Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/RGsOCmNIggmun0hW430axUp84IA.roa
File: RGsOCmNIggmun0hW430axUp84IA.roa (raw, json)
Hash identifier: dQzGeWQLTSJ/XBolCVsR/FxixXuafSWcGZBSjol1dOI=
Subject key identifier: 44:6B:0E:0A:63:48:82:09:AE:9F:48:56:E3:7D:1A:C5:4A:7C:E0:80
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 019422FB5EAAE2AC5FBF83811E5CF069FD4C
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/RGsOCmNIggmun0hW430axUp84IA.roa
Signing time: Wed 01 Jan 2025 17:48:06 +0000
ROA not before: Wed 01 Jan 2025 17:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.192.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 11:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:5e:aa:e2:ac:5f:bf:83:81:1e:5c:f0:69:fd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 1 17:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=446b0e0a63488209ae9f4856e37d1ac54a7ce080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:66:2a:37:23:53:74:0d:79:75:73:7e:4b:
36:63:c0:b5:8d:fc:cd:b9:fb:a8:6c:31:9b:77:bf:
f6:21:28:1e:df:20:b1:7d:02:5f:bb:59:d5:b0:87:
d2:52:3f:81:0a:80:63:f7:5e:c9:12:7c:06:c6:ac:
8e:65:50:9a:7e:77:b8:38:f0:c5:9a:7c:eb:34:e0:
62:46:1a:d2:6c:1a:fe:40:e6:06:6a:33:bc:f6:b5:
da:f4:18:94:c6:6a:3b:1e:53:cc:e8:9c:81:05:9a:
32:ec:97:76:92:74:41:30:96:77:32:67:08:f8:cc:
54:f0:58:71:cd:17:23:c3:51:06:4a:48:8a:e3:f5:
d4:4a:83:54:a8:27:4c:19:f4:a0:1c:d4:14:05:1e:
d1:20:80:6c:92:d3:6f:1c:62:1b:a5:77:e0:9f:2a:
2c:1d:1b:01:04:0e:4e:89:e7:89:66:90:07:fb:f2:
37:dd:8f:e6:ce:5a:d7:98:cb:d0:bf:41:e6:1c:91:
5b:16:10:bb:d5:2b:3a:72:30:cf:a2:b4:3d:9f:f3:
38:84:9f:52:68:df:19:b3:1b:0e:6c:55:11:f3:3b:
3f:28:65:68:22:a4:09:8c:79:84:d4:a2:ba:f4:ad:
ef:2c:08:aa:04:6f:29:28:35:1a:53:57:1f:6e:bd:
24:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6B:0E:0A:63:48:82:09:AE:9F:48:56:E3:7D:1A:C5:4A:7C:E0:80
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/RGsOCmNIggmun0hW430axUp84IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.217.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:78:13:21:b5:a8:89:ae:8a:76:10:b0:c5:1b:31:63:83:9b:
3b:94:5d:e8:88:a5:63:c3:38:21:98:af:78:0b:93:4a:98:66:
aa:e1:93:eb:5d:f9:5b:71:d9:97:d9:4e:f6:e4:42:36:f8:e9:
a9:2b:43:6e:ac:c3:89:b6:69:b3:73:39:f1:dd:d4:05:c1:d6:
aa:96:22:80:61:d0:51:af:dd:a4:06:37:87:c6:fe:3c:f6:8c:
53:e4:fa:f3:43:bf:7f:da:53:a0:31:35:2b:7c:df:73:4b:0f:
72:dd:f9:4f:2c:f9:d9:d8:e4:20:9a:37:71:8d:16:b0:85:9a:
fd:c3:2f:72:21:f2:43:d6:be:b2:f3:26:58:91:78:cf:4d:47:
aa:ae:69:8c:d8:f2:c5:a5:0c:40:aa:e0:60:cb:f1:19:73:f4:
f5:67:77:5b:03:a1:d4:fd:34:78:ce:1c:4c:ad:56:f7:39:59:
6f:68:0e:b2:f2:4a:da:bb:62:d8:e6:97:16:39:0b:47:5d:9a:
79:91:9b:84:66:99:b5:20:ef:40:76:c2:21:8c:fd:04:51:08:
53:36:20:3f:8e:46:4e:f8:92:3e:49:2c:d2:10:5f:5f:c7:31:
bb:a0:d3:f5:03:0a:6f:aa:54:24:e9:40:97:fa:34:8b:55:2a:
70:d8:e1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:38 2025 by rpki-client