Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/ANMDdIIi8ODa6_p0QIXdmeb51u8.roa
File: ANMDdIIi8ODa6_p0QIXdmeb51u8.roa (raw, json)
Hash identifier: h1Zk6zkpmTW8TkpE6jUEZQBhutdzCoyJMAQoFJMb9xY=
Subject key identifier: 00:D3:03:74:82:22:F0:E0:DA:EB:FA:74:40:85:DD:99:E6:F9:D6:EF
Certificate issuer: /CN=e91ef22adaa16d53dcf637c569f4131f26215b91
Certificate serial: 0190345528B64E8644DE8A4D797CC23C43B9
Authority key identifier: E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/ANMDdIIi8ODa6_p0QIXdmeb51u8.roa
Signing time: Thu 20 Jun 2024 06:28:34 +0000
ROA not before: Thu 20 Jun 2024 06:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214798
IP address blocks: 185.169.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 10:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:55:28:b6:4e:86:44:de:8a:4d:79:7c:c2:3c:43:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91ef22adaa16d53dcf637c569f4131f26215b91
Validity
Not Before: Jun 20 06:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00d303748222f0e0daebfa744085dd99e6f9d6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:46:3b:1b:e5:ec:82:2b:3a:82:23:1b:d4:92:
4c:92:c1:ab:17:01:40:92:e8:ac:22:bf:ef:dd:2c:
65:f2:19:ba:93:d5:1d:3e:3b:26:88:78:f9:0b:15:
79:b4:5e:cf:03:4c:1c:56:ff:76:b7:8c:33:1b:6b:
d7:13:a3:40:2b:29:03:54:36:81:80:83:25:79:23:
79:13:3d:6f:9c:51:48:d4:70:13:1e:a4:84:34:2e:
eb:ad:90:98:d4:68:e8:30:d3:9c:c7:76:57:47:7a:
3f:26:e3:16:6b:c1:cc:ae:a3:74:bf:58:5d:b6:c6:
5f:58:25:f7:82:23:46:7a:a7:81:45:86:aa:2d:4e:
07:19:c3:45:44:5e:28:11:18:69:a7:18:ef:2f:b8:
f9:2e:a4:6f:90:74:e6:9b:a0:35:1d:71:6f:f5:08:
1e:44:1b:77:31:cd:f8:35:9a:a2:58:a7:fd:f9:9b:
e2:57:f6:bd:a7:d0:89:84:1a:03:b1:33:d0:f8:5e:
a5:78:33:1d:7f:2a:b9:2a:45:7f:22:a2:94:87:b6:
a7:57:42:12:83:dd:db:a5:5d:b4:99:e5:43:87:01:
46:6a:ba:8a:c8:18:48:df:4f:8a:f6:0f:6f:fa:0b:
92:f0:47:2b:18:5e:ea:10:dc:89:e0:e1:fa:bf:a7:
e8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D3:03:74:82:22:F0:E0:DA:EB:FA:74:40:85:DD:99:E6:F9:D6:EF
X509v3 Authority Key Identifier:
keyid:E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/ANMDdIIi8ODa6_p0QIXdmeb51u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.107.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:50:d3:3e:62:4c:09:d0:46:2e:ce:aa:49:a8:88:a9:13:94:
2c:8e:20:62:bb:54:fe:ad:81:47:fc:ee:8d:c0:43:f6:4f:8c:
d9:dd:fe:40:5f:12:03:d0:9e:66:74:a1:fb:c6:b5:ba:7a:45:
2d:ea:4e:c9:15:68:c5:e2:f1:5a:f1:20:28:0d:4b:67:3d:c1:
66:c9:49:d5:c2:f1:3f:e7:09:5c:78:8c:cd:ef:85:dc:d0:69:
e2:f9:71:6f:a9:88:4c:dc:91:ac:2f:7a:1c:e3:3a:75:de:04:
76:68:d4:f8:36:dc:b3:a0:ef:7a:37:76:da:d2:36:1c:42:41:
85:6e:ee:30:6e:06:3b:20:a6:e7:63:26:42:f0:71:5a:28:4a:
85:37:7c:7b:83:eb:79:0b:66:07:40:e9:dd:e9:d8:a7:49:4d:
85:c1:10:35:e4:23:e8:c5:21:cc:ca:59:d5:9a:8e:df:b8:c9:
3f:b3:37:9b:03:1b:ef:a8:c6:96:17:c9:f2:57:23:49:7d:61:
b2:4a:96:08:f6:46:1f:e5:3c:ce:5b:c9:b2:ee:66:d3:6b:5a:
c6:7e:29:ab:c6:06:d6:8f:f5:7e:ba:c4:eb:3e:fa:9c:35:09:
e8:ca:f7:f1:d4:ef:04:43:44:50:8b:ad:57:f9:c0:59:35:39:
aa:37:a9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:30:56 2025 by rpki-client