Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/g4nFhQ6IvtL2qABjFddjKVomtC4.roa
File: g4nFhQ6IvtL2qABjFddjKVomtC4.roa (raw, json)
Hash identifier: XkjVORdd+C/51uud7b/L9n0o7DLYN6Mjhdnlr2i9Cos=
Subject key identifier: 83:89:C5:85:0E:88:BE:D2:F6:A8:00:63:15:D7:63:29:5A:26:B4:2E
Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Certificate serial: 018CC5DC3649E16E85D7CAB713BA6D6850C9
Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/g4nFhQ6IvtL2qABjFddjKVomtC4.roa
Signing time: Mon 01 Jan 2024 16:29:52 +0000
ROA not before: Mon 01 Jan 2024 16:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207354
IP address blocks: 185.108.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:36:49:e1:6e:85:d7:ca:b7:13:ba:6d:68:50:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Validity
Not Before: Jan 1 16:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8389c5850e88bed2f6a8006315d763295a26b42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f8:90:64:df:be:27:3d:09:20:62:18:9f:6c:
56:96:0a:9b:e5:e5:66:50:bd:87:5f:52:af:5a:68:
c3:d2:dd:60:92:9e:5c:31:b0:4d:5a:12:02:06:08:
c8:e4:32:97:ea:69:9a:49:20:07:71:2d:b2:63:fe:
75:c1:83:b4:b1:50:55:79:d1:c0:06:7f:32:7f:c9:
33:2a:37:d8:16:3f:e3:98:0b:0b:19:85:45:cc:4e:
c0:56:3c:5e:3e:dd:f2:61:ab:79:d1:5d:0d:0d:e4:
66:27:25:47:48:e8:24:64:13:3b:24:cc:fd:07:2e:
73:6f:98:a3:43:f4:58:a4:aa:c3:e5:de:2f:c2:55:
f8:64:74:f4:ce:a2:98:f1:c9:7b:75:ee:6d:14:88:
63:56:7d:8b:39:eb:9c:dd:7d:ea:c1:50:21:53:49:
01:6a:be:ff:85:9f:3b:be:07:fd:7d:68:73:80:1b:
c4:49:34:2b:73:15:65:fb:4b:3e:ef:68:7a:12:dc:
51:3a:4d:62:0f:64:20:76:9f:20:76:0a:20:0c:dd:
db:8b:37:74:5f:68:01:5a:b0:81:93:12:27:6c:cc:
5d:1c:5e:1a:92:60:cb:d4:8e:6b:a4:f8:fa:0b:69:
cd:ce:71:81:f1:82:28:bc:26:e3:9a:87:3a:c8:9f:
54:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:89:C5:85:0E:88:BE:D2:F6:A8:00:63:15:D7:63:29:5A:26:B4:2E
X509v3 Authority Key Identifier:
keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/g4nFhQ6IvtL2qABjFddjKVomtC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.126.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d8:c3:09:f1:ba:46:bf:86:45:f1:2c:53:bd:ad:bc:1c:2c:
d3:2b:f2:81:49:4d:6f:b8:a4:70:f5:6c:7c:8a:0f:a1:bf:3a:
6b:8c:a1:ce:e0:69:ea:74:bc:f9:3f:77:02:5e:b6:05:ad:92:
bb:ea:2c:ee:16:ce:d2:44:58:10:c1:56:a4:f4:c7:29:da:ac:
c9:b7:46:2c:f7:54:9e:a8:ee:34:5e:9d:96:ff:be:17:52:49:
c5:22:02:c9:1d:5a:0d:3c:0c:9a:e7:76:43:a2:3d:5f:a6:28:
e0:69:7c:58:a6:e7:69:e7:f2:af:a1:ed:14:e7:d3:ce:20:1f:
05:78:27:54:c2:a8:5b:fb:19:d2:5c:96:42:8d:df:8b:bd:85:
0d:f8:98:27:92:d9:e8:61:59:4a:84:82:e6:2d:de:9e:3e:d5:
bd:43:06:bb:5b:6b:43:67:5d:5d:04:75:79:c5:0a:d4:98:b4:
ab:53:35:eb:54:c5:79:77:b3:a3:3b:b6:75:c4:85:d1:22:72:
58:09:8d:fb:36:3f:3d:8d:5f:e0:6e:69:ff:90:8f:9f:a5:97:
15:d4:84:95:86:16:3b:f8:24:0a:44:14:06:9d:dc:28:e8:10:
f8:7f:95:73:de:ce:17:da:85:61:29:01:6b:2f:2b:02:5a:59:
0a:5c:70:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:08:29 2025 by rpki-client