Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/KalplzrHeuybfvc7Dssy8XZHe5s.roa
File: KalplzrHeuybfvc7Dssy8XZHe5s.roa (raw, json)
Hash identifier: auj/yy5ZFswUqVD1hBkqlzMfMirKJwSPzIeHKzmgAq0=
Subject key identifier: 29:A9:69:97:3A:C7:7A:EC:9B:7E:F7:3B:0E:CB:32:F1:76:47:7B:9B
Certificate issuer: /CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Certificate serial: 018CCA2B1F622BB4FA2BB9097D863EA361F0
Authority key identifier: CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/KalplzrHeuybfvc7Dssy8XZHe5s.roa
Signing time: Tue 02 Jan 2024 12:34:32 +0000
ROA not before: Tue 02 Jan 2024 12:34:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48544
IP address blocks: 185.86.200.0/23 maxlen: 24
185.86.203.0/24 maxlen: 24
185.86.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:1f:62:2b:b4:fa:2b:b9:09:7d:86:3e:a3:61:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Validity
Not Before: Jan 2 12:34:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29a969973ac77aec9b7ef73b0ecb32f176477b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:d8:72:e7:c3:4f:c9:c5:4b:06:b4:7a:07:
a6:a4:43:d6:39:b5:9a:ee:cb:c2:31:ca:e8:b3:c3:
e7:fc:68:3a:94:cf:e0:42:35:3a:db:93:25:3e:f0:
9e:13:f5:1f:44:92:52:dc:45:bf:2c:c0:a3:2a:c2:
4e:f0:6b:4e:aa:a5:38:70:3c:1e:ca:ff:57:cd:39:
73:40:d9:e4:c9:a3:83:3c:85:8a:9b:fb:85:b6:a4:
19:02:84:13:f6:cb:1a:cb:75:ac:55:33:d1:f9:0f:
ae:9f:2e:7c:ee:9c:87:ff:4c:c5:a8:46:dd:49:e5:
c3:7a:45:fd:27:e1:1b:d0:93:42:e1:e5:5e:75:76:
07:db:9f:8d:f8:52:76:43:9d:51:51:bb:49:f8:9c:
88:ff:be:ef:f2:4a:d8:2a:0d:4a:11:34:5e:03:81:
a5:c6:9d:e0:36:ca:3f:a1:f9:f9:4c:77:83:f1:32:
a4:7c:41:d8:d8:66:9e:ed:e1:a9:f1:48:09:8e:b3:
1a:3b:3e:57:94:19:5a:e0:30:04:45:6c:d4:30:fb:
11:69:3a:d2:48:ef:56:ce:13:70:83:85:5f:de:fa:
59:10:37:97:78:54:5a:e9:77:4a:0c:6f:59:c3:11:
a7:71:d7:8d:a4:02:8b:b8:60:86:55:a2:2a:4a:2f:
41:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A9:69:97:3A:C7:7A:EC:9B:7E:F7:3B:0E:CB:32:F1:76:47:7B:9B
X509v3 Authority Key Identifier:
keyid:CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/KalplzrHeuybfvc7Dssy8XZHe5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.200.0/22
Signature Algorithm: sha256WithRSAEncryption
17:0f:af:f4:5c:94:fe:c4:c1:61:84:1e:1e:2f:ba:2b:58:c5:
97:b6:e7:3e:44:b4:75:da:d0:c7:d8:7e:db:a5:b3:93:c3:cf:
71:9c:97:32:81:7f:88:24:c2:b1:63:7a:d8:27:aa:0f:c1:17:
ef:96:bd:f6:76:85:30:9b:4e:a4:62:68:8c:06:15:96:47:d6:
38:b1:d3:d6:ff:18:51:72:d6:47:c3:d6:af:dc:e6:ed:fa:56:
7c:f8:21:12:bc:ff:97:e5:9f:8a:ee:4f:49:c5:2b:34:14:54:
54:47:b4:0f:7d:b5:bf:59:c9:fd:90:32:ae:76:1a:f5:12:84:
f5:9f:40:07:cf:ac:b7:c8:3b:71:f6:d7:0e:21:68:32:19:71:
d7:32:14:d9:4e:d2:81:0c:09:06:05:28:d9:aa:e1:f8:25:2e:
2f:62:35:f7:50:53:dd:ed:e1:23:dd:88:88:15:e6:e5:02:8b:
df:4d:d7:63:a0:1a:64:c1:2a:39:6b:08:0e:04:76:2b:4d:9f:
47:36:ef:3b:1e:a6:2f:fd:3a:b5:75:42:01:11:29:7e:87:67:
a3:4a:2b:8c:00:49:88:dd:db:bc:51:81:31:d6:a8:5c:93:af:
f7:87:cd:18:5b:28:81:d9:f8:10:aa:0c:30:e8:ce:ec:92:ca:
de:8b:06:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:24 2025 by rpki-client