Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/7ySn08D61hMg3GyjOTk2kZmX6-8.roa
File: 7ySn08D61hMg3GyjOTk2kZmX6-8.roa (raw, json)
Hash identifier: 1POejsv5PMHtMdSYR7wSBTj/2r9Ps5UqWkIHCQF0lN8=
Subject key identifier: EF:24:A7:D3:C0:FA:D6:13:20:DC:6C:A3:39:39:36:91:99:97:EB:EF
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018F9E819A1C25848814E94521E118039D12
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/7ySn08D61hMg3GyjOTk2kZmX6-8.roa
Signing time: Wed 22 May 2024 04:14:04 +0000
ROA not before: Wed 22 May 2024 04:14:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49217
IP address blocks: 185.235.167.0/24 maxlen: 24
2a02:afc0::/32 maxlen: 32
2a0b:1f01::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 22 May 2024 06:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9e:81:9a:1c:25:84:88:14:e9:45:21:e1:18:03:9d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: May 22 04:14:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef24a7d3c0fad61320dc6ca3393936919997ebef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:bd:60:da:e4:4f:30:a3:24:7b:dc:d9:9d:
a5:bc:af:c3:6a:46:9e:19:03:ff:74:a3:35:ff:ea:
10:3f:e5:f5:aa:13:cd:97:4f:91:2a:a4:c9:fe:6a:
53:4d:35:52:ab:ae:87:27:08:42:f6:a8:42:32:84:
5d:6a:49:5c:a4:c7:4f:6a:f4:c3:af:e5:47:d6:30:
28:e0:44:c4:95:54:d6:e5:ee:0b:4b:64:fb:a9:89:
75:ff:92:51:ba:13:d7:13:8e:00:36:6f:9d:81:97:
1c:bb:e6:aa:60:95:5c:b2:a6:ea:12:b9:a3:7b:64:
ba:f5:d4:ec:61:94:5f:67:78:18:12:6e:51:60:03:
c5:56:8c:a8:47:59:b8:7d:71:86:27:8c:75:52:5c:
6a:5a:16:ab:cc:06:a2:07:4e:03:16:05:ce:a8:63:
c0:0a:09:2f:70:04:56:56:11:1e:85:b0:6b:6d:92:
f9:38:8f:8e:93:e8:e7:fc:ef:0c:d4:8a:67:2d:1d:
f0:78:6c:4d:a4:a1:f4:d9:e6:ba:65:47:68:fb:e6:
d5:a3:64:10:9c:e4:87:5d:40:d6:8b:39:6e:a7:e9:
d2:89:a8:1f:86:b9:08:4c:53:cb:96:d3:7c:77:25:
c9:d3:c1:48:17:cf:ad:ec:79:39:58:2c:07:0e:6b:
a4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:24:A7:D3:C0:FA:D6:13:20:DC:6C:A3:39:39:36:91:99:97:EB:EF
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/7ySn08D61hMg3GyjOTk2kZmX6-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.167.0/24
IPv6:
2a02:afc0::/32
2a0b:1f01::/32
Signature Algorithm: sha256WithRSAEncryption
95:43:cf:c2:af:35:a9:fe:93:b2:33:32:de:31:c2:ed:64:c9:
31:8f:14:02:40:2b:6b:69:09:4d:82:6a:b2:fa:b9:fd:03:71:
79:9a:a9:cc:ab:05:c3:74:e0:3e:45:4a:13:1f:eb:53:6a:66:
c5:f4:32:b3:83:ba:68:cc:b5:82:ed:03:b3:34:4b:01:cc:48:
24:8b:8e:f0:32:da:10:9e:26:75:14:07:51:db:1e:86:76:d5:
b0:43:c6:7a:37:b2:35:f2:2b:2e:d8:a4:f8:e7:e6:f4:4b:3e:
1f:a0:70:ec:62:02:27:15:85:39:bd:20:3a:95:5f:63:be:cd:
cc:7e:de:5e:9c:07:af:fa:da:16:0c:b7:2d:2d:5f:a7:e3:57:
77:fb:4b:b3:70:bd:86:25:df:2e:dd:31:6e:32:ed:51:e9:4f:
fe:5f:40:a1:63:d8:14:e4:a7:0a:70:8c:d9:97:60:c4:d7:fe:
b3:f8:db:a6:a8:82:45:d0:bb:7a:7f:34:3d:32:dc:e2:60:f7:
57:42:23:67:e4:9a:a0:35:8a:8f:b5:06:47:fc:81:c0:e3:02:
1f:aa:7a:5a:bd:71:85:cf:76:07:9f:73:2e:94:40:bc:d6:82:
93:68:07:1f:5f:11:1c:bc:70:28:54:fc:86:13:2b:12:c5:a4:
90:8f:7b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:55 2025 by rpki-client