Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/7nC_Ap5UyELjzArWztmAsw6_ABw.roa
File: 7nC_Ap5UyELjzArWztmAsw6_ABw.roa (raw, json)
Hash identifier: aVtFCAdIKWPIOAHOCkjPKLHF955UsissOLWRtHixxq0=
Subject key identifier: EE:70:BF:02:9E:54:C8:42:E3:CC:0A:D6:CE:D9:80:B3:0E:BF:00:1C
Certificate issuer: /CN=b545e434bba473706da8336fda016bb2e68b3623
Certificate serial: 018CC49381D0E9C6DA85B71BEB2592DB80CC
Authority key identifier: B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/7nC_Ap5UyELjzArWztmAsw6_ABw.roa
Signing time: Mon 01 Jan 2024 10:30:50 +0000
ROA not before: Mon 01 Jan 2024 10:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200914
IP address blocks: 185.91.159.0/24 maxlen: 24
185.91.156.0/22 maxlen: 22
2a03:8960::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:81:d0:e9:c6:da:85:b7:1b:eb:25:92:db:80:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b545e434bba473706da8336fda016bb2e68b3623
Validity
Not Before: Jan 1 10:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee70bf029e54c842e3cc0ad6ced980b30ebf001c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:1f:38:f9:1f:2d:f4:d0:8a:04:c6:2c:31:
fd:df:46:a4:26:ba:87:01:97:1c:3c:0f:84:22:37:
4b:1c:9e:80:4c:8a:2d:97:fd:51:2b:81:15:7d:e7:
8b:6f:47:e4:c3:9a:d0:35:9f:06:32:c5:87:b5:37:
a6:2f:6f:14:4e:35:0b:ae:80:8f:e2:66:2c:3c:9d:
7a:b3:a2:a3:fe:06:d9:56:e2:68:64:df:3f:96:c6:
3f:69:dd:0a:e5:f0:49:24:f5:55:65:67:8c:d6:a9:
db:95:48:45:e7:c0:1f:e7:15:5d:32:0c:a6:3b:de:
5c:a1:18:01:8f:05:c6:1a:3a:79:54:90:93:58:30:
61:f4:50:a5:9e:e2:8b:bd:a1:f4:a3:b4:20:61:3f:
4e:c6:f8:9c:a0:dc:6a:88:3d:50:d5:e7:5d:b5:bf:
64:c1:fb:0e:6a:4a:41:0e:68:cc:6b:b9:e4:5a:4f:
ae:07:19:75:44:0a:36:2d:f0:c2:43:7d:e1:8b:9c:
d0:6e:86:77:54:e7:cd:1e:0f:94:18:74:4b:b0:74:
72:e3:5a:91:ac:c4:35:8a:34:83:c7:fc:a5:09:1c:
d6:18:c6:88:a7:5d:89:15:6f:60:36:9c:81:53:fc:
59:bc:f1:09:5a:bc:07:d2:4a:93:59:95:e6:cb:fb:
25:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:70:BF:02:9E:54:C8:42:E3:CC:0A:D6:CE:D9:80:B3:0E:BF:00:1C
X509v3 Authority Key Identifier:
keyid:B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/7nC_Ap5UyELjzArWztmAsw6_ABw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.156.0/22
IPv6:
2a03:8960::/32
Signature Algorithm: sha256WithRSAEncryption
41:5f:74:d5:4a:cb:5a:3f:52:f8:59:bc:79:0a:47:7a:45:4e:
84:01:d6:f4:3a:66:86:d2:e9:60:69:bc:a6:54:f1:23:91:05:
3f:13:d1:83:8f:a0:04:0f:c3:27:ca:fe:b2:bf:7f:27:ab:2e:
b4:bc:0a:66:c9:37:f8:46:ab:70:a5:e9:4a:48:fc:10:82:56:
80:2c:28:39:5b:22:d7:06:59:08:38:7b:c0:0a:37:c6:a5:4c:
a7:33:dd:36:28:fe:05:38:d4:19:4f:99:45:c4:73:18:5a:ab:
95:28:e6:67:aa:f0:5f:6a:95:76:d0:e8:59:5e:5f:e5:be:1b:
1e:cf:e5:96:e3:6e:f3:33:75:60:8d:f1:9c:7e:54:c3:f1:a1:
36:08:ea:b6:41:e1:0b:79:6e:35:f7:68:c7:6b:fe:91:de:2d:
e1:56:35:49:8d:b9:04:6c:08:54:1c:0e:09:7d:6b:1c:a1:10:
f3:84:c1:1f:07:a3:ff:e9:ba:3d:3b:3c:6c:64:38:3d:76:be:
47:30:53:14:35:15:7b:72:57:6f:36:98:1a:44:9f:3f:0e:9f:
08:c6:a7:3a:a4:8f:bd:00:30:df:c4:bb:97:9c:6c:84:a6:34:
09:b6:2b:25:03:10:e0:89:05:90:c3:43:c6:1b:7a:63:70:83:
97:bb:f7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:24 2025 by rpki-client