Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/V74ceBy9r-3dxv-ENYhaiWU9vKU.roa
File: V74ceBy9r-3dxv-ENYhaiWU9vKU.roa (raw, json)
Hash identifier: 3iUyLWgulRZmxxLDesRbvgSZx0BhLIliuBPhQEhXPOU=
Subject key identifier: 57:BE:1C:78:1C:BD:AF:ED:DD:C6:FF:84:35:88:5A:89:65:3D:BC:A5
Certificate issuer: /CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Certificate serial: 018CC7260EA8B29F63B5F96BADD4774C01CC
Authority key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/V74ceBy9r-3dxv-ENYhaiWU9vKU.roa
Signing time: Mon 01 Jan 2024 22:30:09 +0000
ROA not before: Mon 01 Jan 2024 22:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59439
IP address blocks: 185.168.52.0/23 maxlen: 23
91.240.178.0/24 maxlen: 24
2a0d:c0c0:4e1::/48 maxlen: 48
2a0d:c0c0:3e1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 24 Jun 2024 08:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:0e:a8:b2:9f:63:b5:f9:6b:ad:d4:77:4c:01:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Validity
Not Before: Jan 1 22:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57be1c781cbdafedddc6ff8435885a89653dbca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:65:47:0e:a8:c8:43:a9:9d:cf:b4:f2:41:
be:c1:99:8c:2e:6b:17:38:c4:7e:e7:b8:f6:52:fd:
92:42:65:96:e0:a0:b2:e0:a9:79:b0:11:89:f4:c2:
82:81:f8:78:ce:67:a3:57:5e:6d:aa:88:82:01:f0:
28:38:a8:45:6e:fa:44:3e:83:11:21:2c:e1:20:1c:
7b:08:66:76:84:e0:55:0c:b0:95:1a:37:76:f5:76:
a5:5e:78:5c:58:0b:3e:36:7a:de:d8:13:5a:50:60:
45:ef:5c:30:b8:83:5b:d2:3b:0f:5f:06:a3:09:22:
ec:9b:79:dd:3a:bb:6b:5f:f8:56:bb:95:a6:94:0b:
a0:c4:7f:93:da:0c:d9:d1:c0:f9:f8:1b:9d:3a:1f:
47:6b:e3:21:25:03:8c:35:4d:20:1f:ca:7a:b7:b9:
5a:79:98:4d:ab:59:32:00:e2:1e:79:52:cb:cf:0e:
68:8c:8f:82:c6:38:02:20:f3:19:1e:5d:ea:3f:e6:
e0:f4:d9:6a:13:d1:c9:1b:ed:60:a1:35:32:80:fe:
13:52:65:d7:f0:ae:dd:10:8d:42:15:82:d6:6e:da:
14:87:97:32:e1:c4:82:af:00:41:53:ad:e9:eb:7f:
b4:15:f9:8a:d3:95:f8:c2:ce:66:5a:54:05:9b:f5:
74:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BE:1C:78:1C:BD:AF:ED:DD:C6:FF:84:35:88:5A:89:65:3D:BC:A5
X509v3 Authority Key Identifier:
keyid:AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/V74ceBy9r-3dxv-ENYhaiWU9vKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.178.0/24
185.168.52.0/23
IPv6:
2a0d:c0c0:3e1::/48
2a0d:c0c0:4e1::/48
Signature Algorithm: sha256WithRSAEncryption
81:ee:49:49:e2:a2:ea:f3:51:37:0a:b3:81:77:0a:21:d9:d2:
e4:ac:2b:5f:33:49:d5:ca:01:4f:20:8f:0e:8d:ae:bb:be:fc:
81:49:9b:bd:b9:e5:26:6d:57:27:2d:15:13:54:44:2c:c8:f1:
3e:bc:31:dc:34:a1:5e:af:9d:37:6d:75:97:3e:39:7d:95:d5:
12:6d:66:4c:cb:62:29:c9:fe:eb:86:46:0d:e7:bc:ae:ae:24:
bb:0a:f3:82:74:bb:ca:d5:01:69:0d:9b:84:c2:5c:82:ba:bf:
26:6c:65:c8:cf:00:00:ba:0b:aa:1e:28:d8:ff:cc:27:e4:cc:
1f:69:2c:33:5d:24:a2:ac:c5:02:ea:13:21:46:71:7f:1e:c5:
44:33:e6:f8:7c:8b:a3:c9:66:11:b2:4a:e0:79:ab:79:b4:61:
4d:47:41:43:0b:a5:07:87:7a:21:2f:f0:c0:5d:d1:c6:0d:7c:
1e:c7:cb:3d:b1:e8:b2:7a:86:aa:48:df:f6:89:c8:27:fb:30:
0c:7b:4d:6e:c6:82:78:93:15:af:71:ba:5d:66:cc:0a:f8:a9:
93:68:f2:ff:99:f7:d4:50:be:7d:e8:9a:83:c7:c6:92:da:20:
73:34:ca:45:9b:ed:6c:2f:2a:3a:c7:bd:24:7b:26:3b:eb:99:
8a:53:58:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:11:39 2025 by rpki-client