Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/fGvIhaEXV8DSH8FuD8UU3YncASI.roa
File: fGvIhaEXV8DSH8FuD8UU3YncASI.roa (raw, json)
Hash identifier: fS/Mn06Coq4z+XV9Enq9uobRXHPfFYJyqu+8CmDdPSI=
Subject key identifier: 7C:6B:C8:85:A1:17:57:C0:D2:1F:C1:6E:0F:C5:14:DD:89:DC:01:22
Certificate issuer: /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial: 018CC86F64EC115CD059BED8CB5F1C890E43
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/fGvIhaEXV8DSH8FuD8UU3YncASI.roa
Signing time: Tue 02 Jan 2024 04:29:52 +0000
ROA not before: Tue 02 Jan 2024 04:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35132
IP address blocks: 185.165.196.0/22 maxlen: 22
2a0a:2200::/29 maxlen: 29
2a0a:2200::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:64:ec:11:5c:d0:59:be:d8:cb:5f:1c:89:0e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
Validity
Not Before: Jan 2 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c6bc885a11757c0d21fc16e0fc514dd89dc0122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:99:6b:71:85:88:c8:fd:57:b1:6c:8d:7e:6d:
d8:f5:8a:a8:ec:21:84:06:13:0d:20:e7:0d:fd:54:
d7:b0:ee:c8:79:70:91:88:68:cb:60:69:d3:26:95:
33:fa:36:51:78:93:f7:0e:f8:84:28:c2:38:b8:8d:
f8:55:63:5d:80:52:e6:b0:fd:b7:a6:35:c9:0e:ec:
f0:69:e1:bc:68:99:8f:50:6c:63:45:ae:16:86:0f:
30:a7:38:96:79:2a:6a:bd:0d:50:8f:0d:01:f5:47:
f3:08:1a:4c:60:6f:90:4f:7d:af:97:55:3e:86:e5:
5a:8c:ce:46:26:0c:b0:1f:88:13:64:b6:22:ab:b5:
cc:af:c9:2c:95:4b:70:f2:a6:d8:d7:40:99:05:6a:
5e:eb:45:ab:9a:a4:cf:d1:3e:98:8c:79:c3:f6:08:
be:94:df:c4:74:c0:bb:c4:c2:1c:58:ca:d2:60:17:
87:66:f1:ee:0a:4c:a9:6a:57:21:e0:03:2c:38:51:
88:13:15:91:6a:fe:54:03:3e:dd:a2:61:14:6f:49:
00:85:b5:53:b9:5d:9b:58:14:86:98:e2:ec:5b:fc:
82:af:c2:93:f8:45:14:d3:13:13:a5:f2:8e:81:fb:
8e:7e:2d:99:ba:78:a9:c1:e9:99:01:bf:1b:97:fd:
bf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6B:C8:85:A1:17:57:C0:D2:1F:C1:6E:0F:C5:14:DD:89:DC:01:22
X509v3 Authority Key Identifier:
keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/fGvIhaEXV8DSH8FuD8UU3YncASI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.196.0/22
IPv6:
2a0a:2200::/29
Signature Algorithm: sha256WithRSAEncryption
76:5b:6a:99:87:d4:7b:dc:10:fe:71:b8:9b:7c:dc:29:03:cd:
85:4d:c9:5d:98:5f:11:61:ae:41:3a:8f:22:56:81:8a:ef:fe:
61:c7:48:ee:93:0a:b8:2a:c6:36:a7:b0:85:02:08:f3:e4:28:
37:bb:3a:7b:73:2f:47:64:4d:08:a3:b7:9d:07:0f:c2:26:3b:
a0:12:27:a8:b9:13:84:29:a4:14:f7:ce:fa:ca:97:09:91:e9:
9c:7f:63:9c:fd:f8:29:9e:8d:3f:18:4e:c1:e3:84:f3:96:c2:
78:e6:b6:32:c1:72:64:cc:ab:d3:76:3e:c2:ec:03:9c:3f:61:
5e:2d:92:a4:5e:6f:d0:c8:e5:9c:19:22:57:a2:ea:d3:4a:f4:
43:10:a6:2e:10:71:ec:3b:d2:e8:80:96:90:ff:74:25:c8:81:
de:c9:db:06:56:f5:7e:64:74:2e:b9:05:8b:fa:dd:fc:9d:5b:
a8:04:4f:3f:e6:bf:e0:f0:f0:15:fe:c2:76:b4:25:ec:9b:28:
6c:b5:80:ca:73:11:44:b4:84:53:e8:dd:73:fa:62:60:fd:11:
d3:64:61:4d:5d:fd:74:c0:76:47:3a:d8:e8:be:bf:6a:58:6b:
ec:84:ea:39:b8:67:1b:bb:3a:ba:4d:3d:7c:89:34:fd:b6:3c:
7c:98:34:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:54:37 2025 by rpki-client