Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/2D0hUAN_RNVdphMiZ1BGhr3XTBQ.roa
File: 2D0hUAN_RNVdphMiZ1BGhr3XTBQ.roa (raw, json)
Hash identifier: iM5q771mecMioVvaEDnsSg6FydEN7+z7Z7IVA0yRGc0=
Subject key identifier: D8:3D:21:50:03:7F:44:D5:5D:A6:13:22:67:50:46:86:BD:D7:4C:14
Certificate issuer: /CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51
Certificate serial: 018CC42466982855B8E4B908DE3D5CC5F224
Authority key identifier: D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/2D0hUAN_RNVdphMiZ1BGhr3XTBQ.roa
Signing time: Mon 01 Jan 2024 08:29:29 +0000
ROA not before: Mon 01 Jan 2024 08:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206584
IP address blocks: 185.182.148.0/23 maxlen: 23
185.182.150.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:66:98:28:55:b8:e4:b9:08:de:3d:5c:c5:f2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51
Validity
Not Before: Jan 1 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d83d2150037f44d55da6132267504686bdd74c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f3:52:73:83:1b:bf:94:93:ea:35:c4:8b:27:
d3:d0:66:80:2d:c5:9c:4e:e7:2d:88:4a:5d:73:96:
1f:80:09:8c:c0:52:f4:de:9b:65:f7:b4:ae:25:0b:
f8:ee:a9:c5:09:a5:61:b4:e0:d2:79:4e:d0:5e:bb:
9e:ab:bc:69:c2:98:31:c7:ff:28:d8:29:c2:c6:5b:
90:77:28:3a:e2:22:46:f7:80:80:e9:c5:91:28:8b:
44:36:4d:58:57:b4:b1:38:c2:69:d6:98:7b:30:fd:
43:d0:5b:77:5b:26:56:a5:3f:17:3d:82:4b:20:d7:
f4:9f:98:b1:bb:7e:cd:11:9e:46:47:d4:68:65:d2:
21:ac:b6:11:b1:90:f6:22:0c:5b:0c:c1:84:44:6b:
f7:6e:45:a8:d5:99:1f:b1:4a:f4:42:4b:c1:82:d9:
c8:36:cf:25:b4:d1:6c:e7:67:d5:bd:0b:e8:eb:63:
c9:1f:55:3a:33:b7:1f:df:67:ee:b9:d6:a9:bb:bd:
fd:bf:00:1b:3c:8f:32:a7:e2:0f:21:2d:6b:d6:c2:
f8:d6:f3:93:65:46:2f:54:61:3e:62:41:08:74:9d:
89:f7:81:ed:ec:fe:ea:c6:f4:d0:ab:7a:e9:64:b9:
77:09:d4:ad:35:42:d8:f3:86:19:4e:52:5e:84:ef:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3D:21:50:03:7F:44:D5:5D:A6:13:22:67:50:46:86:BD:D7:4C:14
X509v3 Authority Key Identifier:
keyid:D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/2D0hUAN_RNVdphMiZ1BGhr3XTBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.148.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:7f:85:88:63:66:76:4a:bc:5f:57:a3:2a:37:79:e4:a4:bd:
c6:80:60:4f:00:89:a9:a3:9e:02:87:e6:a7:bc:e4:13:39:76:
ba:a7:e4:fe:df:ec:ad:c5:a3:26:74:ef:f1:3e:b4:24:24:9a:
ef:09:22:8b:13:c0:6c:10:8e:0f:4f:d7:76:08:70:6f:64:d4:
78:15:84:74:8f:f2:fd:29:72:03:07:b3:7f:6b:ce:d9:c2:79:
9f:bd:59:3c:bf:a8:c6:24:3a:f9:c5:5a:d7:24:d3:9d:52:01:
6f:8a:af:1c:7d:69:b4:83:d9:6c:69:34:35:37:e2:da:f8:df:
b4:f5:85:b9:dc:30:bc:37:3f:57:8b:aa:9d:56:1c:88:94:13:
0b:b5:cf:4d:1c:d7:82:91:f6:0d:1c:d3:c8:13:0c:f9:60:d5:
b2:9e:66:b6:d5:b6:dd:30:c4:c8:dd:ae:db:13:42:46:31:6b:
f8:8d:cf:52:05:ef:78:a5:e5:dd:34:22:56:09:31:6d:63:6d:
f2:fb:3a:22:f1:ee:0f:52:a7:cf:4d:44:8e:98:44:f3:68:82:
a5:32:87:f8:50:3f:db:be:68:9c:c4:06:df:4b:ee:e6:db:30:
35:fb:c9:78:fb:5c:0f:db:a1:84:c4:ac:60:0f:91:e0:e8:e1:
d6:30:88:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:55 2025 by rpki-client