Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/EPK_OeS6Vh4xnUue-triIgPhvR8.roa
File: EPK_OeS6Vh4xnUue-triIgPhvR8.roa (raw, json)
Hash identifier: bsdfP6LIDYgR1Q2ozaKizKD0IKBsU5kc23HAVKLGQvY=
Subject key identifier: 10:F2:BF:39:E4:BA:56:1E:31:9D:4B:9E:FA:DA:E2:22:03:E1:BD:1F
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018CC9BC6DBD549A284EEFC29D69F09CF3A6
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/EPK_OeS6Vh4xnUue-triIgPhvR8.roa
Signing time: Tue 02 Jan 2024 10:33:38 +0000
ROA not before: Tue 02 Jan 2024 10:33:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200482
IP address blocks: 185.169.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 13:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:6d:bd:54:9a:28:4e:ef:c2:9d:69:f0:9c:f3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 2 10:33:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10f2bf39e4ba561e319d4b9efadae22203e1bd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ab:ed:48:c7:47:bb:91:8d:8f:73:11:2e:cc:
75:01:10:12:6e:2c:b4:4b:79:61:69:6f:f1:92:ac:
f7:5f:09:0c:51:21:a6:1f:3f:ac:cf:ef:08:2d:a4:
80:29:c1:73:e3:10:f3:98:56:bb:ed:46:f9:fe:e0:
23:3c:cb:75:f4:a4:8b:cf:ab:71:d5:1b:6a:3f:db:
a2:bf:84:90:05:73:be:54:e3:ee:c0:fd:6e:cc:64:
24:18:48:2c:7e:cb:a0:95:29:04:6c:7b:0c:00:ba:
cc:72:e7:55:1d:f2:18:02:ac:97:40:70:e5:b4:bf:
e8:ad:de:96:2e:f9:20:70:82:6e:73:24:63:1e:5d:
9a:8c:eb:11:dd:4b:9a:fd:3e:9d:53:19:6a:dc:de:
b4:31:36:0d:da:00:29:4c:d1:a9:03:b2:8b:02:22:
e3:1e:b0:d8:79:4a:fc:a6:eb:e3:58:a6:93:96:e3:
9b:57:97:78:0b:1b:85:1b:5c:2d:5e:87:4c:7a:2c:
ac:74:b2:a3:57:4b:66:04:b3:a5:fa:50:11:56:c6:
dd:32:42:c0:6a:b5:e5:80:4b:4b:f6:36:66:18:da:
89:80:ec:4b:c2:69:fb:e2:90:56:61:5d:9a:7c:f4:
ca:36:bb:62:72:53:98:47:f3:37:ea:06:14:dd:a7:
ad:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F2:BF:39:E4:BA:56:1E:31:9D:4B:9E:FA:DA:E2:22:03:E1:BD:1F
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/EPK_OeS6Vh4xnUue-triIgPhvR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.220.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4e:8c:a8:0f:ca:c0:94:c5:33:35:33:0f:5f:ac:99:98:46:
13:6a:e3:30:c7:0e:31:7f:68:d0:10:3f:03:13:58:cc:8c:8d:
6c:45:bd:2e:83:87:39:7a:7c:de:02:5d:fd:5d:ba:e2:81:98:
75:5d:b2:a1:e9:4a:1a:11:da:8e:4c:26:fc:19:a0:ff:57:b0:
f1:a4:77:6f:17:0a:a1:da:ed:c4:cd:b3:77:24:6b:44:49:2a:
6a:b0:77:bc:ca:f7:cb:be:8f:d7:b3:62:8a:92:13:97:07:8a:
8a:cf:2e:a9:b2:0c:03:aa:c2:e0:02:ec:3f:63:33:5b:19:e3:
3a:d4:a8:d6:a7:0c:2e:64:12:8c:b6:d7:c7:8b:22:08:f4:e5:
27:06:15:51:03:26:51:2d:08:57:0c:53:b9:a0:5a:a0:35:74:
5b:51:ce:d9:b7:18:0a:63:ac:b6:b7:a2:48:7c:a3:f3:34:62:
4c:5b:8a:3b:42:01:94:bb:54:8e:fd:2d:ec:50:2f:c2:2a:36:
86:6f:37:4a:fb:d6:bf:16:29:d7:f6:f3:f4:ee:43:1e:4d:e5:
90:9e:af:05:7e:c2:f9:ed:53:67:03:03:e0:f1:a4:ac:9c:91:
7b:63:0e:9a:a7:df:45:a2:9e:45:11:09:e5:36:35:8c:c7:3f:
9e:02:df:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:13:51 2025 by rpki-client