Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/rRq1IelZCJi4hlgxG-hzgFcg-Fs.roa
File: rRq1IelZCJi4hlgxG-hzgFcg-Fs.roa (raw, json)
Hash identifier: buuTLXygQxGWsKMZRpr6sIYckUvLmtpUFrQy12Fq8l8=
Subject key identifier: AD:1A:B5:21:E9:59:08:98:B8:86:58:31:1B:E8:73:80:57:20:F8:5B
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 018CC727707FB84153F7D5CD5D53035AE463
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/rRq1IelZCJi4hlgxG-hzgFcg-Fs.roa
Signing time: Mon 01 Jan 2024 22:31:39 +0000
ROA not before: Mon 01 Jan 2024 22:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7138
IP address blocks: 185.14.85.0/24 maxlen: 24
185.14.84.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:70:7f:b8:41:53:f7:d5:cd:5d:53:03:5a:e4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Jan 1 22:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad1ab521e9590898b88658311be873805720f85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7c:43:f7:b3:96:2c:fa:7f:7d:ed:85:85:b2:
bc:80:33:30:80:c7:e5:56:1f:1f:1e:e8:15:f5:b1:
9d:98:57:c1:98:ee:24:ca:cd:f1:26:63:c6:78:49:
d6:ee:a8:8c:d1:04:22:ed:65:a9:e6:12:92:af:95:
fe:05:51:f8:e4:51:ee:2c:26:20:0a:20:97:f6:10:
48:2e:89:65:84:35:bc:c8:b9:4a:f5:3f:80:cd:f9:
f1:e8:65:2a:b5:a2:80:2f:09:b4:4f:1d:64:3b:9e:
55:07:f2:01:89:37:ea:16:b8:6e:7a:ea:3d:54:99:
5b:1f:45:46:67:b5:7d:ff:19:48:4f:69:a5:d9:23:
19:48:35:90:53:25:4e:bc:d1:95:9a:85:a4:a3:3c:
3c:3f:85:b5:5e:53:f6:6f:af:74:a4:45:d4:8d:a3:
bf:7d:9a:9a:57:62:08:5c:b1:b5:a4:8e:0c:6c:6c:
f0:90:ee:a8:a2:92:b9:65:b5:78:34:c2:b2:90:31:
08:22:00:94:d3:39:2c:5d:f0:a6:89:e0:73:1a:25:
bb:27:13:a5:12:6a:bc:a2:b9:18:37:80:dc:f4:6c:
48:0d:46:29:11:09:f1:72:ba:ec:66:9d:2c:78:5e:
c8:fa:4a:55:4b:77:5c:0e:6b:64:c6:68:42:a1:52:
04:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1A:B5:21:E9:59:08:98:B8:86:58:31:1B:E8:73:80:57:20:F8:5B
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/rRq1IelZCJi4hlgxG-hzgFcg-Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.84.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:f0:da:b2:d0:cc:76:bd:c7:0f:17:e7:e2:a9:97:6c:e8:f1:
f7:ed:57:56:94:64:ea:8e:3e:ce:18:fc:09:66:eb:c7:1e:31:
98:c8:2d:fd:ba:69:a4:fa:8e:fe:66:39:fb:ac:a7:27:5a:0b:
47:88:d6:b5:69:59:1d:e8:6a:89:ab:6b:72:3f:a3:6f:35:67:
13:c4:1e:f9:6b:d1:fd:88:01:2e:48:cf:57:76:32:b1:1f:31:
cb:e4:06:3b:fd:7d:11:6e:04:25:dd:c3:3d:fe:b0:9e:6c:2f:
39:93:16:fd:c1:94:05:bb:35:36:eb:57:8a:62:79:14:e7:28:
c4:13:c0:71:01:53:9b:ba:4f:91:f3:63:49:a8:6a:aa:c4:a5:
0c:ad:d4:14:ce:d9:8b:74:e3:3a:af:10:2a:29:b8:66:df:63:
f5:89:04:65:be:e4:b2:88:b9:ff:dd:bf:1b:0b:82:2a:86:d2:
d6:c4:de:14:a7:82:0a:ed:c2:23:45:a1:14:f5:57:fe:75:71:
27:8c:bd:c0:ab:bd:2a:8a:f0:2d:8d:24:30:ea:e5:e6:e2:2b:
f9:4a:2f:63:e0:13:76:8b:78:31:ff:42:b3:64:c7:9d:b3:dd:
a5:cb:90:e8:eb:14:e7:69:92:36:1f:9e:dc:54:6a:c2:fb:a7:
06:56:7c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:13 2025 by rpki-client