Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/v67Ld94xkCAb9PY9IrvEy48_128.roa
File: v67Ld94xkCAb9PY9IrvEy48_128.roa (raw, json)
Hash identifier: Wa4QLdqdzWwh0uCC6CBtoFN2juJi/+tjeBxdduo0nzM=
Subject key identifier: BF:AE:CB:77:DE:31:90:20:1B:F4:F6:3D:22:BB:C4:CB:8F:3F:D7:6F
Certificate issuer: /CN=a8180bf1a7750b3d22f9358556e11f0ff766a619
Certificate serial: 018ED1E0FDD0BD9B8127C33B65B46BCF53B8
Authority key identifier: A8:18:0B:F1:A7:75:0B:3D:22:F9:35:85:56:E1:1F:0F:F7:66:A6:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/v67Ld94xkCAb9PY9IrvEy48_128.roa
Signing time: Fri 12 Apr 2024 10:36:06 +0000
ROA not before: Fri 12 Apr 2024 10:36:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216037
IP address blocks: 185.164.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:e0:fd:d0:bd:9b:81:27:c3:3b:65:b4:6b:cf:53:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8180bf1a7750b3d22f9358556e11f0ff766a619
Validity
Not Before: Apr 12 10:36:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfaecb77de3190201bf4f63d22bbc4cb8f3fd76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:ab:90:7d:48:4e:0c:20:8b:de:b2:52:32:
cc:f1:3e:ab:cf:65:0e:6d:60:9e:b9:ed:23:f3:64:
9d:a7:42:7b:a5:fd:b3:8f:42:78:18:4a:91:a3:ee:
6c:6a:d7:ad:a8:fb:c0:c8:7b:d5:39:1a:3d:8f:5e:
e0:e7:e5:92:02:6a:48:37:95:dd:de:85:bc:23:94:
1d:69:8b:75:51:d1:19:9c:a6:e3:7f:fd:fc:d8:6d:
45:b8:94:ae:ca:9c:ca:89:73:af:6b:00:61:c2:aa:
3f:0c:1a:30:bb:45:77:11:4b:27:6a:d9:10:e2:ef:
72:ee:59:df:c9:3c:a9:cd:80:c9:31:f0:ac:0e:16:
d4:e9:73:21:48:52:5a:c8:83:50:e4:bd:e2:29:e3:
6f:54:9c:08:82:b1:94:dc:c6:e1:1a:7f:8a:8e:81:
09:55:5f:87:5e:85:82:7a:08:05:e8:1b:ba:6c:f1:
a1:f5:ca:c9:36:62:f5:c6:83:e6:ee:5f:57:0c:3f:
95:e1:ff:f1:58:18:a5:b8:63:d8:d5:e6:e3:c0:15:
d8:de:81:2a:fe:15:2b:d4:d8:5f:0e:98:49:65:03:
e6:a6:b5:a5:7e:ef:56:26:49:25:b4:0b:1d:46:22:
42:8d:de:35:0e:15:d6:f2:d6:33:70:a9:a6:0b:09:
3e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AE:CB:77:DE:31:90:20:1B:F4:F6:3D:22:BB:C4:CB:8F:3F:D7:6F
X509v3 Authority Key Identifier:
keyid:A8:18:0B:F1:A7:75:0B:3D:22:F9:35:85:56:E1:1F:0F:F7:66:A6:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/v67Ld94xkCAb9PY9IrvEy48_128.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.204.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:bc:d8:72:cb:17:f0:36:38:00:75:9c:70:7f:6b:1a:16:82:
49:a1:84:f2:eb:c5:04:3a:ee:8e:5a:7f:41:96:d2:47:15:22:
40:12:55:7c:4f:a6:74:fd:a7:67:22:7d:32:01:f5:20:91:15:
12:c2:58:48:c4:37:2e:1c:3d:dc:b8:82:44:27:9a:1d:2a:0f:
3c:c2:19:91:d2:11:7e:b7:05:9e:54:6d:16:f5:db:c6:e9:d4:
64:81:8f:d2:82:25:99:ba:23:0b:eb:b9:d0:9c:7b:2f:57:c4:
38:74:8b:5f:1f:48:66:db:ad:c2:47:fc:46:66:57:91:70:88:
62:6f:1d:07:34:53:08:96:f7:68:21:8a:a7:b5:cf:bb:28:6e:
6d:eb:4b:4b:ed:66:d0:d7:f5:2b:8d:f6:8d:eb:00:3d:d5:a8:
94:05:8c:e5:4c:17:67:ee:b0:32:5c:7d:ef:1e:f4:d3:03:07:
b0:60:dc:f2:f9:89:8b:a8:99:1f:ed:81:b5:96:c2:e3:d4:1b:
97:c8:c6:e4:58:4a:a3:02:da:82:10:8f:c5:62:12:95:49:26:
f9:ad:eb:44:90:26:f3:36:24:38:94:84:24:35:9e:91:b3:2f:
13:88:a8:80:b1:22:6a:44:81:12:0e:c5:87:1d:d1:66:f2:5e:
38:53:d6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:47 2025 by rpki-client