Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/A1WMVa82mA1_i4SQRir574RnBKU.roa
File: A1WMVa82mA1_i4SQRir574RnBKU.roa (raw, json)
Hash identifier: ZH2cq6Cjv6AB0VXB4gW3LoXAckWsFeU8A3rqxeMHOqE=
Subject key identifier: 03:55:8C:55:AF:36:98:0D:7F:8B:84:90:46:2A:F9:EF:84:67:04:A5
Certificate issuer: /CN=90b3a3a0d662d14da8404bd21dc489e63945624e
Certificate serial: 01942067D40E3D109DF764670A91AE30FEC1
Authority key identifier: 90:B3:A3:A0:D6:62:D1:4D:A8:40:4B:D2:1D:C4:89:E6:39:45:62:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/A1WMVa82mA1_i4SQRir574RnBKU.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205704
IP address blocks: 185.200.148.0/23 maxlen: 23
185.200.148.0/24 maxlen: 24
185.200.149.0/24 maxlen: 24
185.200.150.0/23 maxlen: 23
185.200.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 09:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d4:0e:3d:10:9d:f7:64:67:0a:91:ae:30:fe:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b3a3a0d662d14da8404bd21dc489e63945624e
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03558c55af36980d7f8b8490462af9ef846704a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cc:02:5f:f6:5a:69:31:03:99:d8:a4:6b:18:
1a:fa:db:6b:fc:c3:e1:3b:ae:1e:f8:9a:57:99:73:
6e:44:de:5a:b0:18:16:df:14:1e:69:75:51:e7:9c:
87:dc:12:e7:29:d5:20:9b:85:e1:bc:ed:6d:9c:69:
46:4f:63:eb:57:24:34:1e:a0:84:a2:86:78:13:87:
50:e1:78:6a:b7:7a:9f:7b:4e:d3:eb:94:c6:85:bb:
2a:5e:76:68:5c:20:61:87:5c:a1:1a:fc:67:ea:e7:
f4:73:10:da:f0:e5:e4:de:89:11:8b:35:60:fb:ad:
cc:70:53:28:26:78:24:04:38:88:a7:9a:11:cf:d4:
03:a2:db:d3:97:ae:ef:ea:ab:9f:39:94:db:cf:40:
01:fa:34:1a:62:20:45:69:38:e1:36:85:1c:6e:94:
2e:35:33:d8:93:32:71:d7:d1:ea:51:64:d4:3c:02:
8c:b6:8d:3e:62:56:a9:4d:32:c5:b4:83:09:98:ea:
7d:c2:21:66:82:cb:69:6e:6c:35:ea:51:02:8a:89:
a8:03:a8:aa:4b:d6:10:04:35:0d:45:f2:b0:64:dd:
b2:91:48:10:fe:bd:8c:48:b2:a7:28:63:d3:df:ca:
68:27:32:e9:b8:17:49:db:8b:3d:68:27:31:5b:11:
f9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:55:8C:55:AF:36:98:0D:7F:8B:84:90:46:2A:F9:EF:84:67:04:A5
X509v3 Authority Key Identifier:
keyid:90:B3:A3:A0:D6:62:D1:4D:A8:40:4B:D2:1D:C4:89:E6:39:45:62:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/A1WMVa82mA1_i4SQRir574RnBKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.148.0/22
Signature Algorithm: sha256WithRSAEncryption
56:1c:07:95:20:2b:06:5b:e0:fb:ab:23:ce:64:b7:b6:1b:98:
d6:15:e9:87:6e:10:75:8c:d9:91:2b:8b:7f:df:66:c8:ee:2f:
63:c6:f9:9b:d4:f9:46:95:c0:b2:6d:77:81:a4:c5:97:b0:c5:
ce:f2:0c:26:67:ae:90:e6:77:11:56:c1:f1:3d:40:55:30:2c:
b6:ac:c6:77:03:e0:da:4c:80:8c:ce:6d:62:c8:eb:bc:c2:48:
6d:0e:bc:02:78:29:3d:e1:9e:21:8e:bf:05:77:01:0e:b0:f8:
94:86:f6:59:51:e3:63:ed:91:70:92:7d:fa:9f:35:11:e0:29:
f7:2f:e3:90:9c:f7:3d:a9:26:c6:93:bf:b0:c1:5c:81:56:04:
9b:1d:24:8e:49:1f:a6:52:02:d4:bd:6c:d1:5e:7d:bc:49:3b:
97:43:7d:ac:fd:97:0f:d3:b8:39:6e:aa:ed:4b:e4:4f:79:73:
1e:6a:13:28:b7:f3:0b:49:cf:11:86:12:d2:49:e3:bf:af:56:
d4:ee:f9:9e:48:41:28:3c:c5:13:bc:ff:b5:01:af:e9:4d:94:
42:7f:51:ad:e0:c0:dd:33:60:17:50:5c:7e:c5:ff:5b:82:31:
cc:e3:7a:68:c0:51:8b:2b:d3:6c:ef:24:5f:47:9d:3a:1d:91:
43:e1:7a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:49:44 2025 by rpki-client