Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/io3XY-1cBjG-MvIjhYS9cryxiBM.roa
File: io3XY-1cBjG-MvIjhYS9cryxiBM.roa (raw, json)
Hash identifier: nYbs7+Q+r62lOAbk+VSl3iSPboJ9DFl+U2kEu5ih2z8=
Subject key identifier: 8A:8D:D7:63:ED:5C:06:31:BE:32:F2:23:85:84:BD:72:BC:B1:88:13
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0193920484CA7A263669FB429408ED63A62E
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/io3XY-1cBjG-MvIjhYS9cryxiBM.roa
Signing time: Wed 04 Dec 2024 14:13:09 +0000
ROA not before: Wed 04 Dec 2024 14:13:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.164.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Dec 2024 10:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:92:04:84:ca:7a:26:36:69:fb:42:94:08:ed:63:a6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Dec 4 14:13:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a8dd763ed5c0631be32f2238584bd72bcb18813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:32:77:57:f9:64:a0:00:8d:ac:5c:48:6d:11:
87:dc:4f:72:13:b5:d4:0c:b7:e6:9c:1d:d0:0e:a8:
6e:d7:f7:93:46:12:68:65:35:87:9f:d6:6d:4c:42:
12:13:73:fb:e0:a7:67:1d:ee:8d:31:ec:95:e6:ad:
3a:4e:ab:bc:be:da:05:5d:c5:18:f3:0a:cb:13:c5:
85:d7:2c:0f:45:37:8d:7d:f5:16:68:1b:b3:ee:e2:
0a:33:34:0c:05:1d:7f:a7:5b:d5:4f:21:5d:91:38:
9b:cf:a3:61:ba:10:72:81:9c:ff:e6:89:8c:33:b1:
8f:b5:96:da:a1:2d:71:d0:cc:76:41:44:76:fc:fa:
da:53:13:6b:d0:3e:5e:9d:3b:27:d0:8c:24:4e:c4:
1f:28:c1:0d:0a:cd:24:dd:01:a9:22:d4:d2:7d:bc:
f1:1f:e4:96:3d:6d:82:42:07:82:15:ff:d6:4b:a7:
6d:4b:d5:22:30:5f:c1:3c:fb:25:9c:0b:02:a0:d0:
77:79:0b:78:00:56:0e:00:fe:01:bf:ef:e2:31:e4:
93:66:ef:73:7b:0d:28:64:22:ea:bd:60:f2:78:98:
e4:b5:dd:8c:c7:6f:53:22:0f:79:3f:8f:e9:59:a7:
88:3a:11:72:f1:c7:e4:f6:5a:87:61:e7:54:30:90:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8D:D7:63:ED:5C:06:31:BE:32:F2:23:85:84:BD:72:BC:B1:88:13
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/io3XY-1cBjG-MvIjhYS9cryxiBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.175.0/24
Signature Algorithm: sha256WithRSAEncryption
87:bf:53:a9:36:d4:67:ef:9c:e7:99:1c:c2:11:20:89:4b:ec:
14:eb:bc:e1:6a:1c:e8:d2:6a:99:c9:35:aa:e2:c3:33:e2:0e:
c2:28:4b:d9:20:11:a1:8a:3d:d8:e4:8e:ca:89:d2:52:29:79:
ad:94:48:a6:e3:9b:f8:b6:05:bc:7f:3f:b3:e9:68:80:10:33:
97:0e:ed:1e:a1:91:8f:45:7d:53:52:a3:c4:22:48:03:60:79:
03:d6:16:50:ea:70:c0:aa:2a:e3:5a:4a:1b:98:01:80:10:69:
e7:74:37:f0:b7:cb:4b:04:a3:03:b9:a6:77:db:21:5b:b4:15:
41:66:45:c2:5a:45:18:fb:98:e5:a1:ea:10:4e:e6:1c:d4:56:
02:86:18:32:02:ad:5a:08:61:46:90:6a:c7:15:df:fd:14:d7:
8d:e3:9d:38:8a:18:e8:43:ac:11:f3:1a:70:09:06:62:d1:d1:
14:95:4f:b9:77:17:37:72:70:f3:9a:b6:9b:c9:9e:4a:50:2d:
02:fe:3e:fc:dd:11:dc:8c:6a:ab:66:04:d4:46:f7:47:7d:96:
be:fb:d4:99:0b:df:b7:95:c8:c7:dd:b9:80:11:2b:06:4c:e5:
36:48:cb:8f:3b:45:da:54:d1:99:1f:46:72:b5:8e:98:71:f6:
0b:1d:6b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:20 2025 by rpki-client