Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/e_7eV7pQ2yK6fXbqYT832n4le2Q.roa
File: e_7eV7pQ2yK6fXbqYT832n4le2Q.roa (raw, json)
Hash identifier: hL2rYJwqR/AF3QvzSH73L5kX/HBE9WJQ8+Wc/tKsgPo=
Subject key identifier: 7B:FE:DE:57:BA:50:DB:22:BA:7D:76:EA:61:3F:37:DA:7E:25:7B:64
Certificate issuer: /CN=7117386973fbf88a867c82a8867b050fca60b011
Certificate serial: 018CC5DC5844444EACC094A51BF6444B11D0
Authority key identifier: 71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/e_7eV7pQ2yK6fXbqYT832n4le2Q.roa
Signing time: Mon 01 Jan 2024 16:30:01 +0000
ROA not before: Mon 01 Jan 2024 16:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64478
IP address blocks: 185.162.246.0/24 maxlen: 24
185.162.245.0/24 maxlen: 24
185.162.244.0/24 maxlen: 24
185.162.247.0/24 maxlen: 24
2a0a:800::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:58:44:44:4e:ac:c0:94:a5:1b:f6:44:4b:11:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7117386973fbf88a867c82a8867b050fca60b011
Validity
Not Before: Jan 1 16:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bfede57ba50db22ba7d76ea613f37da7e257b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:3f:bb:c6:7f:ba:47:46:f7:35:8d:f8:4c:
24:5c:c7:76:b5:b6:29:b1:b9:b8:f0:39:9f:ee:5d:
5a:fa:6b:79:a2:c5:12:79:2b:0b:49:e6:ae:d0:61:
65:f8:9f:68:11:c9:fa:a5:cc:07:07:80:98:4b:f5:
4c:ae:4b:15:35:cf:b5:90:e7:0b:4c:2e:e0:13:a8:
bd:5c:da:23:e2:05:a2:19:2f:c0:3d:aa:37:8c:3a:
84:02:2a:7f:23:ea:e0:b4:6a:b3:3d:25:08:8b:3b:
c3:6f:ac:80:f0:da:93:94:ba:7f:0b:17:50:6e:dd:
6c:45:59:3d:0a:76:3e:83:25:88:54:ba:13:25:be:
54:77:53:c0:72:06:3f:a4:ba:94:a0:23:e9:d6:e3:
dd:8c:c7:dc:af:86:1a:7e:9a:e9:c6:7b:f4:3a:9d:
59:0f:6d:0b:3f:79:bc:79:3f:50:01:47:d5:6f:9e:
91:d9:a5:ef:d5:7e:7a:1a:ef:8b:92:cb:c1:76:6a:
98:6e:df:33:d0:83:57:bf:9a:4b:cd:2c:92:09:99:
aa:21:07:5c:b6:66:5e:bf:92:af:59:af:a1:64:87:
ff:93:ad:47:f8:d2:7a:92:0b:ce:46:a2:a6:c7:46:
6b:6e:ec:44:d3:f8:38:6c:7a:a6:4f:e0:bd:85:80:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FE:DE:57:BA:50:DB:22:BA:7D:76:EA:61:3F:37:DA:7E:25:7B:64
X509v3 Authority Key Identifier:
keyid:71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/e_7eV7pQ2yK6fXbqYT832n4le2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.244.0/22
IPv6:
2a0a:800::/29
Signature Algorithm: sha256WithRSAEncryption
3c:54:f7:16:76:a3:2c:40:69:ed:85:cc:ae:60:cc:4e:c6:ab:
27:0f:66:38:70:2c:61:92:19:2b:cc:c1:e3:3e:30:3b:ca:55:
84:c7:cb:86:5d:db:5e:85:0a:6f:b7:27:01:5d:e8:e7:b4:26:
aa:23:30:b9:14:84:f2:4e:4d:6f:86:24:01:fa:91:c2:50:35:
fe:20:f8:4d:72:d3:01:26:45:45:63:29:ec:d0:15:22:16:c9:
b2:c9:6a:b6:d5:da:2d:7f:ef:cf:b1:9a:f0:da:34:36:63:47:
16:c9:41:2a:29:be:08:f4:63:a4:4b:d7:cb:8b:17:4b:d8:95:
8e:7e:8d:fc:29:fa:30:e9:9f:07:0e:c1:fe:2f:b5:91:c5:26:
3e:8e:fe:d7:0f:0f:93:88:68:93:52:65:71:b6:7a:38:49:08:
0c:47:69:3e:95:9a:a5:07:96:d8:33:47:4f:50:df:b0:cc:f9:
49:4d:18:e3:b2:43:26:0a:57:19:1a:52:c8:0b:fd:54:88:28:
86:84:ec:a7:ac:ae:ec:32:57:e1:c4:5e:c8:3a:11:9c:6c:fc:
06:5c:5a:6a:04:d5:fb:36:37:7b:90:fb:24:ce:8f:a4:6e:5c:
e5:9f:4c:55:99:cc:3a:8e:a0:21:41:cf:d3:e4:9c:1b:30:c0:
41:7d:c5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:36 2025 by rpki-client