Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/oDez6TEVUoEvgctcSdpeGk6jrUA.roa
File: oDez6TEVUoEvgctcSdpeGk6jrUA.roa (raw, json)
Hash identifier: Htcy73my5W7nqRxBPakeI5o1amKZPnkc8bVZiu5glf4=
Subject key identifier: A0:37:B3:E9:31:15:52:81:2F:81:CB:5C:49:DA:5E:1A:4E:A3:AD:40
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 018CC94E67B8C09A397A8D2A4BBA5D998383
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/oDez6TEVUoEvgctcSdpeGk6jrUA.roa
Signing time: Tue 02 Jan 2024 08:33:27 +0000
ROA not before: Tue 02 Jan 2024 08:33:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29037
IP address blocks: 185.9.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:67:b8:c0:9a:39:7a:8d:2a:4b:ba:5d:99:83:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Jan 2 08:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a037b3e9311552812f81cb5c49da5e1a4ea3ad40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a7:61:c6:a0:9b:de:69:3a:af:04:1f:cc:58:
cd:fc:11:45:40:c4:1e:2e:b5:17:63:20:70:20:ce:
7b:6d:59:d4:e5:41:1e:e1:a1:ee:9e:f6:41:5e:48:
13:15:05:02:4f:f5:ef:ed:76:b4:5a:03:21:b6:12:
be:d8:bb:da:5f:11:28:ff:15:69:98:8c:6d:55:6b:
27:82:ba:b1:f6:47:5a:e4:18:6a:9d:3e:5d:f6:28:
36:7f:05:e1:f9:23:74:4b:42:55:41:3d:35:09:4d:
c2:83:c0:25:bf:06:b5:a1:22:50:bc:0e:5e:b5:80:
dc:ce:24:89:0b:63:5a:49:bd:4a:db:1d:ba:59:e8:
66:ed:c2:2e:0b:cb:14:3a:94:19:b7:95:c4:e7:3f:
ea:53:95:c6:3b:3a:45:03:bd:e1:d3:eb:57:4c:6a:
63:39:b3:cd:cb:07:60:08:ad:a3:07:0d:1b:a1:03:
d4:08:02:7b:b0:ea:af:80:92:7d:f7:3a:90:3c:71:
03:ab:32:6e:a1:cd:99:35:ca:0d:19:01:60:74:85:
4f:5b:ed:d6:62:0e:43:4f:f8:58:d1:f3:96:dc:87:
b2:ca:ec:96:9a:84:7f:c5:21:30:ff:de:b4:8d:d2:
c7:a9:63:5a:5d:49:58:d0:a7:c2:3e:c2:a1:cc:9e:
2c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:37:B3:E9:31:15:52:81:2F:81:CB:5C:49:DA:5E:1A:4E:A3:AD:40
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/oDez6TEVUoEvgctcSdpeGk6jrUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.12.0/22
Signature Algorithm: sha256WithRSAEncryption
01:ce:98:0c:1a:19:3f:10:e1:7f:e4:82:ef:f8:bf:75:cb:38:
3b:91:b4:47:ba:d4:1a:da:4a:3e:ab:52:ee:5f:d5:41:54:a1:
c7:53:71:96:99:b0:7d:ef:51:35:c6:81:df:72:af:dc:1d:96:
5e:df:55:21:81:ff:02:4d:b5:a8:c1:10:c2:61:74:8a:51:c7:
fd:19:8c:3e:71:1c:c8:f4:44:3d:61:34:13:3a:34:4b:d3:0e:
14:f9:8b:4c:76:f4:57:91:08:5e:b0:6f:92:b1:f9:d9:14:9c:
4c:e9:ee:36:c3:be:b6:a3:af:54:20:77:4c:47:30:3d:f0:a8:
5b:29:dd:4a:fe:e5:28:a3:f7:a8:e8:98:34:79:13:0d:80:d7:
2a:58:20:51:60:c6:e2:1d:c4:83:24:54:00:a3:55:1a:44:5f:
a1:66:90:9c:ad:5b:6e:03:68:17:0a:0c:37:6c:ea:b0:f3:60:
92:89:bc:12:40:0d:2e:b3:29:a6:e7:54:15:d5:17:d3:9a:5b:
e2:76:b0:72:1a:65:0b:76:7b:8c:74:c6:30:e6:56:0a:80:5f:
3c:51:d8:a1:c3:ba:32:5f:81:4a:c9:a4:87:5e:55:3b:63:02:
fb:c7:c0:1d:bb:13:fe:a7:e4:2a:81:9d:6d:6a:ed:84:ef:e8:
cc:fb:4b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 17:19:21 2025 by rpki-client