Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/p8F4-GVzz5862Ng7caeIfHg2f1E.roa
File: p8F4-GVzz5862Ng7caeIfHg2f1E.roa (raw, json)
Hash identifier: RC7n+MIiotg8/oTX4U2DNiqMAP2aJZOORGVRW8iynt8=
Subject key identifier: A7:C1:78:F8:65:73:CF:9F:3A:D8:D8:3B:71:A7:88:7C:78:36:7F:51
Certificate issuer: /CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Certificate serial: 018CC26CF24726D5780091C7C66004A6308E
Authority key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/p8F4-GVzz5862Ng7caeIfHg2f1E.roa
Signing time: Mon 01 Jan 2024 00:29:28 +0000
ROA not before: Mon 01 Jan 2024 00:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 185.189.173.0/24 maxlen: 24
185.189.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jun 2024 10:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f2:47:26:d5:78:00:91:c7:c6:60:04:a6:30:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Validity
Not Before: Jan 1 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7c178f86573cf9f3ad8d83b71a7887c78367f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1f:4c:25:48:f3:d0:3c:d1:ed:c1:18:16:a6:
99:df:83:fa:ce:ce:14:08:1e:86:6a:23:2f:bf:1f:
47:c1:5e:cb:13:a8:52:8c:d2:05:af:50:49:1e:8a:
c0:cf:3e:a4:7f:f7:90:b6:61:6d:65:1f:66:81:01:
21:05:66:cc:53:ee:ed:b1:09:14:21:9e:4c:1b:a5:
eb:9d:7e:38:d7:e5:5e:2d:cf:12:74:21:f0:ca:5c:
d6:a5:ac:de:34:80:8e:8d:97:a5:97:89:62:34:fd:
ea:05:e9:22:23:1c:b6:89:aa:56:2e:95:b3:41:86:
42:d8:c4:05:b4:48:c4:d7:39:09:aa:65:cd:8f:2e:
fd:49:af:b9:9e:55:14:8f:27:21:50:f6:b2:97:4c:
81:50:21:a5:52:c4:a1:aa:4d:f3:dc:6d:7f:2e:3e:
0a:64:95:44:c5:83:cc:37:e3:a1:a3:3b:13:54:8f:
25:1b:7f:7a:12:d6:c1:1e:2b:0d:7b:1b:07:9a:7a:
1d:3c:6c:d2:6e:cb:97:99:bb:d0:14:04:21:1c:a9:
d2:b2:f9:64:b1:59:b6:03:c7:ca:26:e6:65:d9:9f:
80:89:9a:35:ed:ba:58:fa:db:f2:bd:ae:8a:ec:8f:
df:10:65:bd:b1:75:8e:77:f1:25:75:af:4d:65:02:
45:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C1:78:F8:65:73:CF:9F:3A:D8:D8:3B:71:A7:88:7C:78:36:7F:51
X509v3 Authority Key Identifier:
keyid:A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/p8F4-GVzz5862Ng7caeIfHg2f1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.172.0/23
Signature Algorithm: sha256WithRSAEncryption
44:5c:69:f4:c4:0f:14:91:e9:1a:1f:88:40:a4:6b:ff:be:25:
8f:c7:75:9a:6f:f5:97:33:21:46:16:95:f1:c2:4c:39:5f:a0:
58:1f:cc:87:f0:28:21:b6:00:1f:f7:d3:61:77:31:22:ca:f2:
07:0e:41:9f:ea:df:54:fb:87:13:a1:75:54:e9:df:48:bc:14:
1a:0c:5c:25:56:70:d4:39:7d:70:d5:71:8e:41:5e:48:9a:66:
eb:01:60:82:74:6b:13:6a:ce:b7:70:7e:e7:c6:6e:e0:ca:ec:
c6:31:8f:2d:7e:88:52:19:f5:1b:3e:c6:33:e4:f0:17:66:72:
38:dc:e7:7a:b8:95:5d:22:02:53:6a:f8:51:99:53:13:c8:e6:
f3:4c:67:f1:40:3c:60:01:f9:52:5d:d0:1a:a7:04:58:fd:59:
fc:52:48:77:45:a9:de:23:7f:6d:40:92:5f:da:3f:1c:25:87:
f0:d0:4a:82:83:e2:46:46:00:69:0b:c1:e5:dd:80:1e:47:38:
eb:84:c9:8b:e7:97:43:89:a5:62:83:15:19:e9:be:81:18:8d:
d8:9d:7d:56:bf:5a:9b:4a:c7:4f:5e:8a:2e:d7:61:4c:f2:8a:
3b:1f:97:03:97:f0:69:1d:ba:a0:43:7f:ab:a9:c9:e4:d0:f1:
7e:5d:bd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:13 2025 by rpki-client