Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/N_OSOCKcyzPcQYsegs6hUKust1E.roa
File: N_OSOCKcyzPcQYsegs6hUKust1E.roa (raw, json)
Hash identifier: kHRHHH/1Vgq2A3nkeKvHoKWdpfbO3du/uX+RGzMYviE=
Subject key identifier: 37:F3:92:38:22:9C:CB:33:DC:41:8B:1E:82:CE:A1:50:AB:AC:B7:51
Certificate issuer: /CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Certificate serial: 01941F8C434E1387A150D7AA8F29E49D7E22
Authority key identifier: 70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/N_OSOCKcyzPcQYsegs6hUKust1E.roa
Signing time: Wed 01 Jan 2025 01:47:53 +0000
ROA not before: Wed 01 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208802
IP address blocks: 185.85.184.0/22 maxlen: 22
2a05:b100::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 31 Jan 2025 16:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:43:4e:13:87:a1:50:d7:aa:8f:29:e4:9d:7e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37f39238229ccb33dc418b1e82cea150abacb751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:7f:99:62:9f:6a:f2:aa:f5:7e:74:b7:d5:
87:29:75:2c:ae:e3:12:5d:01:c4:04:4d:b1:b8:b7:
64:33:7b:70:5e:7a:36:c3:89:59:18:47:57:38:be:
83:5f:42:ff:6f:8a:d0:62:2d:d8:a0:78:89:a4:fe:
e2:ae:1f:cd:b4:a0:99:1d:c4:b7:66:73:bc:56:92:
fe:22:04:07:2c:67:d3:61:76:3d:0d:7c:8c:ae:a7:
53:3c:39:9d:95:1e:44:84:ce:20:93:58:c8:d1:79:
cd:42:84:9a:4e:06:01:01:d9:fc:64:65:08:de:3e:
ea:d4:ab:9f:23:ea:f9:af:ac:02:4e:06:19:68:87:
25:1e:07:3a:fc:ab:de:a4:63:63:9b:2c:eb:94:ed:
6e:02:d1:ec:da:d3:3f:ce:06:1c:46:b3:46:61:79:
c2:d4:b1:90:51:65:36:6e:9a:df:26:bf:cb:ec:c5:
cc:2e:62:c7:fb:fd:a7:82:6b:ae:28:db:cf:9e:d1:
ca:5c:ca:ad:01:fd:f6:ae:7b:ef:be:26:ae:70:ec:
0f:9e:7c:5b:04:16:fe:bc:0f:3b:e7:9e:b9:e4:e6:
cd:79:a9:c5:11:32:a2:7b:3d:a4:d7:9d:75:73:25:
84:40:ee:60:00:f2:be:06:97:c0:8d:cf:1f:8b:27:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F3:92:38:22:9C:CB:33:DC:41:8B:1E:82:CE:A1:50:AB:AC:B7:51
X509v3 Authority Key Identifier:
keyid:70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/N_OSOCKcyzPcQYsegs6hUKust1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.184.0/22
IPv6:
2a05:b100::/29
Signature Algorithm: sha256WithRSAEncryption
76:86:59:e6:ac:b1:83:e0:1f:34:ab:2a:6a:37:bd:da:ae:4c:
b3:5d:3f:2e:b9:23:b3:da:fa:30:0c:e5:d6:4d:2a:ca:40:15:
99:91:e0:7f:2a:2b:b6:7d:13:d6:e0:3e:47:c1:6e:f9:56:71:
97:29:a3:6e:67:b6:55:37:a1:4b:38:bd:c1:d1:3c:ef:50:2c:
52:74:df:c9:ad:a3:d7:d6:ab:37:b9:3f:6f:a4:6e:dc:87:65:
bc:f5:f7:a7:3f:d6:f4:20:e8:14:db:2b:70:81:72:ff:6d:3c:
1a:3f:33:c3:1e:d5:97:16:84:48:10:a7:c5:36:eb:88:77:9e:
6f:04:63:bb:8d:50:31:9f:d7:ed:24:28:60:f2:a5:14:12:57:
df:46:d4:fe:aa:d5:34:4d:f6:11:79:87:3d:a3:95:27:54:79:
02:52:02:31:ad:85:7c:c8:2f:73:57:67:a6:82:83:aa:62:84:
65:75:0b:6a:2e:11:ca:e7:93:8d:ab:a5:6c:ee:70:e6:0c:97:
ce:1b:38:e8:9d:81:a2:4a:c4:81:cb:f8:20:b1:04:d6:7c:f7:
b8:4f:d7:3f:47:1c:d8:5e:c2:73:92:68:33:e2:23:68:79:9e:
6e:6c:2e:e8:72:4c:dd:98:80:a5:f2:03:b5:59:d0:d9:c8:67:
38:96:22:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:18 2025 by rpki-client