Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/eXUGCOK2AaiGBPf9zmp_iEdqsl0.roa
File: eXUGCOK2AaiGBPf9zmp_iEdqsl0.roa (raw, json)
Hash identifier: oZHxeNtgSTSI4JlY11L6w3vLNZ2AZWFK59COpHjVzVo=
Subject key identifier: 79:75:06:08:E2:B6:01:A8:86:04:F7:FD:CE:6A:7F:88:47:6A:B2:5D
Certificate issuer: /CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Certificate serial: 018DEA06278ABC4BA906DE3C40B4051FD2B7
Authority key identifier: CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/eXUGCOK2AaiGBPf9zmp_iEdqsl0.roa
Signing time: Tue 27 Feb 2024 10:04:48 +0000
ROA not before: Tue 27 Feb 2024 10:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203421
IP address blocks: 185.135.104.0/22 maxlen: 22
193.160.188.0/22 maxlen: 22
2a06:f300::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ea:06:27:8a:bc:4b:a9:06:de:3c:40:b4:05:1f:d2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Validity
Not Before: Feb 27 10:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79750608e2b601a88604f7fdce6a7f88476ab25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:c7:6c:35:ca:8b:68:16:89:4f:58:7e:56:
37:f2:97:f3:a6:a3:54:d4:81:cb:24:3a:a5:a6:59:
93:1c:3a:5a:89:6a:2d:37:d9:e8:1c:f4:55:5f:c1:
4f:be:48:38:f5:fc:29:79:c1:85:90:f5:85:2e:1a:
bc:9d:3f:89:3b:e3:a1:ed:f8:be:b4:28:62:87:28:
8e:59:59:d2:0e:6f:fc:d1:08:d1:9e:1f:97:71:1a:
76:45:b2:2c:b3:62:0c:bc:03:c8:09:a5:48:53:dc:
a1:8f:a7:86:95:b5:c5:6f:30:2a:22:5c:41:fa:1c:
1a:3b:c7:c9:42:83:24:d0:12:02:39:a0:79:8b:a4:
f7:3c:ff:24:e4:ae:b9:83:81:f4:b1:59:15:9d:0a:
a0:5b:72:6c:3c:23:a7:cb:1d:17:b1:3a:f9:b0:28:
39:8f:8d:9a:67:bf:f4:08:28:60:e4:a1:9f:96:38:
23:34:cb:88:55:f9:fc:16:05:c4:e0:22:a8:06:72:
8d:1f:a3:86:78:4d:8b:5c:25:c2:10:24:82:0e:a8:
92:4e:33:0c:de:aa:d9:66:26:6a:29:1b:b4:84:43:
e9:8a:b6:5a:f6:ba:fb:db:1c:24:5d:d8:df:30:e6:
a9:0c:c5:29:18:fa:5f:42:c9:14:c9:fc:a5:2a:d3:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:75:06:08:E2:B6:01:A8:86:04:F7:FD:CE:6A:7F:88:47:6A:B2:5D
X509v3 Authority Key Identifier:
keyid:CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/eXUGCOK2AaiGBPf9zmp_iEdqsl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.104.0/22
193.160.188.0/22
IPv6:
2a06:f300::/29
Signature Algorithm: sha256WithRSAEncryption
2f:d4:b9:81:f6:c0:61:ac:07:25:d0:58:5a:32:fc:15:98:e0:
3b:5a:48:f1:a1:33:79:36:06:bb:86:a1:29:dd:e9:83:c2:c2:
6c:66:4e:64:d3:57:c8:89:7b:c7:fb:ab:13:ab:85:0f:6d:16:
69:e7:35:da:9b:c2:12:fa:d5:ee:c3:b2:30:97:f4:29:e0:24:
4c:53:f3:aa:6a:bc:6a:3d:c9:d9:aa:ea:0d:73:41:e1:95:66:
89:83:a9:df:8e:66:12:0b:ec:06:85:e2:43:72:e0:0f:48:1f:
d2:b5:59:0c:2c:40:1a:9d:38:ba:ef:32:cb:50:d0:64:40:60:
ed:d1:f5:8d:03:e9:a9:f0:0e:3f:75:b2:6a:f5:e5:38:63:fe:
d5:c8:03:6a:82:ce:e8:db:32:72:7c:96:5e:61:66:ab:4b:da:
d4:8a:29:4c:ba:af:65:79:0c:3c:c7:1c:67:f8:40:a8:b1:b0:
27:63:e6:e2:7d:f0:ff:2c:4f:9a:3b:86:45:f1:77:12:43:2e:
a4:16:fc:24:78:5b:3a:b4:b7:a7:c1:e1:65:39:49:c8:9b:09:
f5:39:9e:b6:76:da:18:8f:27:b9:87:23:4f:5b:13:2d:ea:f6:
38:2b:c3:f9:4e:29:3c:12:9f:1d:41:ac:90:22:f1:f3:af:16:
8f:8e:b3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:42:49 2025 by rpki-client