Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/1F50zpOCWz9X76KA_7-SQFgbOP4.roa
File: 1F50zpOCWz9X76KA_7-SQFgbOP4.roa (raw, json)
Hash identifier: /sqQsN3K8TrhK/2WoEK2NC5tIDMFdQjN37Q1JMJKF40=
Subject key identifier: D4:5E:74:CE:93:82:5B:3F:57:EF:A2:80:FF:BF:92:40:58:1B:38:FE
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 018CC5DCEE7B0FEEEBD87F96EA36AC939CD2
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/1F50zpOCWz9X76KA_7-SQFgbOP4.roa
Signing time: Mon 01 Jan 2024 16:30:39 +0000
ROA not before: Mon 01 Jan 2024 16:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 185.172.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:ee:7b:0f:ee:eb:d8:7f:96:ea:36:ac:93:9c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Jan 1 16:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d45e74ce93825b3f57efa280ffbf9240581b38fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:96:16:0f:d9:4b:9b:7a:f1:db:25:63:cd:1b:
66:df:87:94:e8:23:9f:23:a2:ea:fd:b6:8e:a9:ac:
62:c2:f1:bf:5c:42:cd:5d:05:81:25:ce:cd:b3:32:
c9:b1:20:e1:84:40:60:60:e3:e0:5f:7f:3e:d4:18:
74:91:37:a6:09:2d:7e:a9:26:ae:c5:65:4c:e3:eb:
c2:c9:ab:f6:77:41:5f:22:35:c1:b6:b0:5d:09:85:
08:90:9f:e1:32:c0:1e:d3:d5:df:ec:86:f2:bb:2d:
d9:43:93:38:c1:d2:2f:0a:45:7a:62:c1:4f:6c:d9:
f6:dd:e5:2b:aa:ea:f9:0e:5c:83:37:96:7d:e5:00:
2b:fb:4f:c5:32:a3:8c:87:9d:a8:78:e8:37:1a:cb:
ec:00:b2:7b:bd:74:19:04:2d:f5:4f:dd:ad:35:8b:
cd:95:69:8b:fa:a0:fa:26:1f:38:e9:22:b0:96:b4:
0c:c3:75:35:54:13:b5:78:93:f4:ef:f9:00:f0:87:
32:f8:70:aa:19:54:e3:fc:1e:69:42:c1:1b:2e:9c:
ba:c4:38:49:ac:89:40:b0:10:97:aa:4a:51:da:ed:
63:72:12:e6:a1:7e:03:a6:2a:01:97:54:20:ae:e4:
9c:e3:67:fa:82:71:f1:50:e2:63:ec:e0:f7:ff:15:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5E:74:CE:93:82:5B:3F:57:EF:A2:80:FF:BF:92:40:58:1B:38:FE
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/1F50zpOCWz9X76KA_7-SQFgbOP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.227.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:61:0a:5d:5d:29:a8:3a:29:2e:33:97:e0:1d:fa:1a:6b:3d:
37:cd:72:50:d9:33:43:fe:ca:0c:b8:e3:ca:b3:16:ac:06:bc:
94:37:f1:ad:9e:2d:6a:c4:4a:21:01:c9:d8:a9:13:51:7a:9f:
8f:c6:83:1a:0d:3a:05:5f:8e:22:94:c8:70:bb:2a:7f:d2:80:
22:3d:a8:df:10:09:6c:6d:d4:a5:c0:36:d8:2f:db:26:e2:c3:
4c:0b:23:b0:0e:95:d8:c9:44:69:3d:a2:93:c1:14:f4:09:02:
67:01:8d:f9:90:5e:eb:55:8a:0b:e2:5c:58:76:3e:1d:03:f3:
87:97:ec:49:be:2e:1b:32:b1:2a:43:1b:bd:eb:8d:84:cf:38:
78:16:97:a4:b8:d5:0b:4f:ee:6d:d1:46:fc:b7:81:14:72:55:
d6:29:a2:4e:2f:5c:1e:40:02:ce:96:b2:8e:bd:ee:5c:94:38:
d8:10:b0:31:53:9f:d1:fd:25:65:c2:40:36:0b:30:f8:07:7d:
e4:55:a1:51:b7:5a:4e:39:15:bc:7b:3c:16:56:90:05:2f:df:
1e:7e:28:ec:51:a4:00:a4:54:e2:74:b9:39:28:63:aa:1f:e6:
4d:50:6e:22:8b:6d:13:3c:f5:5e:0c:b2:3f:31:7e:db:62:bc:
2c:11:62:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:19 2025 by rpki-client