Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/kX8V9PKFQttUSKO1YHTEVQ_0nT0.roa
File: kX8V9PKFQttUSKO1YHTEVQ_0nT0.roa (raw, json)
Hash identifier: qfearkH0S2Wf9eaBhhLHmnMw/ULkM3puGOvntKUwhbA=
Subject key identifier: 91:7F:15:F4:F2:85:42:DB:54:48:A3:B5:60:74:C4:55:0F:F4:9D:3D
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01941FFA66137DAC5AE50EAD7B2DC49A2001
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/kX8V9PKFQttUSKO1YHTEVQ_0nT0.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34636
IP address blocks: 185.124.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 04:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:66:13:7d:ac:5a:e5:0e:ad:7b:2d:c4:9a:20:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=917f15f4f28542db5448a3b56074c4550ff49d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:dd:cd:61:37:35:11:40:1a:2d:ba:de:d1:
0f:49:b9:a2:7a:95:15:b2:5a:3b:90:3e:84:93:74:
1f:08:04:92:74:40:3e:4c:a7:1b:7e:d2:6a:d6:8e:
28:0f:5c:c7:ef:99:96:c8:65:61:d2:14:71:6c:ab:
37:de:fa:f0:6f:5f:c1:b7:79:7e:3c:c7:f4:84:df:
a5:09:5a:a6:50:c8:f1:86:f7:f2:64:8b:07:10:da:
c2:95:d5:bf:00:04:92:d5:5f:f4:9f:0b:46:dd:04:
d0:e6:5c:f1:d1:54:c5:3d:a0:7f:4a:d1:46:5f:ab:
09:6f:b8:bc:d3:70:1f:f8:fd:5e:71:a3:21:55:9b:
fc:e7:04:7a:3b:a4:6b:95:66:e1:73:7d:dd:64:59:
32:af:0d:02:db:48:d3:e2:71:96:8f:7f:2d:02:f3:
96:17:48:2c:69:7a:c1:84:59:1c:70:75:b9:5e:4d:
7b:ad:a0:25:52:4b:2b:d2:fa:00:e9:a7:ec:af:9a:
88:59:1d:77:52:f8:cf:54:3d:9b:19:e5:7c:39:1d:
92:1c:ee:82:72:32:9c:d4:d8:b9:2f:49:b3:fe:78:
10:e3:ba:ec:44:1b:1d:88:44:cd:0a:55:17:d5:2e:
a7:6d:cc:ad:af:58:59:4b:2e:11:7a:60:39:22:63:
58:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7F:15:F4:F2:85:42:DB:54:48:A3:B5:60:74:C4:55:0F:F4:9D:3D
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/kX8V9PKFQttUSKO1YHTEVQ_0nT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.174.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:cb:16:1f:49:7f:e1:f8:6b:7c:54:7d:8d:fc:5f:4c:62:c2:
b2:2d:36:49:f9:d2:25:dd:57:35:6e:9f:b0:81:ce:8f:a9:b2:
d2:1f:a5:65:d3:83:63:4a:6b:1c:c7:37:8d:fa:47:48:29:2f:
fa:2c:3f:49:b7:97:b0:46:3c:c4:1b:a3:cd:87:68:47:7e:2a:
5e:af:37:69:da:9d:60:06:ae:29:de:51:e1:44:4d:08:90:50:
65:d6:2e:90:25:63:ee:a6:5e:12:d7:2e:72:2e:98:b5:d4:27:
c1:30:f2:d5:65:e9:6d:92:e2:55:1e:1c:f4:8b:ce:7e:e1:61:
a9:58:6a:7d:4d:7d:eb:b0:fe:18:ff:5c:b6:00:33:af:be:bd:
69:ec:fd:3e:1b:56:8a:b4:91:5f:0f:08:05:86:2d:34:72:9a:
c9:f4:87:d6:01:5e:c7:2b:73:29:2c:42:02:60:a8:05:28:d9:
0f:cb:fd:4f:4b:36:19:8e:fe:d9:52:5a:37:81:65:18:dd:89:
c2:39:ef:cf:12:1e:98:2c:21:13:55:9d:ea:47:22:f8:a4:53:
83:f5:81:89:af:20:ef:9e:26:41:2a:9e:cc:4c:18:2a:df:c0:
5e:db:06:92:01:c1:4e:c6:58:8e:6c:63:e9:c7:21:fa:ee:2e:
b9:af:c5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:45:27 2025 by rpki-client