Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Z_hoMfAgTHrm3fxpYwpjot9Y7Wg.roa
File: Z_hoMfAgTHrm3fxpYwpjot9Y7Wg.roa (raw, json)
Hash identifier: 2NONMMh5PcF0A6zAbm+NBCqudxJaFaKoK2ZWquvvLGo=
Subject key identifier: 67:F8:68:31:F0:20:4C:7A:E6:DD:FC:69:63:0A:63:A2:DF:58:ED:68
Certificate issuer: /CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Certificate serial: 018CC5DC5F922AFD57CBA0BEE4C0042AAAC2
Authority key identifier: 11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Z_hoMfAgTHrm3fxpYwpjot9Y7Wg.roa
Signing time: Mon 01 Jan 2024 16:30:03 +0000
ROA not before: Mon 01 Jan 2024 16:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202040
IP address blocks: 185.54.76.0/22 maxlen: 22
193.141.27.0/24 maxlen: 24
2a04:d140::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:5f:92:2a:fd:57:cb:a0:be:e4:c0:04:2a:aa:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Validity
Not Before: Jan 1 16:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67f86831f0204c7ae6ddfc69630a63a2df58ed68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:df:56:06:57:09:de:a0:fa:8c:49:f2:47:
39:95:77:49:f9:e0:5a:78:7f:92:ee:c0:b1:10:67:
f6:02:70:1c:43:00:d5:ba:d6:b0:94:dd:30:64:72:
0a:0b:8d:7c:6d:1c:49:22:81:d2:2a:08:38:4e:8a:
df:83:3e:ce:78:0e:f7:d9:97:6c:92:f5:a0:c8:79:
9e:e8:f0:98:53:a6:4d:b1:84:10:98:6b:c5:fa:f5:
74:8f:af:0a:10:d8:98:80:34:8b:94:6f:e2:59:98:
67:9f:28:72:ab:7d:43:98:dd:bb:3d:5b:c2:38:6a:
e9:ec:06:76:0d:17:6b:ed:3a:23:b0:6d:2d:81:6c:
10:7d:1d:27:88:a6:79:dd:36:61:69:df:7f:6e:80:
2c:f7:72:cf:69:74:94:22:5f:39:f2:69:86:58:63:
53:40:40:d7:f7:a4:d9:4c:6d:fd:5b:8c:2e:c3:47:
d8:21:25:9e:c4:8f:73:13:ec:34:14:1e:9a:44:60:
8b:dd:fd:c9:92:58:5e:70:62:1a:e2:1d:0d:25:52:
26:4d:ef:06:26:db:e9:dc:24:9a:de:d8:65:6b:33:
9c:9e:7f:f0:34:8d:b6:68:4a:33:6b:e7:ec:88:df:
a6:2b:7b:ce:45:2f:da:1e:00:f8:78:16:2a:64:e0:
d7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F8:68:31:F0:20:4C:7A:E6:DD:FC:69:63:0A:63:A2:DF:58:ED:68
X509v3 Authority Key Identifier:
keyid:11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Z_hoMfAgTHrm3fxpYwpjot9Y7Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.76.0/22
193.141.27.0/24
IPv6:
2a04:d140::/29
Signature Algorithm: sha256WithRSAEncryption
b8:dd:db:67:49:09:04:ca:e7:6f:55:3c:81:ea:77:ea:c6:c5:
8a:42:43:b2:ca:30:3d:d7:fa:c6:4b:83:1d:7e:b2:97:69:f3:
b2:42:71:c8:a9:1b:72:3c:dc:54:52:0a:ce:d8:6d:d2:e6:2e:
59:c0:47:ab:a4:4d:ec:09:94:e5:7a:46:22:fd:06:be:a1:fd:
2b:46:ff:77:3e:28:dd:c6:67:c0:1d:2e:56:fc:0d:ea:d2:e2:
03:92:c6:1a:24:a8:2e:09:56:17:7c:90:7d:9c:a9:a0:ab:87:
e9:19:e8:3a:d0:02:13:a9:6c:06:e5:2a:48:21:30:1e:3e:30:
b3:ed:27:02:38:2b:28:c7:64:e1:fe:2a:13:9d:8e:b6:b3:4b:
89:c2:37:79:bd:a4:e4:8e:ac:97:7c:af:33:9d:3e:05:a8:ba:
e2:b6:ad:9f:12:f3:73:2b:74:9b:4e:cd:fa:81:c6:75:b9:2a:
b8:22:f5:bb:0c:32:27:1a:1e:36:6c:70:71:b2:3d:b8:5b:36:
a3:7b:b2:5a:3c:bc:ea:47:44:0f:01:e1:f7:03:90:e9:4a:21:
4c:d9:ad:9d:38:c4:ba:dd:53:d3:f1:81:63:60:20:a5:17:7d:
c1:d5:37:0b:26:04:88:4e:ba:6b:17:a0:ad:32:4b:a3:bd:a4:
56:3e:98:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:50:36 2025 by rpki-client