Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0lJTPQnc-8DbGNqeOo4wFuM5rV4.roa
File: 0lJTPQnc-8DbGNqeOo4wFuM5rV4.roa (raw, json)
Hash identifier: IP+moXJOpo33BFDwSBhnM5kL/Za1Idy+ocvwPPoauTU=
Subject key identifier: D2:52:53:3D:09:DC:FB:C0:DB:18:DA:9E:3A:8E:30:16:E3:39:AD:5E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01944BF95890C23C2D41172852F99E0144DB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0lJTPQnc-8DbGNqeOo4wFuM5rV4.roa
Signing time: Thu 09 Jan 2025 16:50:19 +0000
ROA not before: Thu 09 Jan 2025 16:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48795
IP address blocks: 185.238.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 07:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:f9:58:90:c2:3c:2d:41:17:28:52:f9:9e:01:44:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 9 16:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d252533d09dcfbc0db18da9e3a8e3016e339ad5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:af:08:e3:74:df:f3:d4:43:4a:44:cb:12:91:
31:6c:2f:61:7a:87:8c:36:35:f6:06:d0:66:aa:e1:
30:a3:72:08:ab:a7:1b:b8:a2:c5:d9:e5:b9:6f:67:
88:ac:cb:9f:67:1f:13:2a:5c:a3:eb:5f:d5:5a:b3:
5b:4f:ba:bc:f0:6e:11:b6:55:90:61:9b:1c:33:2c:
60:ff:6c:19:e7:7f:50:46:e1:57:c2:9b:2e:af:f5:
c3:a8:88:2e:57:aa:f7:81:20:f4:10:cc:51:b2:8b:
0c:01:8a:4b:79:5c:e5:c9:d0:94:cf:89:d6:14:d0:
91:44:07:49:90:e1:7e:5d:bd:1f:de:99:8e:81:d4:
62:f0:9c:51:12:cb:50:a9:4c:94:5c:fa:02:11:ce:
82:44:fa:d7:f8:86:d3:42:15:c2:b4:a2:1c:43:fa:
56:00:f2:27:f0:4c:07:d1:54:64:59:22:95:69:03:
be:6e:c3:54:57:d9:6c:05:e2:b5:35:b4:e6:d9:9e:
a7:54:4f:bb:5e:2b:c4:a1:1d:7e:08:35:f2:43:ee:
29:eb:25:3a:08:a0:81:ae:20:7e:8f:ad:cb:6a:c3:
44:97:c1:01:e3:e4:e3:14:af:b7:f1:d8:30:c4:5b:
c3:bd:fd:32:d8:e7:78:02:05:48:74:cb:ee:3f:1e:
1d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:52:53:3D:09:DC:FB:C0:DB:18:DA:9E:3A:8E:30:16:E3:39:AD:5E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0lJTPQnc-8DbGNqeOo4wFuM5rV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.188.0/22
Signature Algorithm: sha256WithRSAEncryption
05:11:65:90:ce:ce:e5:cb:21:3a:0b:5c:83:bc:2f:8d:31:03:
5f:e8:88:18:9c:bd:29:a2:27:49:79:ed:2f:38:3e:3d:85:08:
48:c6:04:4e:cf:23:3b:05:7c:4d:06:8d:9e:94:c6:1c:8f:fc:
72:60:ed:77:d4:58:80:a1:3e:ab:07:bb:0b:fd:69:53:ba:39:
67:6d:e9:2f:52:d1:86:c9:ef:76:eb:52:91:af:b1:4b:4b:2b:
59:70:7b:b1:e1:59:e7:72:70:e0:d0:c1:a1:05:fc:ae:5d:3d:
d6:ae:5a:77:83:16:a0:a1:d5:26:77:e3:8c:e0:8e:8c:58:35:
c0:d1:b9:7c:d2:cf:c7:79:a9:26:71:25:bd:9f:ea:7d:2f:19:
ee:b4:82:57:8c:51:f3:d1:c7:07:65:63:a1:5b:96:72:4a:9d:
ad:6a:45:47:04:8f:8e:62:8f:49:88:68:7b:3f:1b:b4:ae:e5:
cc:7a:fd:18:30:7c:8e:d5:c3:8a:2f:dd:fa:e0:cf:f8:1c:79:
61:57:da:5c:94:a2:16:03:fa:19:9f:d7:06:d9:ae:30:e2:5a:
a4:8a:36:a9:ff:72:3e:cc:fb:f7:a7:f6:89:af:61:c9:9b:3d:
47:30:d2:78:c6:6a:02:f6:5d:a6:e0:65:ea:cf:87:8a:d3:3b:
fc:c3:c5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:52:46 2025 by rpki-client