Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/c9geigAmmYdC0jdZ_HAWepvRGcA.roa
File: c9geigAmmYdC0jdZ_HAWepvRGcA.roa (raw, json)
Hash identifier: sKf4aAzpGfm5Z9gncFAWh3U4T2F63g7J4nId33qmFco=
Subject key identifier: 73:D8:1E:8A:00:26:99:87:42:D2:37:59:FC:70:16:7A:9B:D1:19:C0
Certificate issuer: /CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Certificate serial: 018CCFA8E118B426AE21C2CC641DDE6695B0
Authority key identifier: 7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/c9geigAmmYdC0jdZ_HAWepvRGcA.roa
Signing time: Wed 03 Jan 2024 14:10:00 +0000
ROA not before: Wed 03 Jan 2024 14:10:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56485
IP address blocks: 185.184.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:a8:e1:18:b4:26:ae:21:c2:cc:64:1d:de:66:95:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Validity
Not Before: Jan 3 14:10:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73d81e8a0026998742d23759fc70167a9bd119c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:1f:eb:3f:60:0b:20:52:ff:3f:c3:b9:f9:
78:62:a1:98:ee:f8:e4:34:ae:9e:c7:36:61:c5:c3:
f7:e8:b8:ba:f2:b2:ce:58:94:a2:5a:ad:3e:bd:f5:
7a:6d:a6:99:f8:1a:ac:02:aa:a7:1e:cc:1c:c9:9d:
a4:8d:4f:67:d4:24:3b:23:ca:b8:70:a6:e2:5a:3b:
42:e5:7d:0d:a4:9b:b3:97:b8:ab:a5:1f:db:81:f6:
a7:46:4b:e4:e7:20:ed:8c:3d:9f:40:5a:17:e6:fa:
d0:60:f5:9f:ad:d3:80:00:ad:f6:ed:1e:13:78:96:
b3:3f:02:c4:f0:28:1a:1c:0a:4c:f9:c8:1c:e5:4d:
41:ad:e7:60:e6:b0:56:b7:66:17:f7:9f:1b:b3:89:
38:32:aa:92:3f:d7:ab:9a:85:20:c3:13:1d:29:43:
c5:b1:39:aa:97:4e:13:4d:17:04:40:03:60:6e:dd:
f6:c7:f4:5b:30:ae:8a:c5:cb:a9:f5:1a:db:ee:10:
04:e2:da:55:5c:a4:b7:25:06:30:69:c6:5d:ad:c5:
cb:2f:36:ec:4e:6c:89:36:88:25:11:a5:65:8a:17:
65:43:2a:eb:92:33:be:64:77:26:90:85:19:4c:47:
9f:6d:bd:45:4c:50:30:7b:99:c0:d2:0a:39:db:5e:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D8:1E:8A:00:26:99:87:42:D2:37:59:FC:70:16:7A:9B:D1:19:C0
X509v3 Authority Key Identifier:
keyid:7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/c9geigAmmYdC0jdZ_HAWepvRGcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.43.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:b2:17:b3:30:8b:b5:e9:27:77:51:5a:eb:7c:1a:b6:51:d0:
3f:d4:ae:d8:91:40:56:79:38:ce:72:7f:26:1e:a0:03:3b:17:
67:d7:04:4a:d8:9b:30:f5:e3:14:98:41:30:71:68:db:8d:4d:
8e:22:56:d7:c3:54:5b:8b:19:a4:37:2f:cc:68:e9:64:9e:b7:
cd:8f:dc:68:09:2e:d5:c7:a3:1b:ca:61:e3:79:c8:61:b4:eb:
3d:cc:89:0f:49:2b:4d:00:88:7d:8b:2c:6b:a2:49:68:c7:5c:
a9:c3:51:cc:43:87:4b:ee:62:80:1e:f4:c5:1f:f7:5f:f8:8f:
14:c2:e5:3f:02:36:8c:df:7d:10:cc:57:32:1f:9f:a7:31:65:
3f:4e:46:b7:64:fa:d7:04:2e:9f:67:a0:a4:10:a9:1e:03:9c:
47:e0:a9:d0:bd:4b:4d:2d:94:01:cf:5c:c3:a0:20:d1:74:3c:
00:d2:69:5d:ff:b5:cc:3f:e4:30:9e:45:6b:90:73:8e:b6:88:
18:04:48:f4:2c:12:7e:14:80:b1:c7:02:12:45:d5:11:6e:1a:
d3:51:3e:6b:93:1a:89:ad:41:34:26:3b:cf:1c:21:5c:76:6b:
4e:28:af:e8:08:8f:a1:ce:ac:01:8d:be:aa:b6:e3:dd:82:af:
9a:c4:92:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:57:55 2025 by rpki-client