Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/Mv_oQaT-N6Idg5LhYDNLYjD__Tw.roa
File: Mv_oQaT-N6Idg5LhYDNLYjD__Tw.roa (raw, json)
Hash identifier: XMTVYqporUR5F+KlNuTab0bQbjoeBpIYd1k75wIVeUY=
Subject key identifier: 32:FF:E8:41:A4:FE:37:A2:1D:83:92:E1:60:33:4B:62:30:FF:FD:3C
Certificate issuer: /CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Certificate serial: 018CC87020B4C259A476231D56729062A8F5
Authority key identifier: B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/Mv_oQaT-N6Idg5LhYDNLYjD__Tw.roa
Signing time: Tue 02 Jan 2024 04:30:40 +0000
ROA not before: Tue 02 Jan 2024 04:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206930
IP address blocks: 185.171.164.0/23 maxlen: 23
185.171.164.0/22 maxlen: 22
185.171.165.0/24 maxlen: 24
185.171.166.0/24 maxlen: 24
185.171.167.0/24 maxlen: 24
185.171.166.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:20:b4:c2:59:a4:76:23:1d:56:72:90:62:a8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Validity
Not Before: Jan 2 04:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32ffe841a4fe37a21d8392e160334b6230fffd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:43:33:f3:dd:d3:d0:ff:49:e7:32:cb:86:
da:5a:5c:0d:50:d6:23:dc:80:15:bd:9a:72:92:f8:
c2:9b:4e:e4:d6:bc:5c:bc:48:7e:d7:74:c3:d7:e3:
f7:6b:11:4b:bd:70:33:a1:2f:87:27:19:ea:60:59:
5f:f9:c2:c3:f9:85:94:76:6d:ab:e8:e5:a5:f0:29:
31:5c:a9:d2:a1:16:2e:46:2e:4a:2c:54:9f:f5:26:
1a:52:44:de:21:19:ed:79:4c:05:05:fc:a5:2b:3b:
6c:3a:90:1a:ec:ec:5d:9f:83:bb:17:74:30:9d:4b:
14:67:db:20:82:90:a8:07:cc:5c:87:a7:f2:60:45:
0d:f5:5e:32:5c:f7:05:42:7d:25:92:4a:a3:4e:be:
47:88:8a:63:6c:3b:89:97:e9:4f:8f:d4:e1:5b:73:
31:c0:1b:5a:aa:4a:3a:03:b4:0a:de:72:c6:cd:a9:
fb:37:77:53:69:16:fb:08:88:e6:90:1e:d0:96:ab:
c4:c0:6e:13:99:db:e7:2e:64:8d:d9:db:0e:a3:1b:
88:db:b0:f1:50:a1:bd:0e:e0:bd:59:7b:bc:ac:72:
da:0d:8f:ad:bd:a1:38:0f:0d:d4:f2:be:e9:ca:c0:
e6:e2:82:5c:b0:2f:4b:ad:41:c2:4c:e1:48:0a:56:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FF:E8:41:A4:FE:37:A2:1D:83:92:E1:60:33:4B:62:30:FF:FD:3C
X509v3 Authority Key Identifier:
keyid:B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/Mv_oQaT-N6Idg5LhYDNLYjD__Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.164.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:0d:a8:51:89:ca:5a:cd:f4:e6:1f:1e:99:e2:7b:a0:d2:05:
47:22:3c:0b:9b:98:22:1c:dd:75:46:d6:bc:f9:b8:a5:99:cb:
f1:08:f3:61:88:4a:68:bb:21:e6:46:c8:5e:78:3b:c9:5e:3b:
fd:cc:08:86:18:a0:fe:d6:0b:81:88:08:f6:61:86:ad:68:30:
d7:03:19:d8:f9:2c:fb:dd:51:3d:1c:5d:38:d4:60:f8:6d:a3:
df:dc:c6:c5:16:d7:fd:11:5a:70:f2:2c:45:0d:72:a6:01:b7:
79:e6:93:1e:78:fb:c5:64:f5:76:ea:df:ee:ab:43:c5:5b:6f:
07:f6:4d:67:0c:97:2f:49:73:bd:be:14:02:d5:c9:50:f8:0d:
7c:82:d8:a4:67:c4:d5:51:16:93:41:b3:de:6e:f5:70:ec:75:
34:3f:2a:3b:21:5d:f0:01:a9:b0:38:7f:e4:49:27:bc:8e:50:
11:e9:44:20:02:0d:be:ad:54:91:e9:5f:3e:fc:77:c9:7a:35:
81:a8:41:80:18:11:b1:27:36:d2:bf:b2:0b:4b:3a:12:a7:e2:
5e:77:82:40:1c:32:2a:fb:d2:98:cd:45:37:10:d7:87:7a:7d:
93:f1:46:48:73:3f:c4:bf:a5:2d:71:03:46:44:86:41:52:e6:
7b:d1:62:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:37:42 2025 by rpki-client