Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/TX9UeCuMQ-Bc1FlCT5UMLXSRBGA.roa
File: TX9UeCuMQ-Bc1FlCT5UMLXSRBGA.roa (raw, json)
Hash identifier: sVapSU66eBQKFi1527FQ924qwPxRyT6fck3mO6MZO90=
Subject key identifier: 4D:7F:54:78:2B:8C:43:E0:5C:D4:59:42:4F:95:0C:2D:74:91:04:60
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 018CC72752A5915CB0E34587BB0AD0AB5A2D
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/TX9UeCuMQ-Bc1FlCT5UMLXSRBGA.roa
Signing time: Mon 01 Jan 2024 22:31:32 +0000
ROA not before: Mon 01 Jan 2024 22:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36239
IP address blocks: 185.65.146.0/24 maxlen: 24
185.138.171.0/24 maxlen: 24
2a0b:40c1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:52:a5:91:5c:b0:e3:45:87:bb:0a:d0:ab:5a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d7f54782b8c43e05cd459424f950c2d74910460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4a:0e:1b:55:fe:b1:57:d9:a0:11:c8:4c:a0:
d1:d1:2d:d7:54:55:f5:04:55:32:86:7a:5f:5c:cc:
88:90:4b:41:ab:52:a4:00:7f:f8:d6:a8:4c:07:f7:
1f:75:80:aa:ce:01:bb:24:7e:88:97:1f:5e:0d:fc:
1a:41:fe:21:db:23:99:0d:55:74:8a:01:b8:32:a2:
09:5f:4e:ef:d2:5f:80:16:e2:05:bd:e4:4c:68:fc:
9c:ff:77:e0:7f:ea:f3:98:bd:d0:1a:d2:7a:23:6d:
09:0b:d8:d4:cb:fe:ac:57:80:11:29:50:7b:07:28:
6b:83:04:15:ce:e6:13:8e:4c:64:b1:70:a5:9b:1e:
37:43:4a:d9:a6:d1:96:49:ee:d8:de:c8:62:2a:c0:
df:9d:d4:99:1e:17:db:7d:c9:a5:25:72:7b:03:44:
21:a1:d4:d6:b7:be:44:22:3e:63:6a:35:2b:9e:f9:
e2:6a:cc:3a:12:13:be:e9:5a:11:38:e0:63:10:18:
c9:0c:74:f0:05:14:39:de:19:dd:5a:d3:c0:bb:f2:
36:69:05:d3:38:28:42:38:8e:9a:4e:3d:b1:40:93:
35:1b:e9:f8:cf:87:2c:ba:08:ae:06:ce:bc:a5:e0:
a8:00:4d:cc:3d:a5:11:b9:43:08:47:33:64:72:5b:
20:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7F:54:78:2B:8C:43:E0:5C:D4:59:42:4F:95:0C:2D:74:91:04:60
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/TX9UeCuMQ-Bc1FlCT5UMLXSRBGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.146.0/24
185.138.171.0/24
IPv6:
2a0b:40c1::/48
Signature Algorithm: sha256WithRSAEncryption
3a:fd:2b:ac:9b:76:32:bc:69:f1:b5:d3:68:e5:4b:8d:6b:d4:
65:72:79:9c:b3:8b:26:a9:6a:6d:04:44:c5:6f:69:6d:51:ca:
2b:93:82:d6:19:47:00:38:31:88:8b:5d:67:75:e5:2c:ad:21:
ef:83:37:df:41:d8:4e:c4:3b:8f:9e:3f:77:fa:06:de:2b:66:
03:37:4b:6d:48:66:22:50:c8:0e:6a:ef:ce:02:81:5b:29:80:
58:67:3a:4c:e6:35:3d:20:7c:9e:f2:42:01:17:63:09:b6:82:
97:a7:35:0c:7e:43:13:91:0b:d3:92:cb:3f:25:4b:8a:95:fd:
92:0d:97:73:13:15:eb:cc:20:47:46:e7:94:9a:7c:be:d6:d8:
26:95:61:1d:64:33:da:7e:4a:91:3f:6b:fb:73:2e:dc:08:3d:
2b:d8:b1:85:1f:a0:63:86:5d:85:c0:b9:66:3b:65:a1:33:6c:
5e:52:68:53:16:79:f1:42:60:57:a7:f9:10:b9:24:20:f7:ee:
e3:ff:29:9f:2d:44:e7:64:d9:dd:9f:03:f3:e7:09:11:60:8c:
ac:99:7e:47:65:0f:b2:e0:5a:fa:32:a4:94:42:8e:4e:75:d7:
d8:8c:90:dd:20:33:2f:6c:36:eb:f3:80:3c:ff:fc:08:33:89:
d8:91:1e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:13 2025 by rpki-client