Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/bO-3RQxgDhT1aJaHMKxC7ImoXBQ.roa
File: bO-3RQxgDhT1aJaHMKxC7ImoXBQ.roa (raw, json)
Hash identifier: LIAFXuw4JiVhFte6Q8Cu+0hOM1+P/QW7m2ZVxuflYRk=
Subject key identifier: 6C:EF:B7:45:0C:60:0E:14:F5:68:96:87:30:AC:42:EC:89:A8:5C:14
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 019391C9038CF4C63BE2AF88C132756577B7
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/bO-3RQxgDhT1aJaHMKxC7ImoXBQ.roa
Signing time: Wed 04 Dec 2024 13:08:09 +0000
ROA not before: Wed 04 Dec 2024 13:08:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61002
IP address blocks: 185.170.11.0/24 maxlen: 24
188.211.164.0/23 maxlen: 23
193.3.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:91:c9:03:8c:f4:c6:3b:e2:af:88:c1:32:75:65:77:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Dec 4 13:08:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cefb7450c600e14f568968730ac42ec89a85c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:eb:df:0b:b8:e8:52:ed:3f:8d:e6:cb:33:
db:9d:f3:46:a7:47:21:c0:f5:51:51:7f:78:cb:d9:
ff:93:4f:24:15:04:04:2b:6e:c5:95:b6:88:25:61:
ca:d1:d4:4f:7b:c6:9f:c4:82:c7:d9:79:32:11:7c:
a6:08:59:c5:3d:78:9a:1e:72:a8:32:81:83:07:b1:
47:95:6b:33:02:52:7c:1e:67:97:65:02:f2:8e:dd:
9a:9b:0b:0d:da:cb:93:cc:1e:c9:50:a4:47:fc:03:
c8:36:c8:94:e0:c6:84:76:6e:cb:94:8e:34:0f:6f:
8c:f4:0d:b0:fd:40:9a:1d:70:7e:52:be:eb:ea:54:
2f:da:d3:61:7d:77:96:e8:5e:af:c3:8e:49:b7:48:
0f:d0:78:98:9e:0a:60:99:ff:99:93:cb:c4:02:da:
59:57:f9:84:73:eb:f6:64:ab:cd:9e:64:0a:fd:e6:
0d:dd:8c:b1:dc:e4:c0:2a:6e:b5:9b:3a:3e:b7:15:
9b:8c:8e:ed:ea:c6:be:71:d0:8c:1d:dd:db:17:af:
72:a2:de:00:2a:61:1b:93:90:d6:4e:53:38:61:d2:
ac:79:8b:08:14:17:ad:7e:9c:5e:42:ec:d4:57:40:
ee:57:0f:7e:61:d3:76:f0:d7:48:5a:9e:30:7a:96:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EF:B7:45:0C:60:0E:14:F5:68:96:87:30:AC:42:EC:89:A8:5C:14
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/bO-3RQxgDhT1aJaHMKxC7ImoXBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.11.0/24
188.211.164.0/23
193.3.55.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:01:e5:19:45:ee:84:de:0d:d4:33:39:88:0a:9e:ad:7e:e7:
6e:72:66:77:3e:55:40:72:15:a6:5e:ee:c2:b9:d0:f4:02:61:
ae:76:a1:b8:70:f0:6d:9c:fe:b2:43:b9:a9:62:d3:f2:10:26:
30:aa:33:3d:a0:ea:cd:85:44:82:da:5c:42:fa:86:31:8c:8c:
46:f3:6c:e2:28:95:9c:e4:3d:8f:67:4e:a1:90:12:fa:05:2b:
b8:14:1d:0b:1c:89:bf:69:28:44:db:18:a8:ab:53:57:f9:bd:
fb:59:c0:5b:7d:35:bd:5b:c8:df:d1:40:38:a7:83:e1:d3:45:
ff:16:bc:61:32:39:94:65:3e:e7:35:08:3b:de:72:4a:a9:f8:
3a:39:73:63:90:20:30:1d:21:df:a9:13:0c:56:4e:7a:6a:f5:
0b:a3:7e:65:b4:ba:f9:a0:2d:52:5b:3b:a5:99:b7:1c:cd:00:
5d:64:53:5d:43:e4:b4:4d:bd:ed:80:f0:c8:52:a4:41:cd:04:
b7:b5:93:fb:e8:fe:76:ca:0b:96:5e:da:b5:43:aa:0f:77:30:
df:1d:8e:15:3b:51:e2:ee:6c:39:68:07:e4:b5:c5:89:b2:cd:
9e:58:46:93:bf:84:10:51:b0:7f:78:13:f0:88:d6:3a:75:cb:
01:de:29:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:07 2025 by rpki-client