Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/IxaR3wnnSdMRPGzdMdQoiGON4RY.roa
File: IxaR3wnnSdMRPGzdMdQoiGON4RY.roa (raw, json)
Hash identifier: FuoVNn2ZlNB30ISqy7VMWR13dGmP3YSONM/etCPrnHE=
Subject key identifier: 23:16:91:DF:09:E7:49:D3:11:3C:6C:DD:31:D4:28:88:63:8D:E1:16
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 018CC8DEED0561D971452864C2C7475E0EAC
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/IxaR3wnnSdMRPGzdMdQoiGON4RY.roa
Signing time: Tue 02 Jan 2024 06:31:42 +0000
ROA not before: Tue 02 Jan 2024 06:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205957
IP address blocks: 185.190.148.0/23 maxlen: 23
194.28.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:ed:05:61:d9:71:45:28:64:c2:c7:47:5e:0e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 2 06:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=231691df09e749d3113c6cdd31d42888638de116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:16:29:03:3d:77:2b:74:98:94:44:d4:f0:fa:
df:4d:d0:fe:85:bf:46:10:e2:c0:6c:ac:9c:d6:57:
7a:53:f0:c1:c5:9c:41:11:40:ac:a7:b0:73:6c:ba:
df:07:c7:26:3f:ff:47:9a:a5:e3:be:7f:f2:b5:ff:
cc:08:5c:37:c4:b2:30:d1:d2:cd:8a:1f:a8:fc:bd:
6a:a6:75:41:39:36:b9:07:00:3c:e9:b1:53:1f:3e:
3d:a0:af:9c:56:f1:86:18:04:87:5e:e8:ad:d3:97:
20:33:8b:c6:e6:f0:c8:2d:c8:01:8a:8e:9d:15:90:
1f:b9:d4:69:30:b0:d0:c7:f8:47:2a:06:67:0b:75:
b0:a4:12:41:97:8f:87:5e:9e:d2:88:f7:73:bc:6c:
a7:6b:45:8a:56:d1:a2:02:b4:06:e9:99:82:63:79:
c4:98:ba:3e:15:f5:30:0a:d5:17:2c:4b:e5:66:ad:
53:d4:8e:39:b5:0a:77:f7:e3:3c:26:af:f6:50:b3:
65:05:02:82:14:4a:e0:35:6f:bb:00:dd:63:ab:70:
4e:f3:78:04:eb:0d:57:53:e6:27:8c:73:91:12:36:
68:1c:97:88:ce:03:90:d8:06:c3:fd:60:24:07:26:
37:53:fa:3c:5d:c0:82:19:25:2c:1d:1a:16:37:55:
72:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:16:91:DF:09:E7:49:D3:11:3C:6C:DD:31:D4:28:88:63:8D:E1:16
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/IxaR3wnnSdMRPGzdMdQoiGON4RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.148.0/23
194.28.102.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ef:43:f2:b2:b8:c9:68:2f:c1:b7:26:34:42:3e:e7:ce:1b:
0d:3f:fd:d8:34:19:9c:d0:9f:47:39:99:31:3d:ac:30:bf:b7:
c0:88:f2:9b:76:68:7f:0e:62:df:10:8f:b8:5c:8c:c8:22:80:
3d:2c:9a:82:fe:14:06:41:46:d2:69:01:8c:90:e9:ef:58:5b:
7e:3e:a9:5a:2a:9e:15:43:35:3b:42:c2:7f:dd:15:db:5e:f0:
c2:90:2b:68:9b:e1:b6:70:1b:93:07:2e:7c:e0:d7:0c:08:10:
1d:9e:84:24:bc:22:74:d6:07:69:ff:38:1e:2a:2f:e1:11:26:
a1:b1:02:30:c4:01:b6:12:91:d0:b9:27:09:e2:f3:74:04:c5:
fb:e3:bf:87:fe:dd:ed:9a:b4:69:83:52:3d:65:8f:95:e9:3f:
88:59:eb:f4:f7:e7:95:c4:da:9a:7e:c4:60:74:7f:29:6b:e2:
bc:17:3e:f5:7a:b3:ef:19:15:a3:f7:f6:7e:ba:da:a3:e1:f9:
f7:07:35:6c:35:c7:63:11:e0:1e:ab:dd:fa:f2:94:8b:6e:2f:
48:1c:9b:0c:f9:54:e2:bc:70:ef:2b:11:6e:4d:04:3c:53:15:
cb:52:29:10:c5:97:ba:46:06:44:84:58:61:23:6d:4f:7e:94:
fb:3e:06:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:24:45 2025 by rpki-client