Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/E_enDRomPaAFK8wM6EFE7huEFrA.roa
File: E_enDRomPaAFK8wM6EFE7huEFrA.roa (raw, json)
Hash identifier: BusjavTw6ToS7udIV6523503Z+UQ0UwQzpgi1pgtCTg=
Subject key identifier: 13:F7:A7:0D:1A:26:3D:A0:05:2B:CC:0C:E8:41:44:EE:1B:84:16:B0
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0193F991C0FEC36A841ABA7BEFC9F043698A
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/E_enDRomPaAFK8wM6EFE7huEFrA.roa
Signing time: Tue 24 Dec 2024 16:48:18 +0000
ROA not before: Tue 24 Dec 2024 16:48:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 185.243.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f9:91:c0:fe:c3:6a:84:1a:ba:7b:ef:c9:f0:43:69:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Dec 24 16:48:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13f7a70d1a263da0052bcc0ce84144ee1b8416b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:db:30:88:8f:5e:d6:f4:06:53:a7:a0:73:48:
8c:d1:21:6b:a5:c4:64:8d:fe:8d:7a:21:01:ef:dc:
2e:34:cd:be:9b:6a:d4:47:c9:cb:cc:87:6c:c6:b1:
69:da:de:ef:2d:97:fb:98:7c:7c:44:dc:8d:f5:54:
22:4a:c5:cf:34:65:a6:5a:86:a4:40:14:b6:9a:74:
0f:93:e6:ff:aa:12:22:4a:14:f9:ef:fd:fe:04:86:
3c:10:ad:91:50:89:a0:43:c4:8d:f1:6e:8a:52:18:
5c:64:23:fb:23:81:97:ee:5c:fd:8b:b6:e1:d8:b5:
f5:ce:74:df:05:d2:dc:fa:e9:e9:49:7a:1e:ed:aa:
9d:b1:82:e5:a4:bb:07:1f:8b:1e:bb:2e:bb:d9:d2:
45:82:c1:8c:6f:0a:e7:fd:ce:81:1c:0f:5b:57:38:
30:d7:e1:f8:f5:cc:30:e0:47:57:d8:64:df:72:12:
ab:6f:78:62:fb:ec:47:a7:bb:fa:51:5e:6d:6d:e3:
2a:86:13:5b:dd:04:89:b3:c3:6c:77:94:d2:49:f1:
71:93:e4:01:9f:4c:07:1e:23:69:a8:9a:f6:6e:50:
bd:99:9c:66:06:c1:36:bc:fb:8e:e5:19:40:86:b8:
34:8a:59:35:cd:8a:c1:98:28:ed:29:45:33:38:7e:
8a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F7:A7:0D:1A:26:3D:A0:05:2B:CC:0C:E8:41:44:EE:1B:84:16:B0
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/E_enDRomPaAFK8wM6EFE7huEFrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.51.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:7c:8a:5b:e9:a7:50:ce:0f:77:48:80:d2:b7:41:a4:78:28:
73:e0:1f:0d:e0:e0:e3:70:ff:ef:3c:dc:3c:74:5c:a6:58:f8:
4f:7e:ae:b4:7e:84:5f:3e:f2:a1:b6:85:1c:0d:1a:aa:64:ae:
30:d5:d1:62:bb:f1:1f:00:76:87:45:d9:fc:7b:75:7a:e7:d2:
86:98:b7:e9:19:3a:0a:f2:b1:1d:52:ac:60:c6:bd:7a:b2:ac:
f0:9b:ba:9f:28:23:1f:d6:bc:db:7d:21:59:a6:fd:d7:42:9f:
1a:9f:cb:79:84:5b:71:71:eb:91:d3:df:70:11:57:99:35:86:
33:88:cc:65:99:54:19:1c:da:da:55:a5:a9:cb:d2:00:3c:35:
52:a5:74:d5:c3:b8:d1:24:79:54:91:8d:09:8e:4a:c1:66:a6:
6b:bf:23:71:a7:6a:fd:45:43:46:28:ad:5e:d6:a9:60:09:6f:
7c:ae:05:a2:1a:43:7d:10:09:71:53:35:d6:e5:96:06:d3:3e:
c8:63:dd:e2:55:3c:fc:1f:8f:68:27:1a:d4:1f:04:a7:e1:47:
df:f1:e3:de:07:2a:fc:14:71:0a:57:cd:bf:64:4a:d3:6c:ab:
28:56:27:dc:b8:20:27:70:1b:e5:ce:46:f9:97:ac:29:c6:eb:
d5:97:d3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:42 2025 by rpki-client