Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/ntPCHYuAjDLDmUYjrzEKvYV7f3w.roa
File: ntPCHYuAjDLDmUYjrzEKvYV7f3w.roa (raw, json)
Hash identifier: NeM+RuE4k9MfQkvGY41obdWp7VGPRenlT9Yr92FHmVo=
Subject key identifier: 9E:D3:C2:1D:8B:80:8C:32:C3:99:46:23:AF:31:0A:BD:85:7B:7F:7C
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 018CC80186DDFFF2C292C4788B94C7C7B8B9
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/ntPCHYuAjDLDmUYjrzEKvYV7f3w.roa
Signing time: Tue 02 Jan 2024 02:29:52 +0000
ROA not before: Tue 02 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204573
IP address blocks: 185.112.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:86:dd:ff:f2:c2:92:c4:78:8b:94:c7:c7:b8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 2 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ed3c21d8b808c32c3994623af310abd857b7f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:86:b2:63:82:2e:11:97:fd:1a:5d:80:23:71:
c1:92:db:22:ab:bb:e2:44:f8:7c:b6:16:8a:58:9b:
85:94:f0:ba:9a:aa:1e:46:c4:e9:6d:d3:4e:92:fc:
ab:a6:f7:b1:58:73:5e:6a:7b:e7:b7:6b:a9:97:54:
f4:0a:62:5c:bd:ca:65:64:ce:af:0a:6f:ac:78:81:
d5:b7:d7:48:1e:66:89:a4:56:98:de:4d:92:e5:75:
c5:3b:1f:57:20:8b:8f:98:14:46:ef:2c:7e:2e:3e:
ac:63:f8:d6:84:8d:c8:ca:77:36:85:b5:f8:93:22:
c0:f2:cb:4a:17:ad:83:a3:d7:76:43:0c:53:63:9a:
3c:e2:de:e4:0f:8b:08:93:c6:74:42:7a:22:58:6e:
20:b8:32:10:1d:f2:d9:dc:07:d2:b8:de:88:0e:05:
c6:b9:2c:c5:fb:8a:5f:aa:93:18:15:74:14:39:ec:
37:3e:a1:3b:7e:58:ba:d3:68:0e:17:e2:c0:1e:1a:
92:64:c6:67:83:12:fb:a5:94:88:39:13:99:37:88:
ba:6f:98:4a:db:42:36:7a:6e:e0:37:5c:a1:cd:2d:
60:96:30:82:be:25:52:f9:72:af:ec:c2:cc:e5:82:
7e:e1:d9:29:7a:dd:73:78:f2:61:6a:1e:c8:bd:e2:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D3:C2:1D:8B:80:8C:32:C3:99:46:23:AF:31:0A:BD:85:7B:7F:7C
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/ntPCHYuAjDLDmUYjrzEKvYV7f3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.175.0/24
Signature Algorithm: sha256WithRSAEncryption
87:68:f0:8c:9c:14:ef:a7:85:9c:59:de:e2:68:22:63:64:f6:
5c:c7:df:9f:c5:f1:b9:e4:54:77:5b:8a:bb:2e:be:f7:9f:00:
52:2a:4d:30:44:cc:c4:da:46:4e:e7:b3:94:1d:c8:b8:82:d2:
f8:6c:42:68:30:aa:88:d5:a5:d5:b1:c2:f7:ce:2d:73:42:97:
0f:41:79:80:16:95:a6:1e:52:ab:68:4d:59:20:16:a5:51:72:
e9:ad:0e:f4:d1:21:e6:f7:31:2d:8d:c9:c9:be:2d:4a:75:1c:
1c:21:73:46:e0:25:57:95:e4:82:2c:5d:34:90:73:e9:dc:c2:
73:c0:68:e2:7a:50:c8:4e:b9:b3:2a:3f:cc:f1:57:48:56:2c:
03:d6:51:4f:0c:2f:e5:a4:2e:b7:fe:f2:94:fb:ab:db:ac:75:
ac:2c:7c:bc:e3:0a:e6:7f:94:46:62:ad:45:c7:0d:92:6b:b1:
96:e2:af:dd:cf:e8:2a:56:71:60:0f:b9:72:87:3f:74:1b:13:
43:4d:57:ec:42:16:4c:3b:ce:e9:ce:1e:e7:8f:b0:be:53:e4:
8b:80:ad:15:10:cd:16:c0:1c:9e:29:cc:bf:28:6c:a6:e1:18:
53:e6:09:15:c6:36:4b:9a:b0:18:84:3e:25:f0:bc:1f:62:43:
64:d1:a3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:14:02 2025 by rpki-client