Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/cFKtRKptBSwlDiA1aXIys-SnYGo.roa
File: cFKtRKptBSwlDiA1aXIys-SnYGo.roa (raw, json)
Hash identifier: 71q0GlNFa+xAWDGbNJze0KxBhmdNFyHJgxxyYvJlRUE=
Subject key identifier: 70:52:AD:44:AA:6D:05:2C:25:0E:20:35:69:72:32:B3:E4:A7:60:6A
Certificate issuer: /CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Certificate serial: 018CC79331D4D19B0BD39423F11AA1AACA28
Authority key identifier: 2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/cFKtRKptBSwlDiA1aXIys-SnYGo.roa
Signing time: Tue 02 Jan 2024 00:29:21 +0000
ROA not before: Tue 02 Jan 2024 00:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205055
IP address blocks: 185.231.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:31:d4:d1:9b:0b:d3:94:23:f1:1a:a1:aa:ca:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Validity
Not Before: Jan 2 00:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7052ad44aa6d052c250e2035697232b3e4a7606a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0f:bb:ea:5c:fa:55:e6:1f:51:bc:f4:6b:11:
1b:6e:b6:88:a4:73:44:9a:a8:1c:32:62:17:26:c4:
06:28:5b:d3:37:e4:74:29:3c:5a:b3:e4:17:63:42:
4a:8d:5b:6d:72:cb:a3:b8:c2:26:5c:10:03:05:6e:
1e:58:6e:ab:c3:9d:48:8d:3b:e8:48:49:8e:0b:b1:
5e:fa:b7:5c:13:5e:39:70:b6:cb:d6:8f:d4:ab:69:
4f:04:fe:88:fb:f4:a1:9f:95:4d:4f:4a:6a:e1:83:
f2:6c:47:8e:f0:4d:54:8e:64:cb:18:3a:88:89:c5:
c3:23:49:1d:8e:af:4a:de:a3:32:98:40:37:23:c0:
14:ae:b4:e1:8f:dd:5d:1a:1c:90:ae:b6:ab:a7:6b:
d9:9b:f1:14:00:18:51:94:df:ea:f6:cc:b1:ec:59:
9d:2a:c1:4c:76:1a:b5:0e:a0:69:a6:18:9c:a1:e1:
cb:cd:a7:5d:90:8a:9c:00:2d:7f:d7:63:eb:4a:6a:
66:e9:cb:eb:f4:4e:b6:dc:de:f2:3d:25:0f:6b:4f:
38:6c:2c:57:bb:19:78:d9:d2:79:2f:86:d5:b1:6d:
5b:ae:c0:4f:38:63:ff:cd:0a:15:77:af:e7:2a:3d:
05:9c:f5:47:0e:52:5e:35:65:df:93:db:17:61:9d:
09:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:52:AD:44:AA:6D:05:2C:25:0E:20:35:69:72:32:B3:E4:A7:60:6A
X509v3 Authority Key Identifier:
keyid:2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/cFKtRKptBSwlDiA1aXIys-SnYGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.176.0/22
Signature Algorithm: sha256WithRSAEncryption
34:61:ef:72:71:4a:ec:76:0a:f5:c3:64:9d:95:92:25:40:c1:
e4:a5:4d:16:24:c6:7d:67:38:d0:67:73:2a:61:b3:a6:23:36:
a4:6c:83:1c:42:4d:96:33:4d:a5:89:5d:4c:8c:46:92:17:cf:
08:41:6f:0f:7c:31:d0:bb:7a:7f:66:e3:f4:73:e1:3e:2b:aa:
e4:2a:32:27:7e:1f:7f:43:59:b8:b9:18:f8:29:e3:a6:37:a5:
13:56:69:8c:d2:4a:d4:ae:2b:40:da:aa:2a:11:5f:e6:0e:e7:
12:f8:1d:6d:3b:b8:36:ff:10:3e:19:64:8d:6d:34:dc:38:5e:
36:84:3e:a9:27:03:e2:82:e5:6f:ad:58:b5:f3:2e:bc:c0:4b:
4c:22:dc:69:6f:f5:02:bb:5a:b7:43:10:6c:09:77:53:b7:31:
b8:b5:54:25:63:9f:6e:c2:4c:20:1e:57:52:af:e0:39:2c:bb:
c8:69:88:65:df:51:af:33:c9:74:b5:4c:c1:27:40:c7:c8:14:
32:6c:c0:b8:08:6e:45:a3:29:23:c9:84:66:1c:cc:d5:98:fe:
9e:78:ff:e3:7b:04:cd:10:a4:a9:97:da:5f:46:71:c2:4d:22:
bf:f2:f1:47:f9:02:16:3e:46:9e:43:0d:81:3c:4b:9c:67:03:
e0:55:88:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:31 2025 by rpki-client