Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/eT2dkT46FAQRUzoD-jRH7HUDmOg.roa
File: eT2dkT46FAQRUzoD-jRH7HUDmOg.roa (raw, json)
Hash identifier: kbJKb5T6mad55lxQS3mXagHyDhJ9IMPaoeWaZUwCokc=
Subject key identifier: 79:3D:9D:91:3E:3A:14:04:11:53:3A:03:FA:34:47:EC:75:03:98:E8
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 018CCA2A0EF02E391EB7C17B459A89E58060
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/eT2dkT46FAQRUzoD-jRH7HUDmOg.roa
Signing time: Tue 02 Jan 2024 12:33:22 +0000
ROA not before: Tue 02 Jan 2024 12:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203797
IP address blocks: 185.123.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:0e:f0:2e:39:1e:b7:c1:7b:45:9a:89:e5:80:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: Jan 2 12:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=793d9d913e3a140411533a03fa3447ec750398e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c7:14:fb:02:81:1d:50:a5:24:62:5b:b5:91:
13:08:3b:a4:d9:ca:8e:d6:70:5e:42:1e:0a:c6:63:
89:54:73:2a:25:f3:40:6d:8d:ef:19:c2:37:95:18:
a5:c8:f5:e2:49:cd:84:e3:26:25:84:ff:59:c4:f3:
c5:74:2e:d5:4f:41:dc:5c:74:3d:3a:0c:3f:0b:5f:
b1:eb:73:fe:75:41:7e:1d:15:e5:83:cb:7f:17:b1:
ac:63:e0:9b:92:dc:2e:57:88:2a:b1:46:40:fa:b9:
ce:53:54:46:6c:11:74:8f:31:42:9a:b0:87:23:dc:
01:4c:c1:54:0e:17:35:5c:ce:b6:7f:99:1e:7e:a4:
10:93:34:b6:27:c4:8d:2d:a0:59:ae:0e:c4:cb:ec:
ee:83:f1:d0:d1:9d:0c:2b:cf:43:f8:c6:74:1a:d7:
3f:67:3c:99:bd:c3:40:95:2d:4d:45:4b:ba:d2:02:
ee:0f:59:06:26:2c:6d:81:3e:2e:07:60:4e:a3:5f:
39:d3:5a:b8:11:a4:f3:a8:ad:29:45:db:87:22:3d:
16:20:db:a1:c1:a3:71:8c:bc:f2:8c:d0:72:28:76:
23:db:63:1d:e3:c7:c8:34:32:26:42:25:fa:67:b7:
4f:ec:ff:b5:45:6e:9c:ba:88:13:7e:15:8d:6c:6a:
b0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3D:9D:91:3E:3A:14:04:11:53:3A:03:FA:34:47:EC:75:03:98:E8
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/eT2dkT46FAQRUzoD-jRH7HUDmOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.72.0/22
Signature Algorithm: sha256WithRSAEncryption
42:f4:59:f1:8c:0a:0c:b3:19:74:01:aa:c3:c3:b4:81:cf:8a:
a2:74:1c:0c:2b:10:31:00:7c:10:fd:df:9f:a9:9e:98:98:12:
94:8a:f3:b1:48:1c:72:df:0b:02:1e:c0:fd:44:b2:ff:d7:ab:
0e:fb:9b:c7:da:7c:0b:f0:fb:2d:70:54:27:ec:81:78:92:8a:
33:c6:72:2e:b4:64:9d:f9:11:06:87:ed:24:8e:3a:a4:54:bf:
ed:99:47:90:8c:c2:18:8c:5e:80:b7:c8:87:7e:1b:f2:24:30:
06:7d:2e:8d:b0:41:57:90:77:00:d0:29:e9:42:1d:57:17:1f:
a7:55:a0:a2:d1:1c:49:f2:d0:e5:f2:c2:8d:98:aa:f3:c6:63:
33:2b:93:9d:2e:f2:c9:b5:02:f2:36:c7:4d:af:8d:07:29:7d:
19:3c:35:01:de:f6:b2:e7:e0:52:17:f0:04:32:21:34:4b:a4:
40:78:02:66:9a:1a:92:6b:f9:85:ca:ad:c3:40:f2:ea:18:81:
ed:62:bf:42:75:b8:6c:a1:9f:b6:ec:9a:01:c9:c4:94:a8:6c:
dc:c8:35:ca:87:8b:a3:23:9d:54:9d:7b:88:57:17:79:d8:08:
f1:3d:f0:47:21:57:b0:53:7f:23:a8:60:d5:a4:2c:ad:aa:55:
c7:22:50:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:55:26 2025 by rpki-client