Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/Tm1MpcMOm-dZN_mrp56dVd_Zx0k.roa
File: Tm1MpcMOm-dZN_mrp56dVd_Zx0k.roa (raw, json)
Hash identifier: jB1OmrfEwDIMabEp3OS2u8i6E2fabRqkkeAOxIKyEoI=
Subject key identifier: 4E:6D:4C:A5:C3:0E:9B:E7:59:37:F9:AB:A7:9E:9D:55:DF:D9:C7:49
Certificate issuer: /CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Certificate serial: 018CC94C38DEC883B06E201AFEBDE25A8E07
Authority key identifier: 93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/Tm1MpcMOm-dZN_mrp56dVd_Zx0k.roa
Signing time: Tue 02 Jan 2024 08:31:04 +0000
ROA not before: Tue 02 Jan 2024 08:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200603
IP address blocks: 185.79.125.0/24 maxlen: 24
2a13:5740::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 24 Jan 2024 14:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:38:de:c8:83:b0:6e:20:1a:fe:bd:e2:5a:8e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Validity
Not Before: Jan 2 08:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e6d4ca5c30e9be75937f9aba79e9d55dfd9c749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:d9:9b:2a:83:4f:32:92:cf:7c:56:f1:0f:
f8:bf:be:25:d8:a7:73:a8:ac:f0:c2:56:8f:52:d9:
f4:f3:45:fd:ae:e5:13:0e:19:cc:b1:fe:c5:53:4c:
e4:2d:74:f6:90:17:fd:6f:e2:51:4b:ca:58:89:7d:
73:7f:6e:34:1a:f7:5e:79:7d:7e:ad:c0:60:b6:fa:
f7:7b:24:d3:09:93:9c:a5:26:70:b4:f0:c6:dd:50:
ca:1b:04:8d:e2:af:56:d9:1b:62:db:2a:6a:82:ee:
06:dc:04:ba:6f:73:99:c9:26:f9:45:9c:70:f2:fe:
4d:93:e7:43:26:d5:ee:98:8d:74:c9:ef:b5:e7:85:
f7:02:6f:22:c9:b9:63:46:0f:73:76:88:c6:84:e2:
ff:a7:14:c3:32:8b:73:8a:99:f0:cb:10:a7:91:b0:
b7:fa:ab:47:8c:18:5d:a3:8f:f7:c6:90:0a:93:f2:
5c:d1:13:3b:20:6e:04:d9:88:18:71:ee:b9:17:17:
a4:c5:8a:5c:32:75:b5:91:aa:2e:94:40:ba:00:f9:
cc:5c:a0:a8:b2:6d:71:d3:2d:f9:19:ea:8f:90:33:
76:ce:23:df:05:42:ed:59:0d:af:bf:04:aa:a7:9e:
59:2d:40:1c:ea:7c:61:40:83:16:30:c0:e0:3c:f9:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6D:4C:A5:C3:0E:9B:E7:59:37:F9:AB:A7:9E:9D:55:DF:D9:C7:49
X509v3 Authority Key Identifier:
keyid:93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/Tm1MpcMOm-dZN_mrp56dVd_Zx0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.125.0/24
IPv6:
2a13:5740::/29
Signature Algorithm: sha256WithRSAEncryption
06:4e:1c:4a:c3:d3:7f:70:ae:28:db:f5:8f:e5:66:cc:1b:c0:
02:22:9b:8a:eb:f6:0a:12:b3:1f:a7:71:05:05:69:35:64:6e:
be:55:df:d0:af:60:cf:fc:13:af:2c:b1:6c:76:af:d6:86:6f:
54:d1:d2:fe:5b:5d:fc:7e:b8:83:7e:b8:5e:a7:8c:30:25:7f:
a7:b9:87:1b:a5:22:ec:cb:2b:73:b3:87:16:64:24:a5:66:42:
8c:c1:e5:8c:be:e4:bc:91:81:a7:5c:96:75:5c:ee:86:b3:b3:
31:c7:38:0c:ca:6f:29:14:2e:92:f2:31:85:d1:0d:b2:63:bf:
b2:8c:31:00:da:6b:00:61:7c:ae:a5:92:4d:01:61:19:3b:7e:
ea:86:76:46:54:0f:ec:05:83:a3:9c:d2:61:28:3c:39:63:46:
35:80:b7:c9:dc:bd:09:f7:02:32:7d:27:7b:ce:21:ab:8a:98:
fb:38:90:05:4b:f2:02:2b:90:40:59:b8:a3:ac:9c:45:2f:c0:
a7:95:80:42:fa:3b:ed:7c:41:02:8b:27:f2:63:8d:ac:5c:c5:
98:7b:26:6e:78:23:19:79:0a:72:fa:80:30:50:45:3d:a1:02:
68:8c:98:57:f5:75:45:00:a0:92:b0:c0:66:a3:90:fe:1d:d4:
cd:86:0d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:33 2025 by rpki-client