Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/XY43oKuFxtefpkW2PxP3NqrNjBU.roa
File: XY43oKuFxtefpkW2PxP3NqrNjBU.roa (raw, json)
Hash identifier: uXmA1VGocxidi+eHkL/cLdnKNcmylJhZyR27ycy3dOU=
Subject key identifier: 5D:8E:37:A0:AB:85:C6:D7:9F:A6:45:B6:3F:13:F7:36:AA:CD:8C:15
Certificate issuer: /CN=f9629775283733a45c454b8d7be5a66df0db1a17
Certificate serial: 018CC26D864DF9DF8AB14138B2EBC0612FEE
Authority key identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/XY43oKuFxtefpkW2PxP3NqrNjBU.roa
Signing time: Mon 01 Jan 2024 00:30:06 +0000
ROA not before: Mon 01 Jan 2024 00:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48418
IP address blocks: 185.254.32.0/24 maxlen: 24
185.254.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:86:4d:f9:df:8a:b1:41:38:b2:eb:c0:61:2f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9629775283733a45c454b8d7be5a66df0db1a17
Validity
Not Before: Jan 1 00:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d8e37a0ab85c6d79fa645b63f13f736aacd8c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:44:aa:80:c8:b5:4f:49:ec:c7:fc:4b:60:
49:cf:43:e7:d4:4a:c1:a2:79:fe:5c:1c:54:78:f8:
52:b7:e2:0a:34:23:a7:8e:7a:74:c9:a1:f6:3d:a7:
fb:03:71:f2:b3:bf:4d:5e:16:21:0b:08:a9:0e:fd:
cf:84:1e:0f:ff:5b:a7:bc:86:25:ef:0d:58:b6:1f:
02:c6:e0:ce:37:af:ac:19:df:ab:5e:31:fe:e9:be:
bf:6c:b9:e3:dc:99:21:27:c3:d8:4b:ad:84:58:2c:
a6:ac:54:53:ed:03:ba:27:9a:d1:9d:b3:3a:3c:37:
a7:40:e6:c4:54:42:51:25:37:54:36:7c:43:56:c5:
b2:09:5e:1d:af:1c:8b:91:a3:45:20:f7:dd:64:e8:
52:30:42:84:6d:62:07:a4:d9:f1:69:2f:ee:e3:0f:
21:8e:4b:a2:20:bc:5c:7a:cf:80:a3:db:d6:56:c7:
b4:2d:71:c1:ce:6e:9d:4c:24:df:94:9a:14:34:65:
2f:11:05:6c:cb:03:40:51:06:11:ff:99:6f:7d:47:
6d:b6:8b:10:b4:71:ca:da:48:40:f8:92:51:8e:4a:
93:6a:0d:cd:03:8c:72:a5:5e:1d:78:02:45:94:4b:
4b:c4:30:bd:d4:db:7e:94:32:20:00:6f:e2:0e:72:
4f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8E:37:A0:AB:85:C6:D7:9F:A6:45:B6:3F:13:F7:36:AA:CD:8C:15
X509v3 Authority Key Identifier:
keyid:F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/XY43oKuFxtefpkW2PxP3NqrNjBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.32.0/23
Signature Algorithm: sha256WithRSAEncryption
66:d3:70:f8:b9:69:c8:57:85:40:2e:06:fd:f6:23:3d:cd:be:
ee:3b:5e:61:81:2c:21:9d:bf:88:0b:c1:66:aa:41:7b:5f:14:
5c:63:07:17:19:18:10:eb:df:40:8c:42:1b:7f:36:b6:6a:b2:
0e:e3:60:ac:5d:36:96:e1:5f:71:5e:d9:6c:10:c7:cc:14:19:
82:90:93:36:7d:06:bb:85:f7:36:26:66:79:06:ed:ee:4b:bf:
6d:b0:60:3d:f2:8b:55:f5:f8:d1:85:2d:52:74:1b:14:7b:b6:
98:ee:ed:23:1e:2e:d6:8b:8e:56:69:b7:1d:8a:78:da:0f:ae:
94:6e:51:e0:91:bb:a0:f5:cc:5e:21:cf:8e:4b:da:90:94:8d:
90:f9:66:0b:3d:5c:05:c5:ec:e7:d0:f9:7b:af:d1:4b:dd:90:
cb:1d:ca:ad:6c:af:1d:16:1d:19:aa:a3:e3:d1:04:22:5d:1a:
ed:a8:c1:57:ea:fd:b8:c6:ab:d8:d1:56:f5:96:f5:a7:c2:b5:
25:f5:13:d7:49:9a:6d:c4:80:0f:7b:6f:b2:9c:1b:f1:75:73:
e7:bf:0f:37:16:3a:96:14:ff:ee:66:eb:0b:06:6b:a6:3a:74:
3a:1c:5e:d6:01:34:a5:f6:8c:a0:ea:6f:0e:c6:ef:b8:77:1b:
ff:4c:d5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:30:55 2025 by rpki-client