Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/fIK3nOxjQmSTPdM-5oDTlEu5UaM.roa
File: fIK3nOxjQmSTPdM-5oDTlEu5UaM.roa (raw, json)
Hash identifier: XqYhXrLptd2u7VaKpVdpyu7nzy33dg45GxH9HH1KKKM=
Subject key identifier: 7C:82:B7:9C:EC:63:42:64:93:3D:D3:3E:E6:80:D3:94:4B:B9:51:A3
Certificate issuer: /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Certificate serial: 018CC94BF7652F70DAC1160F1F525E658793
Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/fIK3nOxjQmSTPdM-5oDTlEu5UaM.roa
Signing time: Tue 02 Jan 2024 08:30:48 +0000
ROA not before: Tue 02 Jan 2024 08:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59720
IP address blocks: 185.5.232.0/22 maxlen: 24
185.5.232.0/24 maxlen: 24
185.5.233.0/24 maxlen: 24
185.5.235.0/24 maxlen: 24
185.5.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:f7:65:2f:70:da:c1:16:0f:1f:52:5e:65:87:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Validity
Not Before: Jan 2 08:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c82b79cec634264933dd33ee680d3944bb951a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:ca:25:08:d1:d3:ba:27:9f:8c:8a:7a:1f:
85:22:f0:f2:87:e8:26:34:d4:66:b6:c6:e8:bb:d4:
3b:d6:74:51:77:fd:eb:b2:19:30:2b:c6:0b:13:5a:
92:c6:71:d4:18:6e:8b:c0:12:56:da:52:a8:8c:d6:
f1:1c:cd:c8:d1:15:ee:9e:e5:8d:11:eb:d5:db:db:
ba:d1:be:0c:af:af:14:3d:ca:5c:65:06:96:7c:cf:
52:51:8f:5e:de:66:99:91:85:19:93:28:2b:85:a4:
bc:b3:ed:0f:cd:63:04:da:f4:c3:a7:a3:4c:2a:28:
18:5d:f3:71:37:7b:80:59:c3:08:e1:f5:ae:bb:47:
fa:f5:2e:f1:67:81:63:71:64:de:3f:f8:02:93:75:
32:8b:c6:ea:fd:3b:12:a0:30:7c:1f:b0:15:d3:e7:
f1:33:94:96:87:35:2b:a8:fb:cf:55:c1:73:89:26:
ff:95:ca:22:12:07:5d:a1:ec:4e:eb:ab:9b:4e:46:
e9:cb:6b:01:f6:5f:de:95:c4:ad:b5:46:06:03:ed:
57:a7:bf:ec:50:73:6b:c1:4e:ed:eb:7d:07:7e:76:
a4:71:88:0d:52:2c:9a:6a:b5:94:90:33:37:5a:c0:
0a:0d:92:df:51:57:e6:02:16:e2:a9:1f:ed:21:82:
f8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:82:B7:9C:EC:63:42:64:93:3D:D3:3E:E6:80:D3:94:4B:B9:51:A3
X509v3 Authority Key Identifier:
keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/fIK3nOxjQmSTPdM-5oDTlEu5UaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.232.0/22
Signature Algorithm: sha256WithRSAEncryption
08:33:63:93:96:45:37:e2:b0:b5:a6:73:39:aa:dc:b4:02:61:
11:9f:f5:9d:84:ce:ab:1d:e7:c4:08:28:6d:ff:28:19:5e:76:
dc:70:4d:73:82:b1:99:38:b4:4d:23:ac:97:2b:d4:1b:d9:e6:
96:e3:f3:d5:84:fc:66:2d:13:60:3e:bb:73:50:7d:3b:26:4f:
6a:74:2f:04:b6:c3:75:44:8e:77:0c:78:d0:60:67:8d:cd:96:
22:44:5a:26:f1:3c:b1:1b:5e:25:98:98:12:75:2a:9c:95:0e:
d8:55:e0:ed:38:04:9c:39:51:bb:c9:ee:b7:1e:d0:e5:b2:81:
dc:0d:d8:53:00:e3:bf:7f:9a:49:86:d3:ac:73:97:0f:be:04:
da:17:ae:77:25:a3:bf:37:6e:03:41:4f:39:c0:3e:c9:6b:46:
e9:8e:da:bc:4d:74:05:ff:77:5b:45:ef:7e:28:02:67:aa:62:
02:75:cb:be:a3:93:dc:1a:2a:21:7b:91:a7:ac:27:f6:a1:1f:
94:8e:d2:aa:e6:d0:d1:4a:53:2b:fb:fd:67:eb:a4:bc:af:64:
f4:14:c8:b8:f3:9a:fd:4a:4e:4a:ce:42:51:14:c1:fb:15:11:
5f:c1:75:da:69:b4:66:4a:c2:58:5c:e9:c2:b6:b7:dd:27:a4:
0d:98:19:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:06 2025 by rpki-client