Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/hX59_ynHOXFGVAj80lFXs_KvioQ.roa
File: hX59_ynHOXFGVAj80lFXs_KvioQ.roa (raw, json)
Hash identifier: MO05Ez/e1tLP0rIJZ9WbjZDoXcPdg1+CUAy/YDviIbw=
Subject key identifier: 85:7E:7D:FF:29:C7:39:71:46:54:08:FC:D2:51:57:B3:F2:AF:8A:84
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 018D6BE4DA3C38FBF9D6CD80479C30AEAEB9
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/hX59_ynHOXFGVAj80lFXs_KvioQ.roa
Signing time: Fri 02 Feb 2024 22:16:16 +0000
ROA not before: Fri 02 Feb 2024 22:16:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211195
IP address blocks: 185.65.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6b:e4:da:3c:38:fb:f9:d6:cd:80:47:9c:30:ae:ae:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Feb 2 22:16:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=857e7dff29c73971465408fcd25157b3f2af8a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b5:16:d5:15:43:82:eb:f2:39:52:d8:e1:a1:
b8:04:20:e1:53:a5:fe:be:30:6b:1a:2e:3e:a7:e2:
18:7a:e1:ad:20:ad:31:c1:cc:9e:e3:fe:17:01:4c:
b9:6a:23:ce:73:1f:23:30:84:e8:b0:fb:38:9e:34:
af:f5:8b:a3:31:30:d2:de:ad:80:c0:ad:99:f9:fa:
8a:2c:a2:32:5c:d8:ed:35:f9:03:d2:f3:c8:ee:ee:
b4:59:f3:c7:dc:8f:82:f4:5f:dc:d0:18:e0:7c:9d:
be:0b:de:68:97:40:c2:09:5d:c6:a7:b4:06:a8:5b:
63:ab:0e:d2:e3:bb:07:de:66:7d:ff:7e:26:4c:36:
b9:be:38:e7:06:2a:28:8d:d4:11:ea:3d:53:e8:dd:
c9:bb:e2:34:91:a3:71:80:eb:71:7d:10:08:1f:1a:
71:93:f5:1a:ca:de:77:8a:08:62:c1:56:a9:26:ae:
7a:a1:0e:a5:ff:18:8e:a8:fc:68:0e:cf:35:74:45:
e2:30:d9:11:58:74:01:f9:c4:58:74:67:a3:0d:17:
93:5f:52:67:03:5a:06:20:30:88:88:a2:f3:95:b4:
b8:02:55:3f:2b:ca:5b:d4:24:16:2b:36:dd:56:0b:
28:f6:f9:fd:0a:74:b7:71:56:67:7d:e1:5c:ea:2a:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7E:7D:FF:29:C7:39:71:46:54:08:FC:D2:51:57:B3:F2:AF:8A:84
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/hX59_ynHOXFGVAj80lFXs_KvioQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.71.0/24
Signature Algorithm: sha256WithRSAEncryption
37:d3:ae:11:9a:dd:d4:59:94:f6:f5:a7:15:81:2e:48:7e:ec:
8a:48:71:75:87:ec:b1:80:d5:df:ca:c0:9a:e9:c8:1b:19:8e:
50:a8:2c:9d:8e:95:a1:92:62:b0:5c:dc:3f:98:0b:b1:07:2a:
46:7b:5a:8c:b9:d8:45:37:9b:ba:6a:28:4e:a5:4c:6b:6b:21:
da:ef:68:28:f6:1c:fd:87:fd:58:bc:0f:86:f5:86:aa:ff:f3:
a6:8f:1e:0d:50:04:00:18:76:b4:c6:62:a9:72:b5:d0:c1:5b:
0d:c6:e5:12:e9:59:16:de:b2:22:27:8d:47:f6:0e:7f:1d:96:
d7:ad:27:65:ac:b7:da:d3:62:a0:0a:fb:10:a2:0b:5b:9a:a8:
b0:c5:3f:5c:dc:f6:e7:b2:c6:b2:eb:ac:19:35:80:dd:d3:43:
d5:c0:33:8a:25:bb:6c:4a:67:74:9c:c1:8e:7b:64:18:39:94:
4e:71:49:35:55:f5:ed:6b:82:28:b8:e5:7e:eb:6e:53:96:d8:
b5:c9:6c:5f:23:43:9d:9b:d7:0f:e5:80:cf:a6:ab:47:a4:53:
cb:c3:68:7c:7e:ad:5d:19:75:bd:c3:31:fd:6a:70:af:e2:74:
b3:ce:0a:ed:4e:fd:81:0a:28:fa:62:52:23:05:5d:4c:d4:91:
48:b4:fd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:32:05 2025 by rpki-client