Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/PdP37Qm4ZqcC2rna6Z_qLFkYiDo.roa
File: PdP37Qm4ZqcC2rna6Z_qLFkYiDo.roa (raw, json)
Hash identifier: 4R+4crdpuPfvFJpEf6KneoArLqeBPbd6rhdt9JB0FRg=
Subject key identifier: 3D:D3:F7:ED:09:B8:66:A7:02:DA:B9:DA:E9:9F:EA:2C:59:18:88:3A
Certificate issuer: /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Certificate serial: 0194252235B47327786B4A865A23C957119D
Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/PdP37Qm4ZqcC2rna6Z_qLFkYiDo.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5609
IP address blocks: 163.162.0.0/16 maxlen: 24
185.57.208.0/22 maxlen: 22
2001:6b8::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 21 Jan 2025 14:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:35:b4:73:27:78:6b:4a:86:5a:23:c9:57:11:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3dd3f7ed09b866a702dab9dae99fea2c5918883a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:1e:45:2d:6b:05:14:b6:9a:d6:45:2f:bb:
87:ed:10:b3:8b:eb:53:f5:49:70:a7:99:c5:34:ea:
10:8f:85:a6:0c:b6:42:5a:71:01:19:0f:81:e0:4a:
79:5a:87:e2:59:f1:84:c7:13:81:fd:7e:2b:d4:92:
85:67:3b:58:55:fd:a0:54:5f:50:c8:30:19:9c:df:
1e:89:d6:6e:ac:b7:ef:4b:44:af:d4:eb:4b:dd:10:
15:dc:cd:77:98:e9:72:8d:11:f6:88:b5:d3:0f:6e:
13:11:ed:0a:85:ee:1e:c4:c6:3d:91:ba:d0:b8:44:
15:7f:e6:42:7e:c4:68:f9:58:67:84:65:40:13:e1:
ca:35:48:23:07:2c:e8:1a:1c:da:94:65:09:48:96:
c4:94:6f:2c:fe:c5:a3:6b:bf:d6:b1:46:16:bd:07:
c0:07:d0:bc:3e:44:2d:a6:d9:53:49:97:86:c0:6e:
50:3a:e6:03:ad:b0:f0:6a:a2:26:e5:53:58:f3:ba:
95:87:75:0b:e0:a0:97:e5:4c:4e:b3:8e:a8:18:13:
9a:b3:d3:93:2a:ce:eb:db:fb:f7:69:b8:c3:d5:3e:
a0:73:c4:d4:8e:f1:4d:65:55:81:18:a8:90:6c:7b:
1c:09:f4:c2:d9:bc:3d:55:67:01:13:49:14:dd:ed:
7c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D3:F7:ED:09:B8:66:A7:02:DA:B9:DA:E9:9F:EA:2C:59:18:88:3A
X509v3 Authority Key Identifier:
keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/PdP37Qm4ZqcC2rna6Z_qLFkYiDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.162.0.0/16
185.57.208.0/22
IPv6:
2001:6b8::/32
Signature Algorithm: sha256WithRSAEncryption
87:b9:60:7c:bb:f8:00:92:3c:d1:60:2d:4b:fb:b5:46:43:fa:
e2:5c:6b:df:7a:d8:4f:b9:1e:39:ae:9e:02:4a:e9:df:00:bb:
86:8c:a4:e5:c9:9c:63:4a:d7:49:60:f2:08:a6:9c:84:86:ad:
79:1a:ca:3f:8d:ea:33:46:17:66:b8:0d:07:d9:d3:00:40:8a:
69:1a:cf:38:5d:03:f9:7a:f4:1d:30:46:8c:74:12:8c:51:51:
42:ef:93:20:29:ea:94:21:14:f1:f9:57:ba:4c:6f:25:05:6a:
b8:d2:90:98:4b:17:24:48:fd:a0:bb:10:c1:0e:7a:8a:d7:db:
2e:da:4b:36:e4:1e:eb:9c:0c:a6:b0:0f:77:b5:13:f8:8d:d1:
05:87:07:5e:17:16:db:26:2f:9b:33:e7:8d:80:ee:9d:ec:59:
0e:0e:d7:9d:4b:90:fd:a0:1a:14:ea:32:8b:14:23:76:5a:e1:
fa:26:c9:fe:f0:ca:c8:11:f8:fb:2a:34:86:d0:90:dc:18:85:
af:97:38:5c:54:f7:aa:b3:c0:6b:88:0f:7d:70:b6:15:59:9d:
68:bf:30:ec:9a:2e:27:5e:17:32:27:3e:7b:72:7a:c6:ab:20:
33:85:9d:74:ca:00:20:12:69:dd:80:42:d7:dc:46:11:6e:f3:
52:de:ba:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:25:10 2025 by rpki-client