Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/FxmV-SX1bNWJnwUGRI-sprJ18WU.roa
File: FxmV-SX1bNWJnwUGRI-sprJ18WU.roa (raw, json)
Hash identifier: dOxUIq0o3c0M1ZUBfgQFkeJWp3v2tc3N9CzgG09v2ss=
Subject key identifier: 17:19:95:F9:25:F5:6C:D5:89:9F:05:06:44:8F:AC:A6:B2:75:F1:65
Certificate issuer: /CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Certificate serial: 018CC4939C5FF6C29DEA494F8C465B5AA70B
Authority key identifier: E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/FxmV-SX1bNWJnwUGRI-sprJ18WU.roa
Signing time: Mon 01 Jan 2024 10:30:57 +0000
ROA not before: Mon 01 Jan 2024 10:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57335
IP address blocks: 185.203.206.0/24 maxlen: 24
185.203.204.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9c:5f:f6:c2:9d:ea:49:4f:8c:46:5b:5a:a7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Validity
Not Before: Jan 1 10:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=171995f925f56cd5899f0506448faca6b275f165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:cf:2e:48:b7:c1:d0:b2:2f:ab:5f:d1:3f:
51:24:32:96:78:29:60:53:32:65:af:49:92:b8:9c:
d8:fb:52:44:3f:95:1e:92:df:0f:b7:86:31:88:03:
7c:30:f1:51:74:49:c0:95:ee:32:7e:4a:ce:23:de:
d5:e3:22:f9:a7:94:1c:39:a6:c6:e4:78:a5:46:ff:
50:a5:5a:d6:d2:ff:cb:14:18:c5:b8:c4:17:d6:1a:
76:a3:80:96:30:46:af:29:8b:42:20:71:7f:1a:10:
db:e2:6b:e4:44:e4:be:93:02:78:72:d5:a2:f9:02:
71:2f:b0:94:71:6f:a1:f5:39:00:c7:94:d8:81:5c:
f3:e6:bb:d9:b4:43:3d:81:80:61:66:09:8a:69:69:
fc:f1:ef:07:dc:48:bc:7f:29:3e:85:b1:f2:b2:67:
06:2b:38:40:63:66:ed:7c:fe:6e:71:0a:1c:42:fc:
72:0e:76:50:82:4a:56:a0:bd:7a:10:08:2e:e3:b9:
42:2d:9d:ff:c4:79:93:5b:7e:a0:27:77:a3:2e:e9:
81:23:12:aa:39:60:1f:b6:e3:39:57:db:30:a3:25:
71:a4:c1:da:01:dd:c1:08:2d:48:ad:94:e6:02:94:
c4:97:2d:e9:be:33:54:a6:92:a8:53:9b:72:08:7a:
89:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:19:95:F9:25:F5:6C:D5:89:9F:05:06:44:8F:AC:A6:B2:75:F1:65
X509v3 Authority Key Identifier:
keyid:E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/FxmV-SX1bNWJnwUGRI-sprJ18WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.204.0-185.203.206.255
Signature Algorithm: sha256WithRSAEncryption
65:3c:e2:6f:df:bc:5a:5e:48:17:d0:ef:6b:65:47:06:c8:3d:
cc:4b:49:b0:a6:d5:e8:af:5c:b0:50:c0:9d:0d:59:94:9b:03:
31:5d:a1:bb:1c:42:52:71:60:6f:96:b9:94:f8:da:c0:07:f5:
a4:04:29:9f:10:fa:34:05:86:3f:fb:d9:5c:b2:9b:8e:3a:98:
04:80:04:41:04:ad:f9:fb:fc:c5:95:ed:14:6c:36:44:2a:04:
2d:a0:f0:32:c3:da:18:9d:1d:cc:ab:32:2b:a7:0c:fb:3b:6a:
67:93:5a:49:22:89:5c:d7:21:73:b8:af:01:d3:ed:f7:d5:a7:
a9:a1:7a:f4:1b:9c:e9:0b:b6:80:5b:09:69:32:fe:37:67:a5:
ce:20:1a:f7:2b:d4:cc:9d:36:7c:f7:e7:86:cb:44:9a:07:f1:
c3:a6:d8:f2:00:5b:4b:fa:4f:1d:48:b8:78:92:62:20:90:b2:
cc:0f:38:21:72:8c:ac:9e:0d:64:44:69:4e:d9:d8:76:25:eb:
96:af:3d:12:4f:53:e0:6e:30:31:02:7b:cf:b7:72:94:01:f7:
f7:1f:cc:be:ee:10:fe:6d:4b:fb:68:c4:24:ed:16:a1:6d:7d:
9f:f1:bb:1a:d3:67:a7:e6:7b:26:72:2e:77:fd:8a:bb:d0:7e:
9c:3e:24:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:22 2025 by rpki-client