Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/b4SQLKhSWV6La8ZXFb3B79jEjbI.roa
File: b4SQLKhSWV6La8ZXFb3B79jEjbI.roa (raw, json)
Hash identifier: i89LICfHbSJA0PXXfE5OAd2vYxpZ2kA2sloCDllCdvY=
Subject key identifier: 6F:84:90:2C:A8:52:59:5E:8B:6B:C6:57:15:BD:C1:EF:D8:C4:8D:B2
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018FCEC155A9CA44FB36715A04972A3928F8
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/b4SQLKhSWV6La8ZXFb3B79jEjbI.roa
Signing time: Fri 31 May 2024 13:05:27 +0000
ROA not before: Fri 31 May 2024 13:05:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204104
IP address blocks: 5.57.33.0/24 maxlen: 24
185.26.32.0/24 maxlen: 24
185.26.33.0/24 maxlen: 24
185.212.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jun 2024 13:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ce:c1:55:a9:ca:44:fb:36:71:5a:04:97:2a:39:28:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: May 31 13:05:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f84902ca852595e8b6bc65715bdc1efd8c48db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:ea:05:67:e4:29:23:d7:20:1b:a1:2e:93:
c2:f1:a1:d3:5c:fb:8b:54:98:83:d6:5c:47:48:76:
e2:29:90:f7:e2:61:be:da:3c:b5:cd:76:a1:b1:fb:
10:58:1b:0a:c6:e0:2a:02:05:45:f5:33:20:7a:e5:
ee:ca:05:08:6b:42:4a:90:48:e7:d0:70:ec:dc:9e:
10:b5:2a:01:63:66:53:c3:c9:2a:45:76:2d:15:b1:
24:90:21:b4:bd:6c:59:fb:0a:ff:ad:0e:4c:17:39:
a4:73:fe:f5:05:94:a7:52:9f:bd:ba:b1:6d:9a:6a:
a1:28:d0:59:bc:87:c9:a3:ba:1e:55:69:49:97:cc:
2c:9b:54:6a:44:08:8c:bf:c2:83:e6:ff:12:5f:82:
53:0f:5a:19:e7:71:d0:08:c1:06:5e:6a:9f:e5:7c:
1f:cc:99:07:4d:a8:c6:13:00:3e:bb:3c:cc:5d:fd:
81:35:0e:aa:71:ed:02:aa:f8:44:de:52:f1:0e:d9:
9c:d9:ec:d5:f1:2c:8e:f9:f6:0c:6b:30:05:ee:e7:
8b:fd:b5:51:d8:f5:a5:bb:4a:f3:01:9d:d5:eb:ba:
2e:8c:c3:bb:0f:0a:27:b8:c0:86:8d:22:9b:2f:01:
ff:6c:b2:ff:5b:53:27:af:86:78:3f:79:c7:e9:d2:
10:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:84:90:2C:A8:52:59:5E:8B:6B:C6:57:15:BD:C1:EF:D8:C4:8D:B2
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/b4SQLKhSWV6La8ZXFb3B79jEjbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.33.0/24
185.26.32.0/23
185.212.50.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:9f:4d:71:e3:d8:ce:ce:e3:47:0e:93:0f:77:95:55:ab:71:
29:f8:cd:65:a5:4f:50:b0:86:14:b8:90:87:f0:96:4d:46:15:
c3:b2:bb:0a:3e:c0:76:95:b3:17:d2:d0:e4:02:9c:96:7e:77:
ee:34:38:8d:74:03:fe:4b:ec:0d:0e:b1:65:d2:29:96:99:af:
88:f9:dc:ac:49:89:52:0f:b9:4b:84:d8:f1:6a:e9:7c:cd:cc:
c6:d6:d8:ca:5e:22:bb:bb:e9:9d:bf:2f:de:4e:f4:94:74:d5:
d1:2e:68:d3:7c:77:4b:6a:ba:5b:10:40:0a:a2:26:d1:55:4a:
a7:12:41:a3:f2:6b:3b:67:92:d6:ff:e7:09:6d:51:7c:7e:dc:
04:8e:57:d4:ad:9d:90:77:09:c7:87:7e:c7:09:aa:24:88:3e:
2a:94:5f:45:6d:4b:78:68:7a:a5:65:d5:ee:59:ad:b5:9d:d6:
35:de:1a:47:1a:f0:e7:1d:5b:5d:63:fe:3d:bd:b3:f1:f9:0c:
68:87:58:70:c4:21:18:43:58:85:8a:44:b2:a1:66:be:09:f0:
cb:a6:70:02:0d:ae:90:14:2b:22:2c:a3:32:16:cf:32:20:a6:
8a:d0:14:50:35:12:e5:4a:a5:c7:0d:b3:32:65:68:ca:1e:27:
2e:9f:9f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:56 2025 by rpki-client