Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/76U4UAF1w-w21bx7k9bcycCu7Cc.roa
File: 76U4UAF1w-w21bx7k9bcycCu7Cc.roa (raw, json)
Hash identifier: HSbx4ngFD08eWrYvnbRAH2Sh+/HU/KQ53XR/j75Yw5U=
Subject key identifier: EF:A5:38:50:01:75:C3:EC:36:D5:BC:7B:93:D6:DC:C9:C0:AE:EC:27
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 018CC6B9364513190C11AFEDFBB2269FA142
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/76U4UAF1w-w21bx7k9bcycCu7Cc.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50904
IP address blocks: 185.18.192.0/22 maxlen: 22
31.216.224.0/21 maxlen: 21
2a03:d540::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:36:45:13:19:0c:11:af:ed:fb:b2:26:9f:a1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efa538500175c3ec36d5bc7b93d6dcc9c0aeec27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4a:01:fb:55:39:65:96:b0:b4:6c:5e:2f:09:
cd:e2:61:e6:58:19:ad:48:47:31:70:7c:85:69:8d:
d2:31:e4:d6:71:83:5c:33:78:03:ca:60:aa:2a:96:
de:22:11:b3:77:b1:32:bb:52:74:bb:49:94:44:03:
5e:14:71:c0:c6:48:bd:1d:39:be:ad:61:d7:87:88:
ae:ce:f7:21:94:87:19:23:d4:21:a2:96:ad:e6:a1:
c5:37:3c:2a:08:15:5c:77:74:54:57:5a:4f:bf:a1:
2c:1a:e1:06:33:59:be:b3:9c:00:fc:a6:17:54:b3:
f8:ec:39:f9:4d:98:96:ae:cf:68:02:01:06:97:f8:
7f:2c:de:f7:d2:5d:c4:b5:3b:13:a1:71:77:fa:95:
9c:83:8e:64:6c:36:78:1f:85:76:3c:9d:45:4e:8d:
eb:5e:46:ed:8b:dd:68:5d:01:fd:a8:3f:0b:ab:63:
20:20:53:f0:5f:53:9f:6f:bf:fc:a2:90:c3:55:10:
bf:bf:21:25:7e:ce:12:f1:55:75:61:14:2a:09:3a:
15:30:f4:2a:3b:06:d1:e1:6a:57:34:bb:fb:ca:fc:
fb:78:b1:c9:f6:e6:8f:11:2f:07:80:d8:2b:55:74:
f9:80:3a:9f:98:1b:6e:a4:9f:dd:46:30:78:38:99:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A5:38:50:01:75:C3:EC:36:D5:BC:7B:93:D6:DC:C9:C0:AE:EC:27
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/76U4UAF1w-w21bx7k9bcycCu7Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.224.0/21
185.18.192.0/22
IPv6:
2a03:d540::/32
Signature Algorithm: sha256WithRSAEncryption
1b:80:76:27:4b:ea:f2:30:2e:54:34:d0:07:aa:0c:90:58:e6:
7d:fb:4c:f2:b8:de:70:83:09:f1:68:7e:43:4d:42:92:ae:c1:
27:3f:22:b6:ed:d3:7a:51:26:03:99:4e:3a:dd:62:e0:af:b5:
1d:7a:2f:13:ae:a1:ca:e9:0e:5b:60:28:75:96:b3:e6:c1:3d:
b1:65:ce:37:c5:4d:ec:5b:1f:02:00:9b:06:fe:63:1a:f6:3c:
0b:9d:3d:a2:20:6a:4d:b3:b1:19:fc:9d:cb:cd:e5:b6:84:f4:
4a:d0:11:33:fb:57:4b:03:66:a6:17:4f:a3:0d:4a:0d:74:b5:
5e:6a:83:a6:cf:f5:2b:48:24:0b:79:08:35:07:1a:a4:ad:42:
1c:42:f7:d5:f6:60:d6:35:ec:57:9a:92:ea:be:8a:1a:77:22:
93:88:f3:6f:07:ce:9c:10:d2:9c:82:73:cd:1d:87:31:a3:96:
1a:a2:87:19:d6:a0:dc:f1:7a:7e:f4:f1:70:44:b2:8c:86:97:
8a:ff:be:f7:02:79:ed:d1:92:e8:4a:8f:79:1d:9e:93:e5:b3:
38:e9:bf:ba:0b:08:9c:dc:60:27:8a:53:6c:dc:cf:9a:07:3b:
04:67:eb:c5:b3:b1:73:38:6b:87:ab:ef:d2:4a:9d:20:b6:77:
7f:fb:4e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:13:10 2025 by rpki-client