Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/XN0pdDhR8GcVMaohWKzffrSJqVE.roa
File: XN0pdDhR8GcVMaohWKzffrSJqVE.roa (raw, json)
Hash identifier: SwYTtvFZXv+r08IMYctFvnUqT+8dXhKD3XQoiH+H0NY=
Subject key identifier: 5C:DD:29:74:38:51:F0:67:15:31:AA:21:58:AC:DF:7E:B4:89:A9:51
Certificate issuer: /CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Certificate serial: 018CC3B721BCF79F5E5266D1AE20C77AC467
Authority key identifier: 66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/XN0pdDhR8GcVMaohWKzffrSJqVE.roa
Signing time: Mon 01 Jan 2024 06:30:07 +0000
ROA not before: Mon 01 Jan 2024 06:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205867
IP address blocks: 185.55.234.0/24 maxlen: 24
2a00:b404::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:21:bc:f7:9f:5e:52:66:d1:ae:20:c7:7a:c4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Validity
Not Before: Jan 1 06:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cdd29743851f0671531aa2158acdf7eb489a951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:ab:79:0a:30:c9:b7:79:c3:a8:72:d4:be:
ce:c9:3c:7c:aa:09:dc:5a:85:4a:60:fd:76:dd:92:
a9:fa:b6:30:01:4e:5e:36:6d:08:e1:b6:54:4d:74:
01:b3:fb:2f:b4:fe:71:58:a8:d1:47:06:d9:c5:e8:
c5:da:48:55:0a:65:3f:31:f5:0b:57:03:93:ae:68:
de:a7:35:8c:41:2c:b5:0a:26:e1:a4:50:64:2d:c5:
80:25:91:8a:a6:61:7d:df:a9:94:58:5f:48:3a:d3:
9f:7f:b2:05:87:6f:34:2a:f7:6d:34:f9:d8:d3:4b:
f7:20:46:75:2d:91:de:1f:6d:3c:a3:b9:c2:99:8f:
37:85:a3:3d:a5:70:5a:9b:98:d0:bd:f7:0c:a5:a1:
67:14:05:d9:9b:e6:ad:82:d4:8f:34:4a:6c:7a:d1:
ba:8b:01:18:35:04:ca:9b:1c:90:92:6e:c7:4c:94:
1d:25:d4:6d:cb:0f:4b:82:bb:b1:0a:50:9d:10:2a:
8b:e0:d0:99:9a:85:49:2c:05:95:93:22:75:65:60:
8b:1a:af:dc:f9:50:47:a5:73:99:0d:ad:a7:b6:c0:
be:8b:d8:f9:b3:69:2e:2e:b7:fa:70:22:db:bf:ce:
08:69:55:18:27:aa:3b:fb:c5:f0:da:86:8d:30:89:
e4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DD:29:74:38:51:F0:67:15:31:AA:21:58:AC:DF:7E:B4:89:A9:51
X509v3 Authority Key Identifier:
keyid:66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/XN0pdDhR8GcVMaohWKzffrSJqVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.234.0/24
IPv6:
2a00:b404::/32
Signature Algorithm: sha256WithRSAEncryption
85:ec:dc:78:c9:ce:15:d0:1f:60:61:19:96:39:eb:d5:88:67:
51:3d:93:67:59:e6:de:04:7a:d3:6d:85:95:1f:34:35:4a:0c:
be:60:64:79:e3:21:e4:b5:31:1a:34:55:e4:1d:0d:26:91:21:
2b:b9:5e:ff:e0:19:3a:71:be:cf:3d:3d:bf:d2:28:24:8a:c5:
10:ca:08:c4:bf:e7:df:2f:ec:4d:f5:a9:db:c2:b7:1a:0a:df:
cf:c8:7d:f1:86:d9:b2:1d:05:4d:d2:1b:70:79:51:85:d4:a7:
e5:09:15:84:81:97:84:f7:c8:89:2f:0d:87:a1:41:65:66:d9:
1f:c5:a9:3b:b1:f4:90:b9:b2:76:66:e8:d9:f3:e4:6e:03:97:
74:19:e3:d3:ba:ad:63:12:8d:2b:06:96:85:d6:76:4c:92:40:
61:58:b7:ad:37:50:32:59:44:20:a9:97:f5:39:e4:65:8a:1a:
a3:63:23:73:b5:ba:a6:6d:d4:1b:67:90:0c:6f:a2:43:f1:73:
8b:c0:c2:05:67:3a:3b:8a:b0:d1:99:61:b6:f3:60:67:4f:bd:
b8:74:7b:de:52:5b:28:b5:15:bd:35:24:28:cc:cd:56:15:9b:
b2:70:5e:db:2a:7c:f0:e2:c7:8f:2b:ad:74:e3:77:f2:9a:aa:
2c:90:21:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:40 2025 by rpki-client