Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/5zpfskIk080z78xcguLA2_xCF_k.roa
File: 5zpfskIk080z78xcguLA2_xCF_k.roa (raw, json)
Hash identifier: jnfEghFccjy1qLJ7VJvH7LVMZc/eI84qZhERRDQTqAY=
Subject key identifier: E7:3A:5F:B2:42:24:D3:CD:33:EF:CC:5C:82:E2:C0:DB:FC:42:17:F9
Certificate issuer: /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial: 018CC94D794E0839872275AD6EB2B1434E11
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/5zpfskIk080z78xcguLA2_xCF_k.roa
Signing time: Tue 02 Jan 2024 08:32:26 +0000
ROA not before: Tue 02 Jan 2024 08:32:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42913
IP address blocks: 185.193.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:79:4e:08:39:87:22:75:ad:6e:b2:b1:43:4e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Validity
Not Before: Jan 2 08:32:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e73a5fb24224d3cd33efcc5c82e2c0dbfc4217f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5f:fa:bf:c0:a4:9c:7a:43:29:97:30:ba:f9:
7f:a1:1e:6a:69:de:cf:fb:43:0a:b5:7e:b5:1f:8b:
75:ac:05:c5:65:65:df:53:5d:6a:af:22:98:2a:13:
21:65:76:a3:40:8e:d6:1c:8a:ee:fe:61:fc:6e:2d:
9c:87:6c:b7:f7:52:da:fc:ad:7d:c0:e4:c9:eb:eb:
19:26:62:0f:cb:dd:85:5d:7d:39:5f:25:e6:c8:cb:
5d:f4:98:92:f6:1a:27:5f:93:a3:46:34:f8:44:a2:
6d:b9:0e:b2:43:33:06:ce:7b:90:20:0f:fd:64:a3:
1c:68:54:22:36:fe:c4:e7:3e:4c:67:38:6b:3d:3a:
27:0e:13:2f:39:4a:58:8b:65:a0:59:72:c4:68:6a:
74:36:49:21:78:93:f1:5b:43:53:67:a4:47:3e:ab:
ec:f9:ba:d3:fb:84:41:1f:23:b6:2e:32:b7:db:21:
21:88:cb:14:a6:28:6a:76:fc:69:53:51:76:48:f0:
5b:3f:ca:f8:e8:81:d5:3d:ce:96:3c:2e:c9:10:33:
65:2d:40:9f:76:ed:51:cb:e9:9c:82:52:21:db:53:
20:fe:aa:00:93:d7:46:70:92:b5:63:bb:87:d6:3b:
7c:a8:ea:3b:ae:0e:c5:cb:6d:d4:d1:62:c7:f5:79:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3A:5F:B2:42:24:D3:CD:33:EF:CC:5C:82:E2:C0:DB:FC:42:17:F9
X509v3 Authority Key Identifier:
keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/5zpfskIk080z78xcguLA2_xCF_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.148.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:2e:11:28:ad:a2:be:c7:49:11:96:a2:e0:70:63:8a:60:29:
04:c8:ec:a9:7c:dc:88:b1:41:5f:f2:3f:f6:9e:0f:e1:23:07:
53:55:85:51:ed:2c:44:2b:38:3c:42:a9:2b:9c:55:49:91:a4:
19:bd:d7:fd:0f:be:2f:24:5e:1c:39:b3:69:85:5e:49:02:f3:
1b:fa:97:6e:e0:41:70:d3:71:d1:ea:56:8e:1c:c7:55:5d:e7:
35:17:cb:89:67:f8:c0:d4:af:17:76:5e:d4:80:c7:5f:cb:13:
22:7c:bf:83:69:19:21:d4:da:1e:d7:de:de:a3:8e:34:10:09:
73:e6:15:7c:cc:66:21:17:bf:1b:a8:8e:ce:1d:41:bb:68:18:
81:3b:4f:2f:aa:d1:d1:70:0c:d1:35:50:9e:84:54:61:34:db:
27:dc:ce:de:74:ef:07:cf:1d:b4:f4:ef:1a:e2:7f:df:53:52:
b3:dd:12:d5:8f:9c:bc:48:03:c5:a9:4b:e7:d8:0e:93:c6:be:
bf:3d:ac:f7:7d:5e:6b:49:d9:5e:e8:2f:36:6b:4d:98:ea:9e:
2b:43:85:1e:dd:44:b4:62:bf:8e:bd:a5:9a:e0:ec:de:5c:f6:
a9:d6:58:58:27:75:80:d9:93:8d:a9:c0:93:23:ea:76:e9:79:
52:1f:3c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:58 2025 by rpki-client