Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/vKtleLxOMJDmNUjb1WvAtt1oe_k.roa
File: vKtleLxOMJDmNUjb1WvAtt1oe_k.roa (raw, json)
Hash identifier: gYZZo90fZRlDLONuj8DNt7+msOvtmmunnIHV7ob9vKE=
Subject key identifier: BC:AB:65:78:BC:4E:30:90:E6:35:48:DB:D5:6B:C0:B6:DD:68:7B:F9
Certificate issuer: /CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Certificate serial: 018CC3B6FFBCB1F6CA9B350CDD9F900E4E19
Authority key identifier: 66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/vKtleLxOMJDmNUjb1WvAtt1oe_k.roa
Signing time: Mon 01 Jan 2024 06:29:59 +0000
ROA not before: Mon 01 Jan 2024 06:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207045
IP address blocks: 185.123.113.0/24 maxlen: 24
2a0c:6400::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ff:bc:b1:f6:ca:9b:35:0c:dd:9f:90:0e:4e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Validity
Not Before: Jan 1 06:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcab6578bc4e3090e63548dbd56bc0b6dd687bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:88:c0:62:15:0b:7d:d2:16:ab:a6:ab:f0:fd:
0a:92:df:ba:e8:be:b0:b5:ee:58:76:19:f2:ea:4f:
d6:a9:33:ce:4d:1d:89:8f:70:d8:87:94:c2:9b:68:
71:6e:cd:b7:fb:cc:a6:c0:40:ec:d8:93:25:85:59:
82:13:04:d2:09:84:23:39:0a:64:0c:a3:9c:68:a2:
bf:4d:8d:4b:13:79:bd:ea:52:ba:40:18:75:d7:1f:
2a:11:84:3d:16:50:65:2d:62:05:40:db:6f:57:c9:
48:2e:94:d2:16:77:ee:c2:7e:63:27:e9:8b:2d:93:
fe:38:f7:5c:65:34:e2:91:9d:75:f4:df:1a:b2:e6:
9b:f7:84:5c:cc:b3:56:05:94:f5:81:52:c7:f4:16:
22:53:f4:e3:9d:3a:25:20:b9:f8:75:39:81:30:a4:
a5:fc:d8:75:91:db:58:8f:92:3b:ea:c7:64:5d:20:
be:34:5b:ad:d9:92:39:2d:5c:f8:7c:ff:fb:37:0f:
95:24:58:34:50:48:8e:45:4f:09:9b:bd:30:42:33:
2b:73:80:c0:5d:4d:40:fd:38:25:60:95:60:a6:cb:
62:10:f7:e8:9c:e9:3f:80:5a:05:5f:4f:12:db:37:
20:02:58:61:ac:d2:a8:c2:07:04:4e:54:d7:c7:47:
b2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AB:65:78:BC:4E:30:90:E6:35:48:DB:D5:6B:C0:B6:DD:68:7B:F9
X509v3 Authority Key Identifier:
keyid:66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/vKtleLxOMJDmNUjb1WvAtt1oe_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.113.0/24
IPv6:
2a0c:6400::/32
Signature Algorithm: sha256WithRSAEncryption
06:28:d4:02:50:bc:14:c4:7b:5d:d6:33:06:d8:bd:47:be:80:
de:17:6c:d8:6b:b6:01:26:a2:4f:4a:ab:08:93:ae:ba:fa:6a:
3b:09:b9:f9:45:57:0d:24:3d:5c:d7:44:27:59:80:9a:ee:0d:
24:90:c7:a2:e8:42:93:0a:13:02:a0:19:99:63:98:df:9f:ef:
35:80:58:b4:78:bb:7a:66:c9:cf:4c:01:18:5a:b8:8d:13:9d:
44:14:c0:95:62:7d:10:81:79:fd:f4:63:4a:ac:a4:6a:7b:b7:
68:56:56:f4:67:0d:4b:61:46:b4:50:f6:cc:3b:28:eb:7a:33:
9c:d2:38:5c:8e:58:45:10:bc:94:ad:db:86:27:7a:34:6c:d0:
61:7f:d5:0f:64:5b:22:61:ce:2c:8f:79:8f:fb:b2:b8:a4:2d:
f4:bd:b3:13:9b:61:0f:4f:70:24:de:47:ab:3d:65:af:91:67:
67:ba:b7:a0:92:e2:49:bb:a4:16:00:2f:97:0c:a8:d8:29:25:
13:3d:c1:c0:0b:bc:5a:01:09:3a:36:85:a6:22:2e:8c:24:34:
f6:a2:ed:0b:3f:7b:d7:57:5b:58:0c:65:92:13:4b:58:d8:af:
c6:04:72:14:86:59:0e:f4:31:54:e9:48:2b:3e:62:49:f1:e4:
7c:17:32:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:46:07 2025 by rpki-client