Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/7pRr-x8wwR1uiPmnfxnwWVJpp0o.roa
File: 7pRr-x8wwR1uiPmnfxnwWVJpp0o.roa (raw, json)
Hash identifier: 1AbjOJvbNNLqVJShwdRJ5NDo3nBJWG0i3sqSg43qPPA=
Subject key identifier: EE:94:6B:FB:1F:30:C1:1D:6E:88:F9:A7:7F:19:F0:59:52:69:A7:4A
Certificate issuer: /CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Certificate serial: 01906AC9A5D519FB53E5505F5B0C244CCE04
Authority key identifier: F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/7pRr-x8wwR1uiPmnfxnwWVJpp0o.roa
Signing time: Sun 30 Jun 2024 20:15:18 +0000
ROA not before: Sun 30 Jun 2024 20:15:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35661
IP address blocks: 185.234.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6a:c9:a5:d5:19:fb:53:e5:50:5f:5b:0c:24:4c:ce:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Validity
Not Before: Jun 30 20:15:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee946bfb1f30c11d6e88f9a77f19f0595269a74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:1d:28:1e:3c:ce:c3:d4:d4:c0:6a:b2:75:
86:e7:2e:a6:9d:ce:b1:7b:1e:f1:90:70:41:e4:05:
69:04:81:fd:c2:6e:6a:0e:ee:1c:d5:be:3b:b5:06:
e8:25:e7:f0:71:c6:11:22:e4:ba:85:9a:de:d2:75:
62:c4:1d:88:30:d1:40:26:bc:16:d9:81:5e:04:6e:
71:a6:b8:d6:76:23:e4:dd:fe:f8:22:e2:11:6d:84:
40:8d:28:61:9b:29:cf:25:8e:32:2e:7e:02:fb:05:
69:6c:a5:ac:80:42:8f:5e:57:da:e3:43:a7:9b:2a:
fe:45:b5:38:40:80:69:ce:4c:61:8b:3b:17:68:90:
df:d1:5c:38:50:04:eb:88:52:34:fd:e2:d2:1b:2d:
9f:13:8b:f3:1a:e6:b5:e8:ee:63:5b:88:fa:e4:6c:
a0:15:f9:eb:67:89:22:66:73:87:96:10:5c:b2:c4:
f3:b8:ab:85:48:b9:24:9d:b3:65:3d:6c:8d:35:5b:
cb:61:7b:dd:0b:a4:df:c9:63:ed:34:c7:c1:6c:d3:
c9:88:f5:52:62:99:8a:ba:9d:16:92:57:89:b9:25:
d7:37:7a:86:ee:21:90:d5:6e:f5:2e:b5:ec:06:f2:
86:6c:87:ad:4a:4d:d4:2d:29:42:23:ee:14:32:3b:
f1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:94:6B:FB:1F:30:C1:1D:6E:88:F9:A7:7F:19:F0:59:52:69:A7:4A
X509v3 Authority Key Identifier:
keyid:F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/7pRr-x8wwR1uiPmnfxnwWVJpp0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.100.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:15:39:05:50:65:45:8f:00:8c:71:b4:84:0c:e9:19:d5:d6:
51:3d:ef:df:8f:56:b5:80:9d:84:aa:d6:6b:4f:1b:d4:a4:d2:
7f:f7:c7:cd:65:20:2e:df:40:54:bf:1f:4b:2f:e0:ff:ee:b8:
d5:71:44:0f:cd:25:68:a9:76:a1:a5:71:a0:fc:9b:b2:de:31:
1d:9d:63:34:fa:e0:be:9b:c3:f9:05:0d:8d:3d:f8:4c:09:84:
b2:6a:72:58:ef:c9:b4:f9:6b:9c:a3:18:aa:a6:7c:29:53:14:
6d:ed:8e:a9:77:5d:b3:20:ab:d9:0e:ec:97:49:eb:19:ab:fc:
1c:ab:0c:e0:ae:f1:6c:2d:20:8d:3b:63:2c:46:02:f4:60:70:
26:27:c5:84:c3:5a:fe:31:2f:dc:5d:82:73:e0:a3:39:73:50:
af:73:f6:32:8d:cc:02:f9:66:62:4d:c0:fd:91:b4:c2:32:10:
8a:61:7b:ba:bd:82:92:5a:51:c3:e3:ac:c3:81:50:f5:bb:7c:
c3:55:c1:7d:7c:28:45:d0:3b:29:67:89:ea:a9:84:48:ca:43:
1d:ba:43:39:4d:4e:5e:d6:f0:55:6a:2a:92:4f:ca:26:ac:af:
6a:fb:1e:62:32:d3:6a:76:ab:92:44:f3:09:f7:a7:ed:a9:d0:
7e:ec:ff:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:10 2025 by rpki-client