Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/mfwXacq8KnfQZ6o2qV6y362DoyQ.roa
File: mfwXacq8KnfQZ6o2qV6y362DoyQ.roa (raw, json)
Hash identifier: FgN2Vp+o6FV40LiNa9G18penECAGVQMKDTI/BWMI0L4=
Subject key identifier: 99:FC:17:69:CA:BC:2A:77:D0:67:AA:36:A9:5E:B2:DF:AD:83:A3:24
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 019421B24568E8E031DC0148B4964F98A1E9
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/mfwXacq8KnfQZ6o2qV6y362DoyQ.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6723
IP address blocks: 178.255.176.0/21 maxlen: 24
185.5.252.0/22 maxlen: 24
2a01:6d80:f000::/36 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 Jan 2025 11:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:45:68:e8:e0:31:dc:01:48:b4:96:4f:98:a1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99fc1769cabc2a77d067aa36a95eb2dfad83a324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:8e:ba:b9:2f:67:56:35:1a:05:2d:dd:e9:
4e:1a:e9:a4:32:1c:9c:6c:43:55:1a:94:49:22:ad:
78:ec:0d:6f:ae:80:92:0a:a4:6c:8b:45:b3:be:95:
35:0b:e2:91:57:5e:33:d5:ba:e7:34:71:08:e0:db:
33:ff:29:40:ef:84:cd:04:f0:fc:4e:95:ea:97:af:
00:fe:ed:e5:8f:3e:78:cf:b5:cb:44:b9:5c:2a:2c:
fd:d2:a3:08:8d:96:58:42:bd:89:d3:3e:e1:43:2b:
c3:40:14:8c:0d:54:fd:a0:2f:d2:8a:81:11:df:ea:
00:b0:e8:53:ff:29:e8:a9:44:17:39:ab:b8:4f:56:
72:b7:2d:5a:e6:ad:23:ab:27:51:7c:5e:40:14:e1:
7d:22:be:35:87:c9:a3:5a:f7:d4:f0:25:99:28:1d:
0b:0b:b8:f1:63:2e:02:42:b8:51:78:52:81:6f:55:
c5:44:3e:be:2d:4c:cc:7a:f6:4e:45:12:e5:81:b9:
9e:9c:d0:97:54:db:a7:12:a7:b6:90:f4:45:98:52:
86:14:06:74:5a:58:7a:ec:6e:71:88:dd:06:8a:4f:
ff:d1:d8:88:ec:2f:ba:31:fb:e6:9a:c1:68:00:e8:
0a:70:88:92:b0:ba:1d:a1:eb:08:56:55:77:f5:40:
a0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FC:17:69:CA:BC:2A:77:D0:67:AA:36:A9:5E:B2:DF:AD:83:A3:24
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/mfwXacq8KnfQZ6o2qV6y362DoyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.176.0/21
185.5.252.0/22
IPv6:
2a01:6d80:f000::/36
Signature Algorithm: sha256WithRSAEncryption
2a:81:a3:ff:77:e3:d4:c2:bf:23:f4:0d:39:8c:c5:43:5b:92:
80:b0:c0:3b:c4:07:2e:54:5e:c7:6d:49:37:3b:d7:3e:0a:fb:
d3:66:93:e0:3e:a5:45:43:f1:81:bf:eb:c7:44:36:f4:4c:61:
dd:1b:31:86:4f:34:53:03:65:79:04:f1:14:7a:9d:fa:b4:4a:
ed:a0:9c:d1:e4:75:75:cb:99:00:43:ff:31:d5:97:52:7d:45:
34:07:f4:6d:66:36:dd:e4:ba:fd:01:d0:49:39:a6:75:84:8a:
00:a6:f5:2d:47:60:41:f5:52:33:b8:43:30:47:49:63:72:3d:
ae:ac:0f:c9:7b:f7:d1:f7:67:62:35:a6:8b:c4:48:81:ef:04:
0b:9d:90:6b:57:b3:29:c8:53:56:c0:ed:12:47:c9:3d:95:85:
ab:12:b1:b9:43:5c:e5:0f:1e:ef:d4:c9:ff:98:fe:d0:35:7f:
3a:f0:22:9b:d2:c4:b6:32:b9:76:ba:37:fe:66:77:93:3e:38:
4d:bd:c8:10:04:36:50:1e:72:59:70:a4:65:e1:67:6e:ea:90:
66:ac:12:84:ce:3d:23:10:b7:26:96:f3:e9:60:5a:bf:4a:82:
c1:8b:62:24:87:6d:f9:9e:35:63:92:6b:d5:57:77:1c:17:eb:
d6:c8:a9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:43:50 2025 by rpki-client