Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/hT3ViMbXb_LrKhuiSpoqFmrcMCQ.roa
File: hT3ViMbXb_LrKhuiSpoqFmrcMCQ.roa (raw, json)
Hash identifier: FSGIliLJrgmQF4EiJqgEcoHONosmzXQhYlsO5z6IXR8=
Subject key identifier: 85:3D:D5:88:C6:D7:6F:F2:EB:2A:1B:A2:4A:9A:2A:16:6A:DC:30:24
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019424454A69AC024F4304EEA0ED76DEDB90
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/hT3ViMbXb_LrKhuiSpoqFmrcMCQ.roa
Signing time: Wed 01 Jan 2025 23:48:28 +0000
ROA not before: Wed 01 Jan 2025 23:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 176.125.251.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Jan 2025 19:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4a:69:ac:02:4f:43:04:ee:a0:ed:76:de:db:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 1 23:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=853dd588c6d76ff2eb2a1ba24a9a2a166adc3024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:b1:61:0e:f8:91:ec:b1:cc:66:21:db:1d:
e5:1b:aa:c7:fd:19:ba:29:0b:3c:8b:20:b3:1d:75:
33:85:03:f2:4a:05:dd:60:5d:9a:0b:88:be:ad:83:
55:f2:ea:2b:d1:d3:c9:d6:a2:cd:a3:e1:7d:1a:99:
69:43:a2:1d:f3:4a:bf:19:0b:b5:7e:8b:f8:d9:77:
34:76:37:72:c2:d8:3d:a0:6b:57:b5:6a:90:f6:11:
66:00:b1:71:00:eb:22:d9:8f:b3:6d:f0:77:99:17:
db:72:e0:04:be:22:08:6b:d5:66:ec:37:c1:9c:87:
23:98:dd:b4:8b:c0:f8:18:34:91:29:04:36:4b:06:
6a:0a:ce:20:5f:d0:a1:87:7f:ee:4e:45:6c:90:6a:
84:38:5c:72:c5:ae:3b:f7:06:4c:0b:0c:2e:b2:95:
7e:48:e5:48:36:52:de:14:93:3c:06:80:28:31:98:
ff:58:c6:e3:e8:4f:71:48:67:81:63:af:89:40:f2:
2f:d3:5e:c8:df:e3:e1:eb:83:42:62:7e:86:03:89:
59:a7:9d:de:89:aa:82:20:b2:97:39:bf:40:8e:1f:
d8:0b:0b:c5:6a:80:48:24:dc:fa:95:ac:38:f9:90:
69:ac:7c:e6:b4:1b:e7:7b:31:b1:2d:4e:9d:fc:22:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3D:D5:88:C6:D7:6F:F2:EB:2A:1B:A2:4A:9A:2A:16:6A:DC:30:24
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/hT3ViMbXb_LrKhuiSpoqFmrcMCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.251.0/24
185.199.213.0/24
185.221.26.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e7:20:af:ed:1b:ba:aa:0b:8a:d4:91:6b:c3:1b:87:5a:6f:
4d:f7:f5:39:85:1b:50:ce:01:67:bd:0d:a3:34:6f:46:60:20:
05:7e:84:14:5f:bb:55:89:0a:b3:78:8c:60:f8:36:e1:66:14:
d0:b0:60:c1:a9:84:41:45:fa:79:f8:1b:32:39:45:fd:4e:df:
99:ec:4d:0d:e9:2c:75:ff:b6:04:27:93:2a:1a:32:4c:a0:8f:
f7:c8:8f:75:17:8e:84:bc:cc:de:ac:b9:64:3a:90:6a:5b:cc:
d4:56:32:cd:6d:27:21:94:b9:09:02:e5:ed:b3:2b:b1:32:42:
71:30:fc:b2:16:76:ea:9e:9c:27:61:bc:85:07:4d:5e:1e:cc:
43:67:c9:d6:d4:20:db:14:0e:5b:a0:05:04:fc:85:36:a1:7d:
8c:2a:a5:7e:1a:18:12:c9:23:d2:f7:1a:a8:b3:82:5e:5c:2b:
5c:e5:65:8a:b2:2c:ce:00:94:44:2f:43:8d:46:95:10:1a:49:
81:8a:93:6e:4c:15:f6:0b:64:fa:a8:51:22:2f:4c:0d:01:35:
16:07:b9:f6:4e:86:84:38:44:e8:6a:29:d4:71:ee:d9:a7:f0:
c1:5a:ce:6c:db:c9:a7:2f:a3:c8:eb:29:12:b4:80:fe:e1:de:
a2:dc:c9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:09:57 2025 by rpki-client