Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/OnQsywQ5C6BJkBFQ_REj9nNHahA.roa
File: OnQsywQ5C6BJkBFQ_REj9nNHahA.roa (raw, json)
Hash identifier: Rwmu+/+OSSCRYBXrhzTbExTvd93+eu67+Bbg/44NxbM=
Subject key identifier: 3A:74:2C:CB:04:39:0B:A0:49:90:11:50:FD:11:23:F6:73:47:6A:10
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 01942369C7148AE168BF4C8F17889BEA9F10
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/OnQsywQ5C6BJkBFQ_REj9nNHahA.roa
Signing time: Wed 01 Jan 2025 19:48:42 +0000
ROA not before: Wed 01 Jan 2025 19:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204573
IP address blocks: 185.112.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 10:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c7:14:8a:e1:68:bf:4c:8f:17:88:9b:ea:9f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 1 19:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a742ccb04390ba049901150fd1123f673476a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:1f:63:89:c0:97:89:f6:60:33:b3:2b:3c:
71:ec:24:b3:56:68:65:c9:fd:a2:db:d3:8d:63:72:
d2:fa:25:65:76:c2:8e:66:f8:6e:81:c4:eb:4a:ba:
ac:eb:89:d6:32:1d:26:a6:4f:5f:b4:fa:d3:e3:ed:
e2:d2:03:d7:00:1e:16:ca:41:9e:1b:0f:21:93:80:
32:45:25:a5:e5:cb:20:70:c8:4e:ad:e6:61:ef:4a:
d3:e4:22:e0:f5:6c:d6:cb:ef:8d:7c:3b:4e:7d:be:
75:a6:f1:b8:fe:01:02:ee:d4:8c:1f:da:93:56:f8:
cf:c5:1a:47:99:13:d3:a1:d1:8c:c0:fa:46:68:6a:
ca:b4:72:96:60:dd:56:cd:0b:b2:96:50:31:ee:2e:
b2:3d:c1:02:50:a0:fa:ff:3a:a5:6b:1b:d1:8c:8a:
b6:b2:89:26:39:2a:46:84:6c:53:b4:23:35:98:ba:
b6:8b:89:18:4e:3e:ed:ae:48:a3:b3:9d:a0:f5:8e:
17:89:33:d5:fc:a7:b3:c3:68:18:42:c8:2f:70:45:
b1:0d:e9:22:f2:0b:3e:8e:1c:b8:d3:da:24:bf:74:
d1:27:32:02:4c:a8:d8:19:13:f5:67:5b:38:3d:26:
cb:79:28:7c:24:c2:15:70:10:66:7b:ba:39:b7:01:
7b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:74:2C:CB:04:39:0B:A0:49:90:11:50:FD:11:23:F6:73:47:6A:10
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/OnQsywQ5C6BJkBFQ_REj9nNHahA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.175.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f4:81:e9:d8:64:be:50:a3:73:19:7f:2c:08:8a:36:01:2b:
83:73:b6:1a:04:77:83:71:34:e2:45:49:e0:00:87:e5:e4:e3:
70:f2:7e:84:ce:95:6b:85:73:b4:f2:5a:3e:9a:4d:e6:d4:a0:
b3:98:78:84:d5:8f:fd:42:b5:cc:81:8f:b1:92:3d:3e:bb:40:
61:e7:ff:d0:93:80:e7:59:5b:88:11:0b:aa:6e:c4:81:23:17:
43:f0:2b:e0:9e:fa:b4:1e:e1:b3:08:03:7a:73:de:1f:a4:d6:
14:97:2f:f9:8f:99:35:ef:85:75:4e:4e:c1:1b:97:93:10:87:
44:90:ac:cf:60:ba:25:e1:01:24:c7:59:01:9a:c1:3e:0b:01:
1e:95:01:1d:07:84:1c:9d:de:3b:c3:3a:d0:2f:88:f5:8f:30:
c7:6a:d3:53:85:29:af:bc:1e:ef:9b:8d:47:08:96:23:c1:4f:
f7:3c:6b:e6:e9:0d:b2:f5:d4:16:90:3e:ce:9b:02:82:16:d2:
11:da:74:bf:b4:b4:25:56:84:08:9c:f4:41:09:06:d7:3c:49:
17:29:8c:e6:69:73:0f:90:c7:b6:84:11:27:4e:74:5c:b0:3b:
20:da:f8:77:dd:86:ab:b6:72:51:c0:15:74:d6:97:d1:ea:04:
80:28:22:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:44:07 2025 by rpki-client