Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/ewBMGyCgfLR_dt4dE9DFf6xV2T0.roa
File: ewBMGyCgfLR_dt4dE9DFf6xV2T0.roa (raw, json)
Hash identifier: fc054Khpp6EedvlaP6FYIQvjFUOcYMvPUK/MgStb+ww=
Subject key identifier: 7B:00:4C:1B:20:A0:7C:B4:7F:76:DE:1D:13:D0:C5:7F:AC:55:D9:3D
Certificate issuer: /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial: 0192A18BA726772603A4DDC4C1F6781B7298
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/ewBMGyCgfLR_dt4dE9DFf6xV2T0.roa
Signing time: Fri 18 Oct 2024 21:32:17 +0000
ROA not before: Fri 18 Oct 2024 21:32:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204912
IP address blocks: 185.225.164.0/24 maxlen: 24
185.225.165.0/24 maxlen: 24
185.225.166.0/24 maxlen: 24
185.225.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a1:8b:a7:26:77:26:03:a4:dd:c4:c1:f6:78:1b:72:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Validity
Not Before: Oct 18 21:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b004c1b20a07cb47f76de1d13d0c57fac55d93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9f:47:74:5a:b7:f0:56:b8:b6:14:24:da:2f:
7e:8d:3d:bc:f2:ed:c5:7c:c6:66:e1:58:96:43:2e:
02:86:c5:03:40:ec:1d:b4:5c:32:7b:c8:b2:3e:5d:
d8:83:4e:f2:22:bc:60:fe:e6:27:22:38:c9:41:35:
e3:2e:dc:63:fb:59:8b:06:4a:60:6f:e7:d2:a6:3f:
a9:80:dd:c7:98:4e:2f:4b:61:5a:dd:3a:23:c4:de:
b1:6e:5b:58:a7:c9:25:30:5b:e0:6e:f0:21:8b:41:
e1:0c:3b:94:e1:ac:e7:91:6a:a0:59:cb:c5:e3:d9:
dc:f7:ac:5e:a7:03:89:a1:2b:06:3f:4e:91:b0:4d:
76:2e:3f:73:85:d3:18:35:28:95:05:f8:91:d9:68:
9e:14:43:7f:21:8e:ef:9b:a2:b7:22:34:b6:0f:2f:
c6:44:4c:e6:85:12:52:7d:05:ae:95:84:97:d8:1d:
6f:b5:ed:55:c5:3f:83:2f:64:ba:c3:5d:83:17:13:
66:54:00:fa:56:64:46:72:c4:75:b5:0b:e6:45:93:
aa:32:18:ad:3f:d9:fc:e8:66:46:84:04:81:ac:ba:
df:6e:36:2b:35:0b:78:c8:0f:18:b5:46:15:1a:d3:
af:ea:da:f7:6b:20:d7:ff:73:63:9c:17:de:05:31:
ed:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:00:4C:1B:20:A0:7C:B4:7F:76:DE:1D:13:D0:C5:7F:AC:55:D9:3D
X509v3 Authority Key Identifier:
keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/ewBMGyCgfLR_dt4dE9DFf6xV2T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.164.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:cb:fe:eb:83:c3:5a:59:a2:7d:f0:12:af:96:37:f8:e2:6f:
b2:bf:64:21:cd:17:02:d6:c9:68:5e:5d:8b:c2:c1:f8:19:ad:
dd:06:8b:6a:d6:63:a1:39:47:9d:24:8b:9e:69:97:ff:eb:16:
7d:a0:dc:2d:59:52:50:da:a9:9e:77:0f:6a:2f:bf:3e:93:04:
6d:ba:45:f6:21:af:0e:a3:26:bd:ba:70:cd:d3:d0:44:bd:7c:
7d:bf:2c:5e:7e:fd:c1:4c:58:2b:74:00:13:47:83:a8:35:3c:
23:3b:c7:ad:e5:57:47:16:9a:88:37:7f:1f:3e:1f:df:c5:0f:
f1:25:ba:bb:ce:94:78:78:b8:a7:e5:ff:7d:dd:a7:4e:9c:5b:
fd:ed:28:2f:5a:24:2e:55:a3:d5:6f:42:a9:33:e2:cd:a7:95:
56:db:c8:b9:79:e0:35:3d:a3:99:59:4e:4a:b8:0c:99:47:aa:
1b:d0:fa:85:f1:f5:40:26:d9:84:bd:25:b8:4c:41:68:d6:67:
56:54:6a:e1:11:08:85:a0:0f:58:0c:c4:b3:4e:fd:34:6c:63:
30:17:2f:ce:0b:8b:29:77:a0:f6:7a:cc:e1:37:ef:9e:f7:b2:
0b:56:e0:ec:35:89:9d:02:a7:e7:36:77:bb:f3:5b:bd:01:03:
21:8d:7c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:11 2025 by rpki-client