Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/nF1E6_OGLXg-V-P07VmH4HmKY0w.roa
File: nF1E6_OGLXg-V-P07VmH4HmKY0w.roa (raw, json)
Hash identifier: lUF0Uc1+7u7OnUs64qXmVhnRLc5ZFHioyn/aVbVO/6s=
Subject key identifier: 9C:5D:44:EB:F3:86:2D:78:3E:57:E3:F4:ED:59:87:E0:79:8A:63:4C
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 01903CB63CCA867F0A62B868A7A77474E42F
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/nF1E6_OGLXg-V-P07VmH4HmKY0w.roa
Signing time: Fri 21 Jun 2024 21:31:34 +0000
ROA not before: Fri 21 Jun 2024 21:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216018
IP address blocks: 185.23.72.0/24 maxlen: 24
185.23.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jun 2024 22:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3c:b6:3c:ca:86:7f:0a:62:b8:68:a7:a7:74:74:e4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Jun 21 21:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c5d44ebf3862d783e57e3f4ed5987e0798a634c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:6b:e6:09:7b:c6:32:2e:65:d3:81:52:2a:
65:23:55:20:61:bb:64:2c:0f:bb:2b:9c:8e:0f:a7:
06:a2:a2:02:b3:fd:79:b9:a4:0a:ea:6c:46:87:bc:
30:fc:18:45:e2:28:27:99:72:da:d6:de:0c:b2:86:
e5:7e:85:22:8b:a6:25:7d:ce:3e:0a:9e:21:fa:ae:
c7:8e:2a:46:01:c3:73:c6:92:90:4c:9d:c7:ce:ba:
fe:3a:1d:98:87:45:ab:ed:4a:cc:01:32:4a:8e:69:
4d:19:ce:7b:6d:9e:34:60:7a:51:57:3a:b6:d1:bb:
05:a0:51:56:99:30:aa:52:74:83:d2:f6:42:e8:26:
8b:75:ca:6b:ec:ec:25:a8:cf:5f:b7:2d:59:44:22:
46:9b:2a:05:ce:05:3b:69:39:1b:96:2d:34:b3:28:
0c:35:81:4c:91:e8:de:9e:da:2d:a4:ca:0a:e0:14:
b0:67:83:cf:ef:7a:40:b0:7d:5e:03:5d:61:53:05:
cd:ea:41:c8:91:e2:34:b8:52:92:58:2a:94:1b:a3:
0b:ef:db:10:7b:e9:59:a7:f2:62:c3:d6:b1:00:00:
7a:0d:a0:89:6c:8b:b5:ca:1e:c3:c3:81:77:4b:88:
29:d9:bb:b8:60:2b:b3:6b:85:c8:f7:40:3b:41:fe:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5D:44:EB:F3:86:2D:78:3E:57:E3:F4:ED:59:87:E0:79:8A:63:4C
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/nF1E6_OGLXg-V-P07VmH4HmKY0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.72.0/24
185.23.74.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:07:83:f4:9b:e9:bb:27:ad:4d:7c:e5:94:cc:e0:4d:26:66:
fa:44:c8:ec:91:e9:13:92:dd:9f:1a:e6:af:45:64:6c:01:92:
c5:f0:9f:a7:d1:1b:99:cf:f3:05:12:26:d0:71:fa:1d:2e:3e:
bd:3f:f3:82:8b:dc:aa:54:cb:b5:0a:73:2b:28:e7:47:6f:f2:
5e:b8:ee:66:7a:e7:d5:3d:6c:2c:aa:fb:92:47:29:6f:1e:72:
b9:02:2c:6a:34:fd:f8:4c:b3:d9:7b:9d:a7:eb:94:e8:35:c1:
0b:cd:67:4b:fe:f7:f2:a3:d4:f1:09:88:49:f8:4a:12:74:ad:
77:ed:41:27:d8:1c:fb:40:3a:32:5a:4a:fb:6c:25:85:7c:27:
1c:08:6c:11:8a:88:6b:17:4f:bd:51:17:e9:df:4b:8d:99:0e:
5f:4f:c8:ce:3c:ea:2f:00:fe:4e:00:98:bc:3c:5f:14:a8:77:
e9:11:53:79:bd:02:e1:1b:73:99:5b:57:27:05:76:5c:17:f7:
ec:03:de:98:da:b8:1a:bd:c6:48:63:5b:a4:49:a4:a6:90:0e:
b0:0c:21:ee:95:b6:28:33:fd:d9:92:4f:8b:f4:b2:a9:ee:25:
15:ac:17:a1:71:04:ad:1e:41:79:a0:a7:0e:35:90:45:1b:55:
ba:8e:2a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:12:10 2025 by rpki-client