Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/_PJL9vcjfu4QNIQN0zphZXPN30w.roa
File: _PJL9vcjfu4QNIQN0zphZXPN30w.roa (raw, json)
Hash identifier: odqJ38d1YrH6bv7B7lMYZ7M9Q+IHQN/z5OcBU8EYrAU=
Subject key identifier: FC:F2:4B:F6:F7:23:7E:EE:10:34:84:0D:D3:3A:61:65:73:CD:DF:4C
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 01942369C6D8CD684760EA8CE8DBFC05ED20
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/_PJL9vcjfu4QNIQN0zphZXPN30w.roa
Signing time: Wed 01 Jan 2025 19:48:42 +0000
ROA not before: Wed 01 Jan 2025 19:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204540
IP address blocks: 185.112.172.0/24 maxlen: 24
185.112.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 10:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c6:d8:cd:68:47:60:ea:8c:e8:db:fc:05:ed:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 1 19:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcf24bf6f7237eee1034840dd33a616573cddf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e4:74:52:87:14:54:30:36:49:44:7a:e0:b5:
8d:13:02:f6:b2:4e:02:4a:8f:9f:3a:ac:a7:8d:a3:
27:29:dd:3b:74:af:7e:19:f6:dd:fe:d1:9b:5d:4f:
ae:bb:90:6b:b0:5a:0b:f3:b4:93:3d:47:dc:b4:1f:
cd:11:7f:03:bf:a5:df:d7:1e:0e:0c:93:f7:da:48:
6e:f9:02:73:c2:21:db:00:8e:fc:89:46:e8:6e:e5:
9f:06:db:45:df:31:cc:45:84:59:4b:52:46:2d:83:
c4:e7:42:0f:ea:37:fe:22:a6:fe:a5:25:0c:a2:88:
b2:88:4c:fb:ce:50:20:53:a3:29:5e:0f:67:92:8c:
d0:b7:7f:b3:46:e7:8b:64:c8:64:a8:40:91:82:03:
92:26:2f:7b:9a:9d:bb:40:a6:2d:70:12:30:54:0c:
61:e7:30:dc:ca:ca:51:6a:9f:ea:8c:ea:3a:f4:57:
0f:5f:0a:a6:57:8d:95:93:fa:3f:a7:d7:9c:31:04:
92:00:45:dd:cd:bc:3e:ae:77:8f:e0:8a:50:67:64:
89:96:81:71:37:73:19:72:25:a9:0b:de:50:98:22:
4e:68:f0:51:44:41:1b:7b:a6:b2:99:6f:6d:83:d6:
66:1a:e1:ca:28:30:6b:ea:da:2e:b2:7d:b1:27:0d:
c5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F2:4B:F6:F7:23:7E:EE:10:34:84:0D:D3:3A:61:65:73:CD:DF:4C
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/_PJL9vcjfu4QNIQN0zphZXPN30w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.172.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:f9:50:f3:81:55:35:4a:4b:00:5d:0a:16:71:8d:ba:20:67:
96:08:23:63:2f:41:6e:54:47:16:77:c0:02:0f:72:f3:4d:c1:
96:c9:7f:c4:45:38:93:aa:59:3f:b4:e1:a0:c2:2e:b6:1f:25:
68:49:14:8d:e6:eb:a6:16:b1:2a:91:f2:1f:de:49:e5:ee:26:
3f:eb:14:b2:59:83:86:4d:cc:d8:e5:f0:a2:6b:02:1a:6a:d5:
c6:03:73:61:42:81:5a:90:e2:e2:b6:3e:0a:75:d5:e6:f9:43:
45:60:dd:67:a0:91:83:ea:79:ca:3b:e2:b7:c8:ce:9e:a8:88:
2e:ec:f1:12:da:72:c2:2f:17:52:d2:3c:71:2b:ae:da:c8:25:
a7:7f:38:5c:12:8b:d0:08:9e:be:60:6b:fe:ef:44:c7:4a:70:
6d:9d:e8:7d:61:f5:d4:66:71:7a:0e:35:e2:79:f2:78:05:70:
d7:1f:20:48:71:2f:e2:a9:c4:55:55:2d:d2:9d:d0:00:c8:4b:
40:e0:44:1c:7c:39:2b:92:61:4f:a3:a7:20:f5:ca:62:bb:c1:
2b:df:dc:40:5a:71:f8:c4:1f:c0:e5:e5:bf:95:a2:a4:ee:f5:
75:0d:80:86:26:85:f0:a2:b7:fa:df:98:ee:2d:ab:04:21:a7:
d1:7a:55:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:54:20 2025 by rpki-client