Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/7mGzgrWX4ux-GMsWm4kAyhJMgPs.roa
File: 7mGzgrWX4ux-GMsWm4kAyhJMgPs.roa (raw, json)
Hash identifier: Uwr4f4nkXCGPQ66N3AlPGcz/S/xKkez7mj+3TMHilXA=
Subject key identifier: EE:61:B3:82:B5:97:E2:EC:7E:18:CB:16:9B:89:00:CA:12:4C:80:FB
Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539
Certificate serial: 01916FDEDF71CE2625AB74764BDB1D8A7BC3
Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/7mGzgrWX4ux-GMsWm4kAyhJMgPs.roa
Signing time: Tue 20 Aug 2024 12:59:22 +0000
ROA not before: Tue 20 Aug 2024 12:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198024
IP address blocks: 185.124.92.0/22 maxlen: 22
193.142.176.0/21 maxlen: 21
193.142.184.0/22 maxlen: 22
2a06:b100::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:de:df:71:ce:26:25:ab:74:76:4b:db:1d:8a:7b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539
Validity
Not Before: Aug 20 12:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee61b382b597e2ec7e18cb169b8900ca124c80fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:2c:8a:de:29:81:a1:9e:05:00:74:cf:c7:
3a:96:b5:34:63:30:0c:8f:c2:fe:75:12:76:8b:c9:
21:79:d3:26:14:53:53:fa:78:bd:dc:60:4f:63:ed:
82:73:3f:aa:8a:69:30:a8:b8:bd:25:ce:39:b9:de:
d8:9f:f0:4f:1f:fb:6b:97:f4:0e:11:24:2c:33:be:
1b:d2:b1:be:53:72:3a:0b:5a:15:50:77:34:3b:a7:
3c:47:89:4c:32:a5:1e:87:32:e3:76:15:2c:6b:0b:
42:b6:3b:b8:b1:bb:3a:da:ee:db:d1:f8:32:2f:83:
70:88:88:8d:1e:90:b8:ad:1a:5e:7f:b1:c6:3b:12:
fb:44:66:c4:95:1e:92:0c:98:ec:f5:29:ca:bd:8a:
29:bf:8f:42:c1:9b:bd:c6:aa:58:cf:d1:3c:69:6f:
4f:31:b8:8b:5e:f7:1d:89:78:98:6e:48:b4:eb:b3:
e4:28:12:e7:65:da:09:7a:69:3d:8a:1d:8e:60:1f:
28:1b:ac:94:c2:78:a1:f9:1e:f4:89:71:4c:47:ae:
8f:04:f1:c4:c1:be:95:aa:ef:a6:d9:52:b2:da:f6:
51:c2:48:6f:0a:57:ee:5d:0e:e9:e3:fb:af:94:45:
34:6c:11:50:f3:fa:6c:e9:e2:6a:82:cf:3e:9a:62:
ea:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:61:B3:82:B5:97:E2:EC:7E:18:CB:16:9B:89:00:CA:12:4C:80:FB
X509v3 Authority Key Identifier:
keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/7mGzgrWX4ux-GMsWm4kAyhJMgPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.92.0/22
193.142.176.0-193.142.187.255
IPv6:
2a06:b100::/29
Signature Algorithm: sha256WithRSAEncryption
2d:c4:50:51:48:ce:b9:d9:c1:5c:85:5b:2e:ce:a8:e7:b1:f6:
be:1f:88:67:69:91:f0:03:7b:48:cb:a9:78:dc:97:33:57:b0:
d3:da:3f:d6:24:af:bb:4c:be:e2:61:b1:b5:89:15:18:ef:9b:
8e:41:62:70:dc:7c:c6:b1:1c:c2:64:35:46:5d:57:35:4f:3a:
43:a9:70:b2:e9:7c:84:a4:f5:c4:84:81:c0:dd:72:79:2b:a0:
0f:9c:d5:c2:ef:a4:50:e8:46:4c:59:af:8c:66:bc:8b:b5:db:
bb:21:71:a9:fe:7e:38:e6:a5:46:4c:30:77:67:93:99:02:56:
96:00:3c:d7:af:cd:5d:06:13:5f:02:79:22:25:93:f7:2d:84:
a9:84:20:0f:db:9d:ad:50:06:50:a6:22:95:e1:14:f0:57:08:
56:20:16:fb:4b:d8:3f:d2:b7:dc:f2:f4:f6:8a:ed:19:b1:17:
ce:14:ef:d8:c8:ab:32:9f:da:07:42:53:61:4c:30:0b:c3:13:
fb:78:60:30:bc:27:8e:3a:13:28:62:fc:53:20:64:55:00:1a:
0f:33:f9:51:b6:83:f1:cf:19:bd:9a:0c:1b:e7:1a:b9:e8:d7:
7f:b0:45:91:b3:72:36:5b:dd:43:c1:1a:7d:28:05:51:c9:2f:
72:c3:23:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:39:42 2025 by rpki-client