Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/kx43jv3HlYb9LpAvew9cQAI6-DM.roa
File: kx43jv3HlYb9LpAvew9cQAI6-DM.roa (raw, json)
Hash identifier: c0mqN00i+VWjjuju2ej/jq8BYvnYUvUBjx+zPpAE/qU=
Subject key identifier: 93:1E:37:8E:FD:C7:95:86:FD:2E:90:2F:7B:0F:5C:40:02:3A:F8:33
Certificate issuer: /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial: 01928A79B99D41B7DE0F608EF3349A40A137
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/kx43jv3HlYb9LpAvew9cQAI6-DM.roa
Signing time: Mon 14 Oct 2024 10:01:25 +0000
ROA not before: Mon 14 Oct 2024 10:01:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.51.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:79:b9:9d:41:b7:de:0f:60:8e:f3:34:9a:40:a1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Validity
Not Before: Oct 14 10:01:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=931e378efdc79586fd2e902f7b0f5c40023af833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8e:7f:3b:bc:39:3f:91:d3:51:3d:48:8b:45:
2d:2a:9f:7c:1f:9e:27:db:e2:78:bd:3a:01:0d:63:
ed:c4:31:e2:48:c4:2a:56:7a:0a:76:c5:b8:2f:30:
be:49:e9:dc:85:61:0d:d3:66:98:4a:72:7c:30:56:
93:ec:98:ed:85:97:bc:63:66:74:9a:37:10:5d:7b:
84:3e:e4:4c:58:b4:a8:97:d4:ae:af:a4:1e:db:93:
c2:4e:8f:b6:ef:d5:5d:1f:46:f2:bd:b2:fe:8c:1e:
2c:18:75:52:1b:e1:1d:57:45:bd:b7:63:4f:59:3c:
c4:1b:4e:b8:ba:e4:2d:1c:bf:49:f3:11:74:4e:c1:
ee:81:55:05:36:ba:aa:ac:9a:ba:65:43:72:de:6a:
82:91:82:8a:c9:ee:67:1b:10:22:2e:14:33:4c:04:
4b:d0:be:d9:63:7a:a9:e3:4d:b4:73:52:99:a8:08:
22:8b:c2:00:0e:c0:fe:88:89:2e:2b:6a:7b:15:0b:
90:77:65:e6:27:0d:c3:67:1e:85:e0:44:23:f6:4c:
ab:66:43:ed:9c:95:1f:92:32:46:ac:72:df:f7:7d:
c9:57:e1:c2:36:6e:49:02:5c:38:cc:25:c5:2f:3f:
1c:c8:2e:49:5f:fb:1a:75:e9:12:61:77:7c:2f:fb:
59:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1E:37:8E:FD:C7:95:86:FD:2E:90:2F:7B:0F:5C:40:02:3A:F8:33
X509v3 Authority Key Identifier:
keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/kx43jv3HlYb9LpAvew9cQAI6-DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.100.0/24
Signature Algorithm: sha256WithRSAEncryption
df:3b:e9:15:0d:09:6c:8f:2c:44:13:21:76:3c:67:b3:da:05:
c1:1e:bd:f4:35:fb:8f:4f:91:a5:63:1c:c6:76:03:c2:ad:83:
60:e7:e9:b5:86:6e:13:20:22:45:45:a4:40:b0:cc:6b:89:46:
b1:56:a6:4b:7a:0f:a6:0d:8d:a8:6c:44:b7:13:5c:b9:92:8f:
b3:e0:ba:c3:fc:b2:87:c6:ef:2d:57:97:77:71:48:b8:9b:8c:
ec:f0:a9:90:ab:23:29:0c:59:3e:4a:93:1c:9b:b0:0b:ec:35:
44:70:ac:e1:09:97:08:c3:6f:6e:93:dc:d0:a7:e0:22:60:2b:
52:8d:c0:56:82:e8:04:72:cd:28:d4:54:06:a7:5d:1d:96:e5:
46:f7:57:3c:fd:e0:98:55:38:20:f2:98:71:a2:cf:fb:32:c4:
e7:99:c0:60:99:c8:f0:c3:f6:32:16:67:6c:7e:fa:26:33:70:
60:c2:c5:e3:80:9d:e4:15:8a:28:9c:d4:95:bd:1d:3b:98:01:
55:14:72:0b:74:9c:cc:2f:e3:dc:4f:3f:09:23:87:2c:e2:e5:
5e:1e:8a:4e:6d:ea:4d:aa:1c:8d:24:e6:b0:0c:26:4e:ab:a5:
06:75:60:ba:25:43:ba:ce:2b:c0:88:0f:2e:c0:b0:fe:1b:b0:
7c:8f:f6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:18 2025 by rpki-client