Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/XbIi8za6xUXBLEAT3qUx2fhlNh8.roa
File: XbIi8za6xUXBLEAT3qUx2fhlNh8.roa (raw, json)
Hash identifier: OvDxg5VMXplMMSz79nH8DRrHsM3VUESvGsMcG/5+7cc=
Subject key identifier: 5D:B2:22:F3:36:BA:C5:45:C1:2C:40:13:DE:A5:31:D9:F8:65:36:1F
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 018CC64B76FF905371B7A2EB0B689B6B4C9B
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/XbIi8za6xUXBLEAT3qUx2fhlNh8.roa
Signing time: Mon 01 Jan 2024 18:31:23 +0000
ROA not before: Mon 01 Jan 2024 18:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16262
IP address blocks: 185.245.42.0/24 maxlen: 24
185.245.42.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:76:ff:90:53:71:b7:a2:eb:0b:68:9b:6b:4c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 1 18:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5db222f336bac545c12c4013dea531d9f865361f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:62:01:2a:80:62:9d:7f:0f:a4:3a:75:4f:
5d:de:84:2d:9b:e3:eb:93:10:b1:8b:e0:a6:17:d1:
bd:da:68:8a:0c:e7:ab:0a:68:da:55:f8:80:d4:e2:
46:fb:c7:ba:a4:c0:8c:4d:58:81:45:c5:47:9c:b4:
35:3e:4f:21:e7:04:78:dc:94:9e:23:0b:96:23:e5:
35:06:89:c3:91:83:44:f9:0b:a0:4b:43:3b:92:48:
77:b7:a1:44:57:dd:44:46:fb:bc:a5:7f:df:42:cd:
04:a8:5c:24:90:17:65:34:38:69:d2:6c:50:da:56:
b3:7a:3a:09:a7:e2:8f:15:2e:a7:e4:51:f0:88:3f:
9f:8a:43:53:07:91:56:29:41:d0:c1:d5:2f:c8:b3:
7e:31:8e:93:1b:df:c3:bb:55:60:8b:d2:c7:d5:d2:
a3:f6:37:12:6a:18:64:5a:85:6d:e7:0c:0b:bc:06:
43:34:f5:a3:54:a4:3d:7e:04:a6:f4:da:f3:9a:ba:
f0:01:17:7e:53:bd:eb:8c:36:5b:a6:d6:b3:f2:2e:
ad:61:4e:5b:df:1b:a8:08:26:bb:4a:a1:d3:47:f4:
2c:7f:ab:c8:59:16:0d:f4:c1:85:1f:9b:78:6b:d1:
63:78:6e:f0:5a:1b:05:1a:ed:af:fa:46:96:fa:a6:
cc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B2:22:F3:36:BA:C5:45:C1:2C:40:13:DE:A5:31:D9:F8:65:36:1F
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/XbIi8za6xUXBLEAT3qUx2fhlNh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.42.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:61:9c:15:d4:6f:a3:4b:a1:95:47:cc:9d:8b:8c:ab:f7:cf:
1b:b6:17:7e:cd:28:97:16:91:36:db:c4:7c:a6:6b:c9:94:36:
bb:07:f2:44:27:cb:df:35:e7:d4:ce:35:62:62:52:60:14:12:
ab:c3:a9:e5:bb:6c:a3:ce:38:2e:bc:98:30:28:e2:7f:0c:9b:
f9:c2:10:69:32:13:cc:20:30:e6:7d:67:ba:9a:b0:bb:25:df:
25:06:b5:40:14:fd:84:f4:bf:f6:86:fd:c6:a7:35:35:8b:42:
a9:94:dc:da:86:11:b6:c8:a5:80:82:90:34:a4:60:5a:0d:a2:
bd:c6:8b:e3:b0:70:14:73:7b:7b:e4:23:13:99:c8:f4:7f:8a:
c1:64:cc:bc:6f:74:7d:11:2c:b9:51:96:1c:b0:a7:b2:ed:a8:
07:62:37:83:dc:81:9e:44:4b:9d:5d:2b:ef:e7:6f:8e:f2:a8:
6f:3e:0d:64:da:1c:06:2e:45:20:de:3f:73:1c:e6:d9:0a:f2:
6b:8e:60:79:c1:8e:ca:db:d4:07:dc:1a:6c:af:f8:50:30:9b:
cd:f2:9b:16:a9:13:01:f5:e5:3f:04:39:db:c7:ad:c1:d3:7b:
d0:d0:72:40:4c:c1:cb:54:e9:6f:4c:33:7a:8b:5b:ab:b9:ea:
b2:29:4e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:56 2025 by rpki-client