Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/eJjl1S3pfkjjQsx2ho5dgmrC85U.roa
File: eJjl1S3pfkjjQsx2ho5dgmrC85U.roa (raw, json)
Hash identifier: uKlNVYzV2CQQ1mWT0t62Wu5BdSBy9T0QmiR8tRK1poo=
Subject key identifier: 78:98:E5:D5:2D:E9:7E:48:E3:42:CC:76:86:8E:5D:82:6A:C2:F3:95
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0193E4E25CBE8FDC740F61A6D9F1E3322415
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/eJjl1S3pfkjjQsx2ho5dgmrC85U.roa
Signing time: Fri 20 Dec 2024 16:24:20 +0000
ROA not before: Fri 20 Dec 2024 16:24:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16125
IP address blocks: 185.143.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e4:e2:5c:be:8f:dc:74:0f:61:a6:d9:f1:e3:32:24:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Dec 20 16:24:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7898e5d52de97e48e342cc76868e5d826ac2f395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:bf:63:83:f0:0a:cd:b8:a8:17:81:8f:a0:
a5:56:33:6d:e3:14:7c:32:e3:53:36:1d:cf:3d:50:
87:89:8d:99:58:dd:3c:7a:88:db:5d:15:98:24:06:
15:d4:24:49:b8:21:f1:d6:c3:b9:1b:a5:2b:22:d9:
2b:a9:93:6a:c8:aa:e2:54:2a:05:04:0a:09:38:5a:
b0:19:74:d2:98:56:0f:1e:6a:dd:77:c1:70:93:90:
50:2e:15:18:21:17:fd:18:49:f0:87:d4:37:cc:38:
c5:a4:39:75:e2:b9:0c:c1:9a:44:66:0f:8d:0f:f4:
11:8e:c7:e9:b4:b5:a2:12:13:5a:e4:e3:6c:09:63:
c6:f9:01:63:56:36:3e:86:ee:b7:c8:dd:81:4c:f5:
ec:4b:f6:c6:97:eb:2e:34:65:ff:e7:3b:bb:3e:aa:
34:ed:e3:f1:d4:3a:7b:d2:8b:50:88:93:41:e3:60:
72:0c:98:08:c6:db:e1:a5:f4:74:64:c7:e8:03:00:
53:11:f6:7a:cd:c0:29:20:90:f6:bc:fd:4d:53:d7:
7c:a1:6e:2a:1e:9b:e0:db:29:a3:72:45:92:b5:25:
14:6b:b8:7e:f0:7c:e0:3f:d3:b8:65:cc:34:31:5d:
c9:db:f8:3a:49:84:c7:16:e5:09:81:86:fb:df:da:
5b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:98:E5:D5:2D:E9:7E:48:E3:42:CC:76:86:8E:5D:82:6A:C2:F3:95
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/eJjl1S3pfkjjQsx2ho5dgmrC85U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.73.0/24
Signature Algorithm: sha256WithRSAEncryption
57:6d:c3:d5:6a:46:b7:8f:95:fa:c3:a8:19:ce:d3:95:db:14:
9f:ba:5f:c9:15:30:bf:1d:33:02:22:47:18:4b:5e:d2:03:39:
f3:5e:3a:ff:69:12:f6:e7:6a:50:b7:1d:1b:ac:74:73:fd:3e:
9d:31:c4:42:52:5e:6c:00:2c:62:b3:01:1a:67:35:f3:0b:65:
96:32:7a:00:d1:52:3b:ce:dd:96:3a:d2:a0:32:c9:bd:2b:70:
18:9c:ea:53:f2:81:9e:60:9a:4e:77:60:50:c6:e7:bf:1e:ac:
3e:b1:40:10:2f:db:74:81:9d:68:82:7c:f8:83:0b:a8:87:48:
17:d4:37:1b:64:2a:86:5d:4e:12:e9:e9:1d:05:4b:a6:f0:4c:
aa:18:5f:e4:7c:35:3f:05:a8:c7:bd:85:bb:1c:ee:24:6b:a3:
04:a4:51:f6:f2:5d:46:18:b7:7f:2f:15:a9:59:4c:9c:a8:81:
77:30:19:bd:37:5f:95:34:49:51:5a:0c:f0:46:01:67:02:b9:
94:b7:47:95:c5:35:fa:ce:f5:1c:ef:65:d5:6b:1e:e7:41:ec:
53:b0:05:16:b5:33:c9:02:e0:7e:0d:ff:ef:1f:3c:28:2a:75:
98:42:af:cb:99:4f:44:de:c2:54:aa:05:bc:63:c5:f8:75:96:
dc:89:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:50:11 2025 by rpki-client