Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/SwiZzNUrYvFa0o_sy-5TpD6hYgk.roa
File: SwiZzNUrYvFa0o_sy-5TpD6hYgk.roa (raw, json)
Hash identifier: hKB4EXBDkh6VcRN4BUOpt166P5tk41nUo/0Rp/GyXck=
Subject key identifier: 4B:08:99:CC:D5:2B:62:F1:5A:D2:8F:EC:CB:EE:53:A4:3E:A1:62:09
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 018CC86FB8CC0C98138D6ABE7DD275F91260
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/SwiZzNUrYvFa0o_sy-5TpD6hYgk.roa
Signing time: Tue 02 Jan 2024 04:30:14 +0000
ROA not before: Tue 02 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61347
IP address blocks: 185.9.221.0/24 maxlen: 24
185.9.222.0/24 maxlen: 24
185.9.223.0/24 maxlen: 24
185.9.220.0/24 maxlen: 24
2a02:df40::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b8:cc:0c:98:13:8d:6a:be:7d:d2:75:f9:12:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Jan 2 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b0899ccd52b62f15ad28feccbee53a43ea16209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:a4:74:38:84:7c:dc:d0:a5:b4:d9:a1:c2:
e4:9e:01:45:66:e5:c2:5a:99:db:92:dc:a0:89:dc:
01:ec:91:e4:6b:23:46:da:ec:da:e7:96:f0:3d:42:
6c:4a:e0:8c:bb:80:bb:2c:5c:6b:a6:9b:83:51:f5:
a2:2e:f4:dc:ee:3f:fe:96:64:67:66:0c:00:28:fd:
62:c4:93:01:e4:72:11:18:b6:51:47:9f:79:fc:72:
34:5e:55:41:27:40:b3:91:3f:77:b5:13:65:ef:08:
ef:de:81:7d:d0:29:fa:8c:f8:3f:b0:26:43:52:e4:
e6:06:21:c2:97:50:49:5d:40:9f:b7:da:2f:c7:28:
86:07:e0:84:8c:8d:74:e9:3a:57:f7:25:21:29:5c:
c5:df:05:8e:97:6f:e7:a0:1b:f6:e9:b8:56:32:a6:
1e:e6:eb:d4:1b:8b:36:05:b2:e3:9b:65:68:59:23:
a4:7c:fd:fd:e6:ea:0a:96:d5:55:b0:64:91:14:6c:
04:36:a2:b9:79:37:f0:00:e5:62:d5:0e:e8:5e:19:
e5:c6:cd:96:1c:33:2b:04:a4:8f:d1:34:f2:2c:0d:
e2:a9:b0:4f:b5:d4:08:ab:99:db:50:18:51:1b:b8:
7c:99:03:0a:3a:e9:61:e6:31:73:5c:db:c6:ce:39:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:08:99:CC:D5:2B:62:F1:5A:D2:8F:EC:CB:EE:53:A4:3E:A1:62:09
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/SwiZzNUrYvFa0o_sy-5TpD6hYgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.220.0/22
IPv6:
2a02:df40::/48
Signature Algorithm: sha256WithRSAEncryption
bf:c8:da:36:51:fb:a3:db:37:fa:15:29:de:60:da:46:21:62:
c7:4a:8f:ad:00:be:8c:3f:3c:d7:b0:a1:7d:e9:81:6e:a3:6f:
eb:92:bb:5f:3f:70:a9:19:de:09:cd:dc:77:19:4c:05:2d:af:
25:4a:04:d2:65:eb:7e:87:6b:57:94:8d:f6:7e:40:76:89:09:
76:df:19:33:3b:52:90:5c:8b:67:15:70:e4:fc:b2:84:59:55:
f3:8d:9c:1e:c9:7e:96:ba:73:b2:b2:31:d5:ac:b3:4a:cf:3d:
8e:f6:3d:cf:26:3e:83:ff:6c:72:ce:96:3b:3f:e9:85:db:ed:
cd:28:0c:9c:1c:9a:84:d2:4b:32:02:43:82:85:e3:2d:7c:e7:
ad:7f:95:64:14:12:34:ed:99:a7:33:74:11:b0:d9:cb:21:8a:
64:9b:32:7e:9d:f0:f3:a1:2a:e4:bf:bc:70:a8:a6:99:74:49:
dc:af:5b:14:77:e3:3e:b7:b5:8d:d3:53:3f:3e:fd:e7:93:21:
15:a0:9a:b8:0a:26:e5:33:af:51:b4:9d:67:c7:90:0e:4f:82:
7b:74:37:89:6d:13:70:7b:09:b7:2b:60:45:de:78:4b:c3:b5:
3a:89:8d:29:05:57:f5:48:17:b2:10:03:90:24:03:5e:a6:f8:
bb:b0:b0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:48 2025 by rpki-client