Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/wO0rN79NwuB2QmfzjXa2GDo9NYM.roa
File: wO0rN79NwuB2QmfzjXa2GDo9NYM.roa (raw, json)
Hash identifier: cZpyzwH/9pSTYCNYfIiKaQRUF90kPgP3jxwCMkrbqGQ=
Subject key identifier: C0:ED:2B:37:BF:4D:C2:E0:76:42:67:F3:8D:76:B6:18:3A:3D:35:83
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 0193BECFB0FD6001F90A5650A38572247954
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/wO0rN79NwuB2QmfzjXa2GDo9NYM.roa
Signing time: Fri 13 Dec 2024 06:58:22 +0000
ROA not before: Fri 13 Dec 2024 06:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215224
IP address blocks: 185.101.168.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:be:cf:b0:fd:60:01:f9:0a:56:50:a3:85:72:24:79:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Dec 13 06:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0ed2b37bf4dc2e0764267f38d76b6183a3d3583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:9f:35:6b:b2:a5:39:17:ce:ed:db:e9:d6:
8f:e4:a3:c7:70:e3:00:58:fa:b4:27:bd:2c:a4:de:
24:e4:52:99:1e:4c:5e:4c:b9:47:71:55:f9:74:58:
5a:37:8d:15:d6:40:96:b6:16:a6:5c:8d:70:8b:7c:
04:d9:b7:8d:36:4c:3f:52:74:38:08:5d:63:1c:a3:
82:8a:d1:1b:c7:78:d9:18:f7:dd:e6:0b:66:b1:d7:
f2:12:f9:21:f4:03:02:b6:d1:04:82:c0:c0:67:9d:
1c:df:a3:3b:c5:49:1e:2d:de:e4:d4:ae:b5:c6:74:
ff:5b:33:e1:d4:83:72:40:c9:56:ca:37:cf:37:97:
ca:1a:e8:eb:d9:13:f1:0d:ec:be:ec:86:31:a2:95:
ee:3a:83:f5:a3:8e:9e:a6:83:f2:dc:30:5d:d7:87:
6b:94:14:f7:9f:2a:d3:a8:bf:41:48:9d:f9:8f:fe:
56:58:91:a1:5c:fe:a7:01:28:4c:26:c2:3b:3f:be:
6f:ca:c6:56:c0:44:ba:c4:c1:12:10:4d:bf:3f:55:
d4:28:8b:09:5f:86:e1:aa:0b:9b:57:d7:1e:a3:29:
a7:55:5e:3c:9d:eb:19:bc:37:40:fc:71:41:42:26:
49:b5:22:20:90:2b:77:91:34:5b:12:0b:5b:55:c3:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:ED:2B:37:BF:4D:C2:E0:76:42:67:F3:8D:76:B6:18:3A:3D:35:83
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/wO0rN79NwuB2QmfzjXa2GDo9NYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.168.0/23
Signature Algorithm: sha256WithRSAEncryption
63:c4:58:a4:49:0d:1b:9a:07:2f:27:fd:4d:a3:53:79:32:73:
26:2d:d0:6a:bb:95:12:a8:ad:cd:2f:c8:e6:c0:e7:5c:1b:a9:
0e:60:44:22:68:f7:07:2d:bb:be:fa:a4:8d:45:ef:a2:03:64:
0c:47:9d:44:66:5c:4b:18:60:54:68:2d:d0:db:78:a7:a6:9a:
4d:4f:f0:b2:fd:94:8c:64:18:18:84:ad:4a:cd:76:8a:c7:4b:
ff:d6:34:3d:73:6b:2e:d2:b9:15:be:f2:e8:71:aa:76:8e:79:
e8:d5:6c:dd:5e:2f:f0:d4:4b:91:41:e4:f0:fc:a8:87:82:af:
42:36:f7:c3:83:c6:b7:be:e4:e4:d4:c6:38:f5:5a:b3:45:56:
32:77:d6:aa:de:8e:4d:f6:b2:d5:e6:be:e7:fb:8c:d8:6a:97:
74:b8:a5:38:bf:09:bd:47:2c:b4:1e:5a:f4:30:ef:98:a9:5e:
5f:e8:b1:8a:ad:e1:71:b5:9a:09:50:c1:63:4d:34:3f:24:f1:
2c:3a:d5:dc:37:9c:96:43:fe:09:a2:b0:8b:a4:5e:cb:f5:17:
02:be:83:5e:2a:c5:4b:53:b0:38:04:6f:df:f4:b6:d5:2d:86:
30:b1:4c:28:03:0b:14:83:63:e9:d6:ee:05:7e:29:df:57:5d:
8f:ef:b5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:41:40 2025 by rpki-client