Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/M9O5Ks4qJ1Lh5faxO-ECUChvPRM.roa
File: M9O5Ks4qJ1Lh5faxO-ECUChvPRM.roa (raw, json)
Hash identifier: UA2M07aDsafH4ENMNJWNpzUgWPMSIDPWuV8vqnWNxn0=
Subject key identifier: 33:D3:B9:2A:CE:2A:27:52:E1:E5:F6:B1:3B:E1:02:50:28:6F:3D:13
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 01926B1C232577E1800A8451B2F5CF00A266
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/M9O5Ks4qJ1Lh5faxO-ECUChvPRM.roa
Signing time: Tue 08 Oct 2024 07:50:58 +0000
ROA not before: Tue 08 Oct 2024 07:50:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51074
IP address blocks: 185.128.80.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 08 Oct 2024 09:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:1c:23:25:77:e1:80:0a:84:51:b2:f5:cf:00:a2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Oct 8 07:50:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33d3b92ace2a2752e1e5f6b13be10250286f3d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:e8:2b:f6:8c:16:52:78:f2:bc:de:70:82:
03:d1:c3:77:18:20:8e:ee:d6:79:7f:b8:0f:40:e0:
41:f8:85:1d:47:85:82:ea:d1:28:7b:e3:03:26:ef:
2f:6f:63:ad:e6:c1:a6:84:cb:9c:9f:15:88:fe:aa:
b7:76:6d:a8:c3:83:98:da:3d:a1:54:f9:c8:af:a5:
7e:3b:a1:d2:44:b5:33:18:53:e2:a9:59:7d:32:08:
fa:c4:17:93:b2:c2:7f:01:ec:8e:d2:2f:7a:0d:5b:
26:d5:bd:83:bc:bf:8a:7b:3f:97:8e:56:e9:35:57:
79:58:1e:ea:65:f2:1d:84:86:ac:cc:e2:05:f9:d2:
db:7f:6e:a0:c0:09:4f:ae:05:84:de:94:20:86:13:
96:93:26:d1:af:cb:9d:05:82:85:32:19:30:fe:30:
58:ac:a7:05:0d:f6:ff:27:2d:e5:d6:86:e5:c2:0b:
64:95:4d:ea:ea:f8:c3:cd:00:ab:63:f3:a7:c8:59:
73:b3:4c:c9:57:11:ae:10:a8:3d:89:0d:e3:14:ef:
0d:dd:4b:78:0d:30:45:3a:36:23:b8:57:64:a0:b0:
80:b4:33:88:ec:57:87:e8:5d:57:59:dd:e8:2f:2c:
8d:b0:56:f4:dd:50:92:59:8f:56:82:48:98:f8:cb:
ec:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D3:B9:2A:CE:2A:27:52:E1:E5:F6:B1:3B:E1:02:50:28:6F:3D:13
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/M9O5Ks4qJ1Lh5faxO-ECUChvPRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.80.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:48:f8:9a:92:be:39:fb:fc:46:79:8f:d2:15:cc:de:70:93:
e8:ea:1a:bc:c7:ca:7e:0c:22:62:02:0e:c1:3e:e2:c8:b1:ca:
15:22:45:00:2b:d4:63:fb:1f:e0:82:38:60:8f:a7:da:91:50:
4a:32:34:83:9e:61:ac:b1:ac:a6:cb:14:2a:73:51:cd:72:5c:
e3:7c:bb:90:83:04:89:35:f7:75:5f:6e:1d:0c:51:cd:48:72:
5c:e0:b3:88:5e:42:02:e5:5a:b0:24:45:15:3d:5a:69:66:8d:
4e:28:13:f7:5e:c7:e0:3e:c7:9c:5f:b5:26:b2:29:f7:c0:0f:
5f:fa:94:7f:5c:7a:b0:d9:0d:5a:96:78:1e:e4:2b:81:16:1b:
58:02:bb:be:0d:62:48:45:10:11:1f:eb:7d:2d:e4:6b:5e:08:
46:d6:2b:33:ef:1b:6d:f3:69:2d:7e:6b:df:a5:d2:99:1f:40:
c4:eb:3d:b9:88:e8:a8:41:8f:28:34:47:91:09:84:34:e3:34:
70:c7:53:1c:ed:bd:a9:bc:0a:54:f5:18:07:28:51:e2:82:81:
eb:40:e5:f2:64:ca:31:39:6c:5f:c4:d1:42:2a:2c:71:bd:12:
af:a5:2e:4d:6a:75:5a:9b:d7:12:84:95:26:29:f1:b1:68:15:
36:d0:8c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:15:41 2025 by rpki-client