Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/5F-k1lewaqOw-OJmkG13ceHIOvU.roa
File: 5F-k1lewaqOw-OJmkG13ceHIOvU.roa (raw, json)
Hash identifier: 0rRJdjQyIPmfVNRK6Q5OmaFYRsg7KukCyyTatQa9Wsc=
Subject key identifier: E4:5F:A4:D6:57:B0:6A:A3:B0:F8:E2:66:90:6D:77:71:E1:C8:3A:F5
Certificate issuer: /CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Certificate serial: 018CC94D73D3F358C92C5F1C67269CE1AEBA
Authority key identifier: F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/5F-k1lewaqOw-OJmkG13ceHIOvU.roa
Signing time: Tue 02 Jan 2024 08:32:25 +0000
ROA not before: Tue 02 Jan 2024 08:32:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213299
IP address blocks: 185.155.116.0/24 maxlen: 24
2a10:40c0::/32 maxlen: 32
2a10:40c0:100::/48 maxlen: 48
2a10:40c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:73:d3:f3:58:c9:2c:5f:1c:67:26:9c:e1:ae:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Validity
Not Before: Jan 2 08:32:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e45fa4d657b06aa3b0f8e266906d7771e1c83af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f2:c7:e5:6d:7f:19:7d:27:5f:9c:96:6f:3a:
03:49:79:70:fe:09:4b:e4:94:97:76:7c:2b:d5:ee:
ec:6c:9e:d4:dd:1f:14:c8:5d:e7:6e:c6:20:52:ce:
4a:28:10:91:48:45:e2:ec:df:6b:7f:f7:8f:5d:17:
1a:2d:69:9a:84:75:f4:cc:f6:85:03:10:6e:df:af:
58:ec:cd:06:a1:05:45:49:03:ca:22:de:ea:bb:81:
50:16:cd:2a:23:b8:48:93:cc:70:87:cd:15:2d:be:
45:ea:a4:f1:0d:20:a9:f4:30:12:76:2b:fe:72:a2:
00:98:29:45:31:56:3f:32:9f:b8:e9:78:e3:70:ed:
3a:73:3a:4e:f5:05:9c:24:9e:47:6a:1e:e4:28:e8:
ef:16:f8:49:4b:1c:09:00:84:da:4d:31:2b:76:0d:
4b:8f:56:5a:1b:6f:c9:49:a1:93:c4:b4:78:5d:f4:
35:cd:22:69:c5:9e:35:2d:e8:9e:61:06:05:25:3e:
64:ec:cf:1a:2c:00:df:26:b9:df:6b:65:a6:a6:d2:
71:43:41:04:cd:4f:c6:7e:b8:dc:a3:44:27:5e:e6:
dc:8d:57:9d:0f:e7:63:a0:e5:6b:6f:7b:c9:e2:7a:
38:af:e0:b0:bd:9c:d7:e5:0c:9d:ae:e1:70:bb:6a:
df:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5F:A4:D6:57:B0:6A:A3:B0:F8:E2:66:90:6D:77:71:E1:C8:3A:F5
X509v3 Authority Key Identifier:
keyid:F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/5F-k1lewaqOw-OJmkG13ceHIOvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.116.0/24
IPv6:
2a10:40c0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:6a:0f:28:2b:46:7f:00:b7:a4:69:2e:c3:69:35:8d:90:50:
ae:0e:09:2c:d2:17:f3:a8:d5:fc:06:7c:1f:af:02:c5:3e:ea:
c1:12:96:ec:a7:68:ae:b7:39:25:b2:63:e0:8e:39:02:9f:7f:
39:5c:5c:31:9a:d1:0d:8d:0e:ac:c4:b5:7d:49:c7:60:1f:43:
47:9c:d3:5d:d4:a2:c2:7d:f1:fd:ef:bb:7a:e5:1d:c9:56:33:
4b:7f:bc:74:7e:ca:ae:b2:ac:9f:73:c1:de:22:39:78:1e:43:
bf:40:00:ae:1e:9e:1d:d9:51:32:c9:77:e2:34:8c:fa:86:58:
9f:d7:5c:1b:b2:79:38:d1:96:3f:8c:9b:cc:24:c4:2c:c7:8f:
35:e4:95:c8:2c:9b:5c:0b:3e:2f:76:36:6b:bc:17:2d:86:40:
da:18:17:c3:1d:b3:8a:8e:83:38:0c:1e:7c:76:de:b0:1d:8a:
46:79:98:15:17:a7:27:e6:a5:00:46:f2:02:f1:77:a4:ad:a6:
9e:ad:25:f3:41:a6:b1:ee:52:23:e3:00:c1:33:12:95:2c:9a:
a1:d7:8c:ec:e1:14:fc:15:20:98:59:f8:11:c0:72:11:d4:17:
e0:47:d6:7f:05:85:af:1e:6c:eb:8e:91:69:76:c8:fc:87:9a:
7f:0f:98:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:31 2025 by rpki-client