Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/CXzURgPOXuFEVtnAuEjcglG0jOE.roa
File: CXzURgPOXuFEVtnAuEjcglG0jOE.roa (raw, json)
Hash identifier: fqQe9KPbBueMVvgUiiDXIluJG5cdlZJcFG7wAhjH/jY=
Subject key identifier: 09:7C:D4:46:03:CE:5E:E1:44:56:D9:C0:B8:48:DC:82:51:B4:8C:E1
Certificate issuer: /CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
Certificate serial: 018F9672EA2F01BB975946500CA9EEDE8A94
Authority key identifier: 37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/CXzURgPOXuFEVtnAuEjcglG0jOE.roa
Signing time: Mon 20 May 2024 14:41:04 +0000
ROA not before: Mon 20 May 2024 14:41:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205755
IP address blocks: 185.207.192.0/24 maxlen: 24
185.207.193.0/24 maxlen: 24
185.207.194.0/24 maxlen: 24
185.207.195.0/24 maxlen: 24
2a0b:2740::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:96:72:ea:2f:01:bb:97:59:46:50:0c:a9:ee:de:8a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
Validity
Not Before: May 20 14:41:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=097cd44603ce5ee14456d9c0b848dc8251b48ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d3:f1:73:80:1e:0b:1b:a5:bf:80:34:ac:ef:
f0:8c:41:26:dc:a5:e6:88:f0:74:44:ff:0b:11:62:
0f:c6:66:27:16:52:fe:7a:3a:31:5d:12:24:66:63:
a6:54:f4:85:6a:a3:2f:43:10:03:ce:38:3e:f0:f4:
f1:61:b2:93:29:54:73:86:fd:60:0b:c5:d7:b0:f9:
c9:0e:7b:2e:06:22:96:6b:97:18:28:e5:e0:0f:15:
1e:c7:9a:c3:8b:c1:6c:d7:af:26:9c:29:34:0d:56:
db:f4:bb:9e:6f:9c:c0:72:14:30:6f:ba:6b:00:3e:
62:70:43:db:01:60:16:37:0f:e7:de:60:76:18:2b:
e9:68:9a:b8:b9:f6:b2:af:53:30:6e:fd:fa:dc:5d:
dc:f2:9a:b8:87:63:86:4f:e8:b8:e0:63:fa:60:58:
a0:50:8e:36:9d:d9:49:a8:25:db:13:b6:16:14:58:
71:89:10:94:99:df:1e:89:b7:cd:f6:a0:f7:cb:91:
52:f9:4b:0b:eb:33:9a:71:54:48:94:73:ff:e2:fd:
a8:4b:18:de:56:31:d4:19:fc:ec:88:e1:03:dd:da:
b5:d6:23:8d:fc:00:99:fc:a9:6d:41:07:e4:0d:be:
7e:9e:95:f7:60:c2:24:a3:0e:f2:97:74:83:64:21:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7C:D4:46:03:CE:5E:E1:44:56:D9:C0:B8:48:DC:82:51:B4:8C:E1
X509v3 Authority Key Identifier:
keyid:37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/CXzURgPOXuFEVtnAuEjcglG0jOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.192.0/22
IPv6:
2a0b:2740::/48
Signature Algorithm: sha256WithRSAEncryption
37:93:91:74:a8:0b:02:fc:2b:6b:06:a0:78:64:e9:b9:03:d1:
89:59:6c:6f:07:54:70:e5:14:4b:ec:35:f2:33:a9:fb:9f:03:
39:a5:94:3e:1a:aa:35:e1:80:58:fb:a7:7a:96:b5:45:31:2a:
4f:b6:97:92:f7:7e:d0:ad:2b:58:d2:69:49:cf:15:a4:da:e5:
fd:5f:03:97:b3:67:da:de:71:c0:83:2a:c6:57:df:82:cb:43:
e8:24:df:01:f6:65:03:66:e1:e5:f5:ca:18:92:a0:0c:96:96:
5d:d2:f9:ec:3f:df:09:db:56:34:a2:35:0b:57:55:fe:75:e3:
f8:17:b4:80:6d:b4:47:30:fc:03:75:9e:32:c4:e9:56:20:91:
42:8f:c5:96:00:fe:1b:ed:8a:13:ae:46:5a:13:5e:a6:f8:d3:
c6:5a:9c:35:d8:24:69:9b:ee:5a:d2:38:b5:24:e6:88:64:7d:
14:a8:de:a5:37:78:40:42:bb:ce:3a:fb:05:c9:12:dc:7f:78:
9f:f8:ce:f1:e0:35:8a:b4:4f:c2:5c:23:dd:07:7f:7c:2d:3a:
d2:43:84:fd:03:b6:50:9a:bb:cc:58:69:92:94:6a:6b:43:4b:
12:21:b0:df:23:c3:e2:81:56:e2:ab:6a:84:58:5a:45:fa:7c:
c3:94:75:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:50:55 2025 by rpki-client