Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/lM51EK62L5NDJWvbSorVxyi9txk.roa
File: lM51EK62L5NDJWvbSorVxyi9txk.roa (raw, json)
Hash identifier: sTbWwKmSxyHOSNMJ+Bxdt/QGaF7KjaYPnMjFyNDiKu0=
Subject key identifier: 94:CE:75:10:AE:B6:2F:93:43:25:6B:DB:4A:8A:D5:C7:28:BD:B7:19
Certificate issuer: /CN=02ea25e356932875c096a0317559804155f6c99d
Certificate serial: 018CC6B79C1EE91987331E8483069787FE14
Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/lM51EK62L5NDJWvbSorVxyi9txk.roa
Signing time: Mon 01 Jan 2024 20:29:30 +0000
ROA not before: Mon 01 Jan 2024 20:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200560
IP address blocks: 185.103.58.0/23 maxlen: 23
185.103.57.0/24 maxlen: 24
185.103.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:9c:1e:e9:19:87:33:1e:84:83:06:97:87:fe:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ea25e356932875c096a0317559804155f6c99d
Validity
Not Before: Jan 1 20:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94ce7510aeb62f9343256bdb4a8ad5c728bdb719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:87:5a:17:df:3f:68:a4:84:ae:6f:e3:93:11:
77:1b:7c:15:f5:83:55:13:14:2d:af:f8:1f:9f:fb:
3d:8a:91:72:df:72:f2:e6:73:c4:e5:47:33:1a:22:
dd:e1:1d:5a:e4:fb:ee:5d:43:ad:d7:7c:f1:a4:b1:
4a:b1:b7:bb:f9:b1:20:a0:29:77:31:57:88:8b:8a:
e1:09:ad:17:63:ab:83:06:60:36:ed:d8:4d:7a:4c:
e2:2f:86:c7:ee:b8:fc:21:48:db:54:82:c8:1d:41:
e1:46:9c:b4:d2:e2:80:cf:c5:4e:de:bb:5d:85:a5:
e3:50:f5:03:76:e6:42:8e:0e:d6:09:ee:a9:e6:cd:
e7:8f:3e:d3:26:27:d3:06:7e:1a:bd:d8:49:7c:5a:
ea:5f:36:fb:df:48:21:b8:98:5e:72:51:c3:a2:2d:
ed:df:f6:3e:c3:b2:36:13:c2:a1:b0:de:7c:25:39:
3b:bd:89:9b:c5:1e:c4:43:2e:94:ca:ba:9c:c9:39:
fb:00:bc:83:79:0f:0d:96:ef:6b:f6:33:e6:ba:bb:
61:ef:b4:4b:dd:9a:88:b8:44:05:8d:10:14:6c:ee:
b7:5e:34:ec:f7:a7:aa:1d:b5:fe:f1:ad:fc:ef:10:
8b:32:b2:e7:85:6c:d0:23:26:e1:0a:dd:c4:d7:d6:
e3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CE:75:10:AE:B6:2F:93:43:25:6B:DB:4A:8A:D5:C7:28:BD:B7:19
X509v3 Authority Key Identifier:
keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/lM51EK62L5NDJWvbSorVxyi9txk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.56.0/22
Signature Algorithm: sha256WithRSAEncryption
55:57:d9:92:af:a9:31:97:1e:5d:c8:bd:29:03:74:65:f1:3a:
28:4d:ae:9e:4d:8b:2b:ea:e6:f5:38:64:e7:0d:ea:f3:ac:3a:
2d:44:5d:40:77:b0:b8:97:42:61:ec:17:c7:fb:a3:8e:0d:08:
76:dd:cd:86:24:bb:b2:23:a9:8f:88:fd:47:bf:f0:0d:96:3b:
4b:07:f1:f0:98:bb:74:3d:8c:49:ec:9c:45:fd:61:27:77:d5:
a0:ed:b5:6a:93:4c:ea:c9:79:66:37:2c:e3:60:33:c7:26:5b:
68:07:34:f2:8d:02:30:93:3e:66:ac:19:57:95:5e:cc:71:da:
58:f3:66:04:a9:2b:c4:10:49:f6:5b:dd:ef:ac:08:8d:e2:49:
10:fe:a3:86:7d:23:bf:dc:45:14:05:55:86:d6:45:3c:d4:8e:
c1:29:ab:c7:d0:c3:e6:eb:83:37:1f:e5:91:cd:81:35:09:ae:
c1:b6:20:76:5b:9d:0c:3a:c3:15:cc:f7:51:e3:5a:52:e5:ef:
c6:99:25:51:0a:fe:23:da:fe:48:e9:57:84:74:85:90:95:28:
a2:c6:4d:7a:b7:9c:d1:22:6b:93:0b:c1:8d:d4:21:ed:bc:90:
2b:49:0a:28:26:9a:79:79:dc:97:52:85:f8:41:f4:81:d9:f5:
fe:33:47:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:58:46 2025 by rpki-client