Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/zPv_dadT06hNuRKo3iASqBxQSS0.roa
File: zPv_dadT06hNuRKo3iASqBxQSS0.roa (raw, json)
Hash identifier: wxHTtDXP3pWqU5npUaGQWQD9gJXDFqHuFN3U69JTSgk=
Subject key identifier: CC:FB:FF:75:A7:53:D3:A8:4D:B9:12:A8:DE:20:12:A8:1C:50:49:2D
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 0194228DE81361D430034746EFFB51F52B85
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/zPv_dadT06hNuRKo3iASqBxQSS0.roa
Signing time: Wed 01 Jan 2025 15:48:32 +0000
ROA not before: Wed 01 Jan 2025 15:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215655
IP address blocks: 185.145.184.0/22 maxlen: 22
185.186.48.0/24 maxlen: 24
185.186.49.0/24 maxlen: 24
185.186.50.0/24 maxlen: 24
185.186.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Feb 2025 12:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e8:13:61:d4:30:03:47:46:ef:fb:51:f5:2b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Jan 1 15:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccfbff75a753d3a84db912a8de2012a81c50492d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:bf:aa:11:6e:09:43:2a:c7:f1:e2:34:6f:
48:f5:f9:b4:91:bb:43:e9:c1:f6:7a:db:aa:47:f5:
8b:cf:c2:f7:a8:32:61:84:8a:fa:30:cc:88:31:b7:
5c:95:a8:05:53:ac:20:d9:d6:84:9f:7c:53:77:8f:
6d:e1:5d:30:00:48:94:47:3b:31:a1:91:49:e6:4e:
b5:71:b9:31:49:cb:27:20:fe:e8:56:de:f4:54:6d:
a0:44:bb:54:61:a9:25:e9:0b:be:a8:29:4d:89:6e:
09:78:0b:e0:12:56:95:e6:9c:9b:d7:b9:8d:ac:31:
f0:f0:b7:e6:7e:25:14:66:ee:ca:e7:34:af:10:99:
ac:58:52:7e:ce:dd:09:84:3e:a9:77:85:0f:3a:80:
5b:9d:13:20:80:bf:22:aa:20:44:ef:80:7f:1d:5a:
fc:e3:01:46:d5:79:15:bc:42:b3:54:a8:b2:3c:04:
8c:35:67:a0:41:33:4d:dd:0d:23:b6:58:25:c1:2e:
ee:76:d5:c2:f3:6e:cb:6e:46:23:50:9e:e6:0e:56:
0d:a3:16:43:7a:b1:a1:a4:16:54:78:cd:04:f9:a5:
d4:eb:9c:85:d5:36:9c:9d:4a:36:55:8d:99:85:5f:
23:1c:40:a4:09:ea:94:d0:35:c6:dd:15:63:df:ca:
85:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FB:FF:75:A7:53:D3:A8:4D:B9:12:A8:DE:20:12:A8:1C:50:49:2D
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/zPv_dadT06hNuRKo3iASqBxQSS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.184.0/22
185.186.48.0/22
Signature Algorithm: sha256WithRSAEncryption
13:30:d2:cb:c9:6b:b9:b1:a8:7c:90:67:a2:de:4a:e8:06:88:
14:d9:c7:a8:e1:40:69:cb:23:f1:fd:ff:91:cd:2e:15:e3:66:
5a:a0:0c:7e:31:85:9d:83:37:38:fe:72:4d:98:e1:7c:5c:4b:
08:91:ba:26:8b:7f:44:df:22:dd:77:a4:af:b2:c0:54:ad:28:
68:3e:2d:49:64:1b:c2:59:98:de:e1:97:ab:a0:80:13:91:4d:
c1:ab:33:8a:ac:55:23:26:24:9d:c7:e3:c1:2a:1d:d1:a5:66:
7d:b7:b5:d9:37:b4:24:7f:07:d2:b6:38:91:95:9c:e9:70:2e:
65:89:3f:b9:24:8e:6a:dc:3c:f0:e8:93:d2:0b:a2:36:12:3d:
e0:a0:8c:7a:ff:e7:7f:dc:fd:5d:e0:bd:6a:4e:b7:8c:7a:bb:
ef:b5:65:7c:8c:2e:da:bb:4d:b6:31:a1:f1:e8:3c:c0:1b:e3:
99:73:56:21:5d:6f:1b:6b:b5:ee:0d:1e:1f:b1:88:2a:2f:67:
02:d5:90:a5:aa:c4:5d:1c:4c:85:74:13:9d:16:fb:6c:91:79:
5f:c8:f1:93:2f:3f:89:96:52:4f:6d:37:7f:04:1f:6d:b7:00:
6e:87:44:9a:ed:01:b9:83:f1:00:81:32:8f:8c:51:c7:fb:b0:
59:75:41:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:12:05 2025 by rpki-client