Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/oawgtginA5IFiz2MH-Gk01f7gx8.roa
File: oawgtginA5IFiz2MH-Gk01f7gx8.roa (raw, json)
Hash identifier: Z6/VyJBvvhPVemm5liWN0K1bekOS8qbqVLyFIAMP9AI=
Subject key identifier: A1:AC:20:B6:08:A7:03:92:05:8B:3D:8C:1F:E1:A4:D3:57:FB:83:1F
Certificate issuer: /CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Certificate serial: 018CC94D7F148E9F620CB56CD2FBD7BEC9E1
Authority key identifier: F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/oawgtginA5IFiz2MH-Gk01f7gx8.roa
Signing time: Tue 02 Jan 2024 08:32:28 +0000
ROA not before: Tue 02 Jan 2024 08:32:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213180
IP address blocks: 185.57.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:7f:14:8e:9f:62:0c:b5:6c:d2:fb:d7:be:c9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Validity
Not Before: Jan 2 08:32:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1ac20b608a70392058b3d8c1fe1a4d357fb831f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:26:7b:44:e1:33:66:28:bd:4e:cf:8a:0e:4d:
6f:52:50:35:04:fe:fe:07:1b:95:dd:f0:de:40:42:
71:b3:9c:8e:24:ac:19:ce:d1:f7:69:ee:6b:b8:32:
aa:c6:64:da:e4:37:db:aa:4d:94:bf:5e:e7:3f:b5:
ac:73:ac:57:a4:2f:61:38:24:07:03:6f:e1:3d:50:
c0:48:bf:1c:0c:33:2c:62:44:de:1a:ac:8f:9d:20:
0b:32:fc:db:f5:a7:a7:d1:8f:c7:f1:81:2c:07:a5:
6f:68:0b:64:c4:f7:4e:23:59:76:fa:c2:57:4b:6b:
fc:99:1a:b8:7c:4a:13:36:0c:a9:1a:2c:4f:96:b8:
c3:9c:fc:d7:d3:f6:83:38:be:f7:22:7b:64:80:d7:
8b:17:9e:4b:9c:4c:88:c0:4a:bb:a1:ad:3b:ac:2a:
9d:58:1b:5c:23:a5:d7:b9:e9:38:07:3b:7b:4f:fc:
ff:38:39:86:42:4f:af:e0:b2:ba:4b:07:03:63:79:
1a:f7:8f:71:2f:e3:26:68:8a:eb:41:29:52:fa:3d:
41:0a:32:93:dc:02:c9:55:fc:43:d2:cf:58:6d:96:
72:69:5f:81:4e:9e:ef:26:90:0d:14:57:92:43:b3:
5b:22:23:45:45:4a:f5:00:21:b2:93:15:db:ec:09:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AC:20:B6:08:A7:03:92:05:8B:3D:8C:1F:E1:A4:D3:57:FB:83:1F
X509v3 Authority Key Identifier:
keyid:F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/oawgtginA5IFiz2MH-Gk01f7gx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.19.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:0c:fe:53:e4:19:4f:60:e6:0c:59:b5:b5:de:1d:ac:ef:1e:
66:0b:40:13:d1:74:6e:b2:49:50:94:b2:5c:e9:ed:d7:3e:d1:
14:be:7a:c7:9a:70:b9:0a:3b:6a:3c:14:43:c4:0a:f9:58:5c:
53:6d:73:fe:a1:01:cd:ff:cd:68:46:6c:a2:1b:f7:20:b6:7c:
dd:35:5b:f6:72:e7:a9:f2:f9:00:8b:9e:e6:8d:34:09:57:ba:
0c:1d:68:17:58:26:4f:ef:49:d1:cf:a2:d8:33:c4:08:df:d4:
35:50:ac:98:94:1a:f6:3d:98:ce:35:6e:b4:75:cc:3f:17:1c:
08:c4:20:1b:19:d8:06:ea:e9:c1:af:72:a1:73:a4:66:d0:09:
38:8e:30:df:e6:40:bc:4c:d4:62:9a:97:75:51:bb:d9:68:f2:
1b:a0:f7:43:6f:ce:5b:9f:78:c1:23:3f:70:8b:44:2b:ed:57:
e7:9c:42:38:3c:85:38:ff:4f:5a:12:8d:f9:21:ff:92:91:4b:
6a:43:ae:b2:e3:55:d3:9b:a2:48:76:64:71:96:bf:fa:a5:8e:
63:72:22:8b:ef:18:09:3a:61:37:37:ad:13:86:de:95:19:f5:
db:5d:01:c6:eb:7e:73:98:1e:67:b3:10:cc:97:ab:89:ef:c0:
03:7f:98:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:22:31 2025 by rpki-client