Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/plBHedRmRQ98t4GNHGfZGdw-AcE.roa
File: plBHedRmRQ98t4GNHGfZGdw-AcE.roa (raw, json)
Hash identifier: Cx8k8OCxefRd72Dz/nSXihs9jCLM6EAlrAjtLwO2hLw=
Subject key identifier: A6:50:47:79:D4:66:45:0F:7C:B7:81:8D:1C:67:D9:19:DC:3E:01:C1
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 018F237478BF7B651A33C3D7C30F490FAED0
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/plBHedRmRQ98t4GNHGfZGdw-AcE.roa
Signing time: Sun 28 Apr 2024 06:46:26 +0000
ROA not before: Sun 28 Apr 2024 06:46:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.224.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 07:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:23:74:78:bf:7b:65:1a:33:c3:d7:c3:0f:49:0f:ae:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Apr 28 06:46:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6504779d466450f7cb7818d1c67d919dc3e01c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:fa:20:36:25:a0:36:de:ba:8b:ce:c1:5d:
68:18:47:12:54:13:7c:02:1d:cb:e6:ab:9b:79:20:
8d:c8:a5:90:1f:06:34:8f:fc:13:2d:48:c3:ba:2c:
a8:66:a4:f5:35:7f:e4:05:22:42:f8:61:6b:af:8e:
5a:06:30:c3:ef:6a:e7:5f:c3:c2:57:90:6b:55:04:
02:33:20:1e:da:e0:23:44:ca:6d:2d:f7:0f:b0:61:
62:b4:f7:fe:59:41:4a:3f:e6:e0:17:bc:7a:99:9c:
31:d9:83:61:39:b2:ff:39:5e:ee:4f:30:1e:14:00:
5e:8c:09:ec:7b:26:cf:37:92:0f:16:b0:38:4a:48:
33:45:bd:fb:f3:b7:3f:99:2f:01:99:97:0b:88:96:
26:2e:6a:22:28:f0:54:a2:b7:e1:02:d5:09:dd:f8:
7d:1b:c1:81:97:38:3a:cc:7d:7b:74:96:67:b6:d7:
44:55:89:58:2e:61:32:15:aa:eb:89:29:5d:b1:b7:
5d:4d:c2:6d:ce:f9:ad:ac:51:08:a7:7f:a9:6a:f0:
0c:1b:00:1f:bc:a0:7a:f1:4c:79:b2:cd:38:50:97:
5b:b8:6b:f5:0c:58:2f:3d:c0:e5:66:61:b6:15:b7:
62:12:e4:25:2b:41:f9:80:5b:ea:0d:e7:5e:c9:59:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:50:47:79:D4:66:45:0F:7C:B7:81:8D:1C:67:D9:19:DC:3E:01:C1
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/plBHedRmRQ98t4GNHGfZGdw-AcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.3.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:6f:11:52:17:05:bf:39:90:7f:9a:25:75:14:f3:6e:e6:d9:
94:0f:34:e9:cd:84:cc:4f:ab:b9:4f:b8:64:e7:da:59:1f:5b:
10:e1:0f:09:a5:7a:df:12:d6:30:15:52:12:3f:be:fd:aa:4e:
20:b3:58:1b:13:04:a0:43:17:85:3a:ab:cc:a1:aa:3c:cb:93:
53:1c:5e:12:29:7b:95:fa:e4:52:83:1a:39:17:44:db:c0:8e:
11:0b:50:02:19:4e:74:e3:1c:f8:9d:d2:58:4e:07:8c:07:87:
96:35:fe:ab:5a:11:51:bb:59:d2:97:7a:f6:b1:bf:92:41:d0:
88:e0:fb:81:41:ea:cb:3c:d2:ff:2d:14:98:f1:17:79:f6:1f:
fb:ab:20:60:cb:82:51:fa:2e:e8:fd:d5:d8:a1:26:c1:ae:95:
86:77:44:86:38:27:e1:2b:1f:88:25:c0:4d:49:8b:27:a9:ff:
f8:fa:9f:9d:c6:4b:88:06:2e:7a:c7:15:fc:7e:fb:2c:e5:49:
35:a6:66:2d:56:de:eb:56:54:98:43:dd:58:91:e0:3c:1d:a6:
58:af:59:be:dc:d4:06:e5:10:4f:2e:44:a8:99:26:70:c8:f7:
7d:68:aa:19:fb:50:0a:7a:c2:87:6e:c7:ae:bc:f9:fe:19:18:
25:63:09:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:55 2025 by rpki-client