Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/T_ul4MK0wBzYBgcrjHUeEo9OG9c.roa
File: T_ul4MK0wBzYBgcrjHUeEo9OG9c.roa (raw, json)
Hash identifier: u8NoCPz1DsIOjqFAt+pDbT2IKFgZJZiWhuaBVBtZGdE=
Subject key identifier: 4F:FB:A5:E0:C2:B4:C0:1C:D8:06:07:2B:8C:75:1E:12:8F:4E:1B:D7
Certificate issuer: /CN=b930da21518184145f6d7621b5a13bd54035ac83
Certificate serial: 018CC6B801700634A0E4467DDAB32EFAE810
Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/T_ul4MK0wBzYBgcrjHUeEo9OG9c.roa
Signing time: Mon 01 Jan 2024 20:29:56 +0000
ROA not before: Mon 01 Jan 2024 20:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202876
IP address blocks: 185.152.28.0/22 maxlen: 22
2a07:7d40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:01:70:06:34:a0:e4:46:7d:da:b3:2e:fa:e8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83
Validity
Not Before: Jan 1 20:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ffba5e0c2b4c01cd806072b8c751e128f4e1bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:53:b4:2b:7e:32:c8:ea:d1:d7:05:07:1f:
89:c7:04:56:16:fe:1e:2f:7f:fd:5b:f5:6f:5f:aa:
45:8a:8f:79:05:18:7d:25:bb:32:e0:09:11:fc:7e:
5a:94:0d:95:fa:b9:d1:20:1c:bc:bb:e7:50:ec:ba:
42:e9:fd:72:03:a5:c4:85:43:e6:10:bc:b3:28:d3:
66:13:31:76:13:10:53:5c:d6:2a:99:6c:39:9c:85:
8d:92:a0:3e:01:25:4a:1e:62:dd:5d:33:81:07:ba:
ec:ba:3d:c9:a6:cf:7f:cd:14:c4:28:9f:6a:de:35:
1c:b6:ed:4a:7c:4b:e1:09:0d:92:81:2d:c8:02:9a:
0b:de:f5:dc:2c:5c:16:7d:29:ac:83:00:a8:37:0e:
c9:b4:2a:96:a0:9a:96:73:58:13:76:ff:0b:b7:dc:
c4:ab:33:f7:b5:6d:15:02:2a:c9:44:ef:05:7d:81:
c4:75:7e:a8:5f:1b:db:7d:ef:7b:55:d0:cb:81:56:
ca:72:2f:3d:47:76:95:3d:51:00:46:f0:c8:ff:74:
c0:30:8a:d1:22:8c:cf:00:43:68:78:60:e2:a2:1d:
21:2a:fb:b9:7f:48:6e:3d:d2:d8:6d:67:ab:63:bb:
88:a8:d7:04:11:90:48:6b:54:22:4e:ad:c3:86:2f:
7a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FB:A5:E0:C2:B4:C0:1C:D8:06:07:2B:8C:75:1E:12:8F:4E:1B:D7
X509v3 Authority Key Identifier:
keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/T_ul4MK0wBzYBgcrjHUeEo9OG9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.28.0/22
IPv6:
2a07:7d40::/29
Signature Algorithm: sha256WithRSAEncryption
0e:94:64:9b:07:e9:8a:34:32:17:ce:0e:04:00:12:0c:88:57:
a9:d5:3e:72:00:74:71:ef:a4:27:66:d2:88:a7:6e:54:e4:1d:
00:7e:12:b6:be:3d:2d:d9:c1:78:a1:1a:76:e8:3c:84:e3:c1:
17:ee:81:e1:e6:b0:cf:16:93:7e:eb:52:34:bb:4e:6e:d5:7d:
a3:0c:16:b4:53:1a:89:be:60:51:6e:1c:1b:29:04:2c:05:09:
a3:af:51:d2:06:3f:d9:1b:fa:e3:b1:59:1e:3b:6b:5e:25:55:
56:d1:4d:ea:59:a2:94:b3:8a:ff:7d:47:e8:08:eb:74:69:74:
b5:3b:24:c4:85:16:a4:ad:ae:a2:9e:8f:63:f7:02:da:bb:ff:
65:f3:bc:d8:d9:e9:a8:61:71:15:b4:01:5f:cc:12:5b:63:bd:
f1:10:0b:5e:ad:37:76:ee:ae:a6:e0:fe:ca:6f:7d:35:ce:3b:
5c:3b:93:1b:4a:7a:ae:88:46:f3:2d:48:f3:0d:ee:d0:72:9c:
8e:7f:8e:99:6f:09:0f:c6:e8:66:83:90:dc:19:0d:82:55:3d:
63:6a:6c:d0:9d:35:14:24:e7:72:b4:d0:c5:68:ea:fa:22:8c:
39:d6:88:96:6d:aa:4b:8e:ba:f3:c1:df:f9:2d:b5:62:e5:04:
f4:3d:30:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:31:27 2025 by rpki-client