Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/N4g580YDf9Z3ffxrgsXevAv7qtY.roa
File: N4g580YDf9Z3ffxrgsXevAv7qtY.roa (raw, json)
Hash identifier: Xu5mPgz39/SMsst0eQkfIH/9CivNo9swcsLpS0IdVk0=
Subject key identifier: 37:88:39:F3:46:03:7F:D6:77:7D:FC:6B:82:C5:DE:BC:0B:FB:AA:D6
Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial: 018CC3B70BF3831834D69C9896571EBF752F
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/N4g580YDf9Z3ffxrgsXevAv7qtY.roa
Signing time: Mon 01 Jan 2024 06:30:02 +0000
ROA not before: Mon 01 Jan 2024 06:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50304
IP address blocks: 185.91.64.0/22 maxlen: 24
2a05:e880::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0b:f3:83:18:34:d6:9c:98:96:57:1e:bf:75:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
Validity
Not Before: Jan 1 06:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=378839f346037fd6777dfc6b82c5debc0bfbaad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:24:77:9c:53:1c:5c:17:cb:f1:42:5f:fd:
fa:09:5e:41:4e:46:11:da:85:d6:cf:73:82:94:58:
ae:54:0c:e0:44:1f:7b:7a:09:68:d9:68:43:fc:7f:
b6:e1:4b:6c:bc:17:11:6c:8f:0a:6c:82:dc:54:80:
77:88:1e:a5:06:e8:d6:01:6e:1b:3f:48:d0:9a:16:
4b:e6:63:34:6a:38:06:7c:0d:c3:59:94:d9:be:ff:
46:b7:c2:08:22:b0:b5:2b:bb:5d:fc:e4:e0:63:b9:
a2:51:ff:6a:f2:a7:57:9e:08:b1:f9:a4:80:b3:ef:
53:08:33:ee:b4:44:fe:a3:3a:45:bd:13:16:c5:5e:
0f:a0:04:7d:0f:5c:49:aa:f6:c6:8a:e8:2a:bb:58:
3c:c1:53:70:5c:56:49:da:2e:7b:c9:be:f5:26:80:
4e:aa:76:f5:01:be:89:6a:8a:e0:d4:b8:62:79:d2:
3f:04:12:af:c8:cf:7d:3e:2e:79:c8:22:8d:1e:65:
54:71:a5:54:7b:2a:dd:8a:83:39:b2:7a:b5:e5:6b:
44:61:a7:2d:f3:1e:84:ad:f2:13:13:9f:d6:99:24:
12:31:e4:38:a3:9f:bd:45:f3:31:57:78:6c:4d:10:
83:7d:49:1f:42:99:f9:6e:a0:bc:86:03:56:c9:a2:
a4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:88:39:F3:46:03:7F:D6:77:7D:FC:6B:82:C5:DE:BC:0B:FB:AA:D6
X509v3 Authority Key Identifier:
keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/N4g580YDf9Z3ffxrgsXevAv7qtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.64.0/22
IPv6:
2a05:e880::/29
Signature Algorithm: sha256WithRSAEncryption
16:d8:dc:2d:64:f9:fb:48:21:39:57:b1:16:e1:75:d5:65:bd:
3f:f5:f8:7f:a7:fc:87:bc:a1:2c:47:b7:cd:85:2a:64:bb:8b:
06:a8:ff:0d:eb:77:b2:44:e8:0d:6c:3b:dd:c8:9a:d3:a6:50:
2b:c5:a6:53:38:ad:7e:a8:38:b2:70:ee:1f:3b:f1:e4:3a:f5:
b8:b3:d4:6a:67:18:b2:bd:cc:82:4f:ae:08:73:3b:14:2d:08:
98:c7:85:b9:e0:84:ab:ac:e6:b6:7b:65:41:a2:8a:40:0f:1b:
3f:fa:f0:2f:a3:4e:4c:01:51:4e:50:68:7f:04:16:e9:09:19:
2d:31:94:c1:ee:fd:ea:34:ed:c7:0b:bd:0b:a1:47:2c:95:70:
f4:77:c6:67:40:d5:1b:39:39:09:ed:83:ed:a7:d9:21:de:d4:
4a:95:ca:24:fd:c3:f9:a0:28:ed:1d:c9:d3:df:23:2d:28:65:
45:61:3c:6c:46:04:1b:f5:f2:89:5c:d0:9f:18:61:da:8b:8d:
c5:0f:c1:3d:47:31:d6:54:1a:a5:f5:5e:b7:69:24:14:1f:5c:
70:c1:23:c2:7f:65:3a:33:aa:fb:cf:14:49:8b:9e:0c:9a:7f:
a0:8b:40:11:44:c7:71:49:1f:44:de:4c:88:1b:9e:e6:c3:c1:
f4:53:23:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:00 2025 by rpki-client