Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/lIprtdIcb6RGjBu_7Fb4hvqb0-Y.roa
File: lIprtdIcb6RGjBu_7Fb4hvqb0-Y.roa (raw, json)
Hash identifier: 6W7WCd1n+XCFbm2SXFAvlw2vbyFj+YpL+rmqDrIILRA=
Subject key identifier: 94:8A:6B:B5:D2:1C:6F:A4:46:8C:1B:BF:EC:56:F8:86:FA:9B:D3:E6
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 018CC500178B4A9014558B2EC2C19E3B5324
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/lIprtdIcb6RGjBu_7Fb4hvqb0-Y.roa
Signing time: Mon 01 Jan 2024 12:29:26 +0000
ROA not before: Mon 01 Jan 2024 12:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205706
IP address blocks: 185.205.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:17:8b:4a:90:14:55:8b:2e:c2:c1:9e:3b:53:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Jan 1 12:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=948a6bb5d21c6fa4468c1bbfec56f886fa9bd3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:57:01:df:bd:13:3f:1c:e0:cb:16:1f:9e:ae:
81:1a:29:b8:b1:68:92:36:c4:2b:f4:4f:01:cc:f7:
1b:fe:a4:a2:32:9d:62:fa:88:b7:78:fd:1c:38:f2:
9d:a9:ea:d4:19:74:b4:b1:4c:76:c8:3c:14:19:d3:
97:0f:7f:0f:0a:f6:51:98:02:de:52:be:30:e8:65:
6e:de:af:23:aa:22:ac:a8:b6:5c:e7:b0:28:df:ea:
8f:2c:bb:08:b2:67:d5:55:51:96:53:78:36:cf:42:
89:ab:23:95:81:4d:28:38:e4:b8:3e:ad:7d:c7:23:
5c:0a:63:54:fb:79:d1:fa:04:db:17:28:67:95:14:
6a:2a:fb:7c:ea:21:58:d7:6e:3f:9e:c6:33:2e:49:
c1:0b:93:d9:31:2c:dd:e5:22:28:10:3a:6d:ba:ee:
43:f8:77:02:e9:44:de:1a:97:8b:29:e4:6f:4a:56:
2e:56:64:b4:bb:26:66:9d:04:3a:82:eb:c3:ee:6c:
05:9e:14:05:62:24:71:61:75:ea:09:ff:34:4b:ab:
68:4b:ee:29:4e:54:53:69:64:fd:b7:8e:09:57:9e:
f4:a3:30:ee:96:a7:15:b6:f3:81:e6:fc:29:33:32:
42:55:bc:74:2e:b3:58:6c:62:b4:a9:b8:b6:ec:ac:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8A:6B:B5:D2:1C:6F:A4:46:8C:1B:BF:EC:56:F8:86:FA:9B:D3:E6
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/lIprtdIcb6RGjBu_7Fb4hvqb0-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.152.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:13:c7:d0:9d:8f:d0:0b:9f:c1:a0:fd:42:c9:d1:55:4d:cd:
5f:37:b8:20:7a:9b:45:09:e2:96:e8:47:da:e3:db:4f:fd:67:
1f:b8:cd:69:6f:2e:a7:64:58:85:92:78:fa:d5:01:f8:4f:d6:
a3:59:fe:20:f8:0a:e4:af:6d:8e:1f:8e:3d:e8:a6:7e:ae:3f:
7f:15:51:90:b7:b1:e8:78:a1:ee:57:66:78:42:a4:bd:b9:57:
59:4e:0c:09:ef:91:36:7d:19:5a:b9:58:1a:53:64:c6:ed:23:
e5:23:2e:7e:00:98:2e:81:00:5c:26:5b:fa:7e:f0:89:a5:dc:
89:56:08:dd:bf:ca:78:8b:6b:c5:ab:5b:20:d4:63:b0:7b:6e:
9e:22:ac:56:77:e0:4c:fa:ec:e2:7a:cd:a3:b4:dd:4c:a4:73:
c4:d0:b9:50:b7:7c:26:f1:1e:5e:21:90:b5:9c:9b:b7:4c:a7:
f3:de:eb:f4:7b:30:07:44:59:23:b2:ef:72:cb:4d:46:79:cd:
5a:c7:c6:fb:f9:1f:9a:5f:f5:a0:09:32:d7:ac:ca:a4:ef:26:
38:da:ca:19:c4:1b:40:50:98:53:15:83:fe:c0:90:61:9e:c4:
44:5d:f5:58:d7:74:4a:47:9b:02:3e:a0:6b:ca:36:b5:6a:9a:
32:83:67:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:46 2025 by rpki-client