Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/4o4qwtckYxB1k3pfijkKMyJzKSA.roa
File: 4o4qwtckYxB1k3pfijkKMyJzKSA.roa (raw, json)
Hash identifier: TMscSFlM9MIeP9OpHU345zTo6ZpZYGseXeHBKnJNVkw=
Subject key identifier: E2:8E:2A:C2:D7:24:63:10:75:93:7A:5F:8A:39:0A:33:22:73:29:20
Certificate issuer: /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial: 018CC8030B05048387E985C40B7AD7A9ABE0
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/4o4qwtckYxB1k3pfijkKMyJzKSA.roa
Signing time: Tue 02 Jan 2024 02:31:31 +0000
ROA not before: Tue 02 Jan 2024 02:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12350
IP address blocks: 185.242.60.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:0b:05:04:83:87:e9:85:c4:0b:7a:d7:a9:ab:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Validity
Not Before: Jan 2 02:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e28e2ac2d724631075937a5f8a390a3322732920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:a1:16:a8:0f:a7:99:96:a1:77:b7:5b:c6:
f1:8d:75:f7:72:02:1a:60:06:b7:7b:21:09:ca:74:
f1:01:cc:c1:f5:a5:72:3f:0e:bb:b0:28:be:31:ff:
34:d6:6b:79:27:93:d0:c8:96:3b:b2:64:4f:4c:55:
12:3e:1d:c4:5c:d6:9a:64:2e:59:54:75:01:a9:f4:
c6:17:52:90:e1:6c:1d:58:ac:66:6d:8c:91:0c:e4:
81:54:5d:02:8d:b8:44:63:3b:1a:35:34:7f:73:0b:
f5:df:82:d0:f6:81:a2:e2:6c:34:5d:3b:f8:cb:b4:
4b:e5:80:87:ba:3b:01:87:69:0d:22:a3:22:67:c5:
91:5e:5d:7a:ca:68:68:7c:30:15:cd:03:d8:7a:12:
0f:d6:39:3e:71:24:68:58:a9:1e:80:6b:88:32:d5:
ae:56:11:3e:ac:b1:f0:13:97:f1:a1:95:f6:6f:66:
2e:9c:70:bc:7e:b9:fd:e0:6a:df:a0:e8:9f:b3:f3:
f4:8c:bb:81:f1:6c:4b:a1:cf:4b:94:21:c7:8c:fc:
2b:36:f0:82:ed:4f:5c:c8:d5:f7:95:e8:06:d1:fd:
1d:f1:da:fa:ee:c9:4f:18:05:13:a4:72:89:d5:31:
02:77:64:61:ec:04:f7:be:f1:8b:a1:8d:ba:29:00:
ce:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8E:2A:C2:D7:24:63:10:75:93:7A:5F:8A:39:0A:33:22:73:29:20
X509v3 Authority Key Identifier:
keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/4o4qwtckYxB1k3pfijkKMyJzKSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.60.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:d0:38:2d:9f:bb:1e:b6:5c:29:00:f2:7e:0d:dd:3c:98:60:
89:16:17:2b:d7:00:71:1a:b7:d6:32:6c:bd:e6:72:88:e1:25:
6c:ab:b3:3e:23:0b:1d:2b:fe:6b:71:46:71:50:5c:63:fa:4c:
6f:14:ec:9b:16:80:71:56:c3:ed:24:fa:8f:50:8f:d8:ad:50:
0b:18:95:c8:83:c3:11:4a:9c:f1:ca:b9:80:b4:b4:a8:cc:f8:
91:9e:e6:b2:14:12:48:f1:ae:c7:60:06:39:5b:5b:84:ce:a4:
10:ec:42:b1:15:08:c9:a0:5a:94:0d:98:c9:9d:0b:6b:a3:e2:
c0:9f:d0:e1:2b:a0:75:aa:bf:19:d3:5a:0b:3d:07:f9:f6:10:
85:fc:2b:f0:74:af:d6:b4:66:34:03:63:56:fe:84:db:8f:33:
1b:5f:36:0c:9d:55:0d:f0:89:ed:6b:71:6a:b9:3e:e4:6c:c4:
8b:3c:e1:6c:49:65:c2:12:a8:10:1b:1a:75:a2:12:ad:95:fe:
3d:17:1f:f2:b9:c5:36:29:13:f6:cd:79:8d:da:f5:69:d4:db:
5e:e1:02:e5:41:35:38:3b:25:6d:58:e5:a6:d3:40:61:3a:93:
3b:cc:f6:6e:c0:9f:29:80:9a:f4:9e:28:5e:ce:b5:35:d5:13:
62:3c:0c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:31 2025 by rpki-client