Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/iU86GfoIgufmv5yfBLBbFSW1wOM.roa
File: iU86GfoIgufmv5yfBLBbFSW1wOM.roa (raw, json)
Hash identifier: P7GHVGWIu2bLokiycDwp3NJD3156L+qCE3JR4F84y5M=
Subject key identifier: 89:4F:3A:19:FA:08:82:E7:E6:BF:9C:9F:04:B0:5B:15:25:B5:C0:E3
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 0193E7A6F9847F20B7322B0815110736DBFF
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/iU86GfoIgufmv5yfBLBbFSW1wOM.roa
Signing time: Sat 21 Dec 2024 05:18:19 +0000
ROA not before: Sat 21 Dec 2024 05:18:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 168.199.169.0/24 maxlen: 24
168.199.234.0/24 maxlen: 24
168.199.245.0/24 maxlen: 24
185.101.255.0/24 maxlen: 24
185.226.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e7:a6:f9:84:7f:20:b7:32:2b:08:15:11:07:36:db:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Dec 21 05:18:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=894f3a19fa0882e7e6bf9c9f04b05b1525b5c0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:78:7c:9c:be:c5:4e:fa:3e:94:4a:96:08:fd:
cc:30:0e:ed:60:35:29:63:6b:60:f6:d1:a3:7e:3b:
27:3e:12:f9:c8:83:f4:6a:2d:70:8b:70:40:85:f8:
6d:46:36:4c:0a:d8:8f:ea:ff:2a:04:0f:48:10:74:
37:75:4c:d4:73:b6:c8:7e:8a:0b:4d:d9:5f:04:92:
28:bb:f1:ec:3a:ba:55:b9:4c:fc:06:f1:92:3a:39:
71:e7:ec:42:8e:d7:2e:0b:9f:4a:9e:a6:fe:0b:11:
62:e3:df:40:0f:1d:b4:63:55:1d:fe:49:7a:44:95:
dc:98:41:a9:8b:6e:fe:5b:eb:37:50:71:b6:3a:d8:
48:9c:99:20:82:58:b4:8a:1d:aa:b5:1c:7e:fd:f1:
51:20:8d:19:16:27:1f:8a:93:91:bb:4b:e9:af:6e:
f7:2b:7d:16:57:32:d8:0f:03:27:0e:6d:a4:85:ad:
54:26:bc:23:08:23:09:d0:e0:af:5f:f2:70:ee:7e:
42:08:6d:4d:80:1f:8c:90:a0:9e:71:b3:7f:4b:b5:
7f:c7:47:c1:7c:ca:0d:4d:e1:53:8f:57:4f:f4:a5:
6e:52:2d:51:f1:a3:b6:eb:64:ce:ba:b7:5c:ac:90:
d3:33:ab:ea:bf:7e:9a:3d:c7:b8:e4:bc:d4:17:a4:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4F:3A:19:FA:08:82:E7:E6:BF:9C:9F:04:B0:5B:15:25:B5:C0:E3
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/iU86GfoIgufmv5yfBLBbFSW1wOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.169.0/24
168.199.234.0/24
168.199.245.0/24
185.101.255.0/24
185.226.207.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c1:45:58:c7:c4:bc:52:0c:ad:1e:05:84:73:86:eb:f3:44:
ef:44:31:bc:cd:7e:74:a1:42:25:58:cc:1a:88:4f:c7:04:98:
64:5a:6f:a6:ae:4d:fd:6f:63:50:11:25:36:38:6c:c0:d7:d7:
2c:00:ec:a8:ab:7c:24:12:82:fd:02:34:03:18:99:29:c7:c6:
20:44:83:a6:b7:2a:59:8d:00:d2:89:2a:e5:b3:4a:73:d7:cd:
00:18:17:86:7c:da:99:19:88:8e:f3:7e:7b:18:e8:2b:4c:9d:
08:ac:0b:8d:e5:96:84:c9:26:58:90:2f:23:a1:3d:9d:df:d6:
1c:0b:4c:c2:0c:f6:e8:09:92:b0:3c:ae:ce:78:33:86:b3:49:
46:54:d2:fd:35:1f:4f:b4:ec:1c:68:d0:bc:dc:a8:4b:31:c3:
b6:40:5c:44:ba:59:ce:71:8b:f6:ab:3a:16:40:83:5e:5a:73:
6a:ee:9a:6f:59:1e:c2:2b:9b:56:72:2e:2d:a4:18:a9:e7:8d:
77:ee:7b:0a:5a:77:bf:18:b1:9d:66:1b:1a:66:e9:36:fa:ac:
26:f5:8e:71:6a:58:e7:e6:ff:b0:51:b6:47:f2:55:17:9d:7f:
3b:0b:d5:c4:71:8a:8e:84:f2:c0:ca:e9:96:d7:2d:07:ec:70:
5a:cf:bd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:19:33 2025 by rpki-client