16:ac:ae:3e:0b:8f:1c:fa:1c:2e:
27:d5:3a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:23:27 2025 by rpki-client