Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Zf7rYEAejFdkawvp5lWht_UNa-I.roa
File: Zf7rYEAejFdkawvp5lWht_UNa-I.roa (raw, json)
Hash identifier: LWL3XcVULoED6+krpfZBfwplmIIw91C0uvZ37KNEFZ8=
Subject key identifier: 65:FE:EB:60:40:1E:8C:57:64:6B:0B:E9:E6:55:A1:B7:F5:0D:6B:E2
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0194790F328AC105669BBC43956F393DDA04
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Zf7rYEAejFdkawvp5lWht_UNa-I.roa
Signing time: Sat 18 Jan 2025 10:57:06 +0000
ROA not before: Sat 18 Jan 2025 10:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214525
IP address blocks: 185.124.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Jan 2025 10:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:79:0f:32:8a:c1:05:66:9b:bc:43:95:6f:39:3d:da:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 18 10:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65feeb60401e8c57646b0be9e655a1b7f50d6be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:04:74:ca:47:ee:ce:1d:b9:c1:73:ef:54:
ad:bc:14:5c:24:09:95:6a:82:ec:ce:b9:b3:a5:75:
e4:4c:73:da:e8:57:4e:ff:3e:9a:42:02:d7:71:b8:
dd:24:a4:bf:de:be:41:1e:3f:3a:37:b3:09:b2:3c:
78:27:40:28:47:5e:dc:93:1d:e8:a1:4c:5e:ba:09:
81:78:99:34:e7:3a:7d:26:33:91:76:54:31:57:24:
6d:72:9f:18:d7:03:00:5e:51:54:b1:01:03:77:72:
53:37:23:e8:f7:c7:2b:c7:ba:9b:83:bd:d8:63:6f:
48:64:7b:c2:97:b5:13:38:30:36:45:fe:c1:f5:b5:
95:63:f4:34:76:48:b0:fd:8c:36:29:60:59:7e:48:
f7:cd:8b:79:05:b9:1c:d3:92:74:db:46:f5:0c:ee:
aa:d9:65:17:0c:8a:9a:f6:a2:bd:b3:70:c9:dc:fe:
30:2c:8d:5b:e8:74:82:63:70:72:f6:60:6e:aa:76:
5b:60:17:bf:d7:dc:cc:a4:ba:00:88:0f:47:d6:b0:
14:95:e5:0f:de:38:af:ed:88:57:7a:90:06:41:ca:
c8:58:c2:1a:7f:84:c1:84:44:11:57:f1:32:b1:94:
7a:6d:07:b4:55:56:44:81:14:eb:68:ae:f3:46:72:
34:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FE:EB:60:40:1E:8C:57:64:6B:0B:E9:E6:55:A1:B7:F5:0D:6B:E2
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Zf7rYEAejFdkawvp5lWht_UNa-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.175.0/24
Signature Algorithm: sha256WithRSAEncryption
80:63:b5:fd:bf:cd:c5:8b:14:ac:0b:ad:fb:cc:56:b0:26:f0:
3e:22:35:56:e8:69:29:56:3d:5b:57:63:83:0e:86:a8:b3:be:
d5:4e:dc:b3:ba:25:55:c6:d6:0c:c7:d7:19:fb:63:47:bf:e3:
24:57:ef:a2:54:ca:4b:b0:6a:1d:10:ea:16:32:69:a0:78:d3:
98:29:35:e8:1c:97:92:e1:aa:60:e1:c2:92:27:54:a2:f2:c8:
0a:4f:2c:7c:34:21:89:66:e0:72:81:eb:20:95:3e:ea:6f:a1:
62:8a:83:80:cb:90:d2:4a:fb:b3:a2:0a:c1:a6:56:35:0f:53:
55:1f:38:dd:8e:e1:c3:6e:44:f0:b9:8f:78:68:99:6d:3d:46:
8e:e8:f3:fb:b4:04:c3:09:74:91:60:62:b8:da:70:6e:9c:fd:
ba:c8:40:d4:8c:0e:d0:8c:ae:d3:37:2f:e0:dc:0b:a7:ac:0b:
44:d4:ce:11:b1:2a:e6:b6:42:64:be:e2:dd:83:dd:f9:87:be:
82:bd:ff:23:f8:aa:6e:04:2d:3f:c0:23:3e:cf:47:14:d0:7f:
dd:f6:60:f7:b5:89:25:09:39:a5:60:fb:93:3d:85:ed:7a:71:
28:f3:47:6b:17:16:fd:c2:6a:ae:c2:c4:7d:b5:2c:b7:df:b0:
60:da:5d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:07:36 2025 by rpki-client