Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/v-w4rbxmsxYucRnfnG08F0IoZwg.roa
File: v-w4rbxmsxYucRnfnG08F0IoZwg.roa (raw, json)
Hash identifier: 17vyuuIMnwKrO7E2bELDQrivDYUtEAejdFI6S8ZdNno=
Subject key identifier: BF:EC:38:AD:BC:66:B3:16:2E:71:19:DF:9C:6D:3C:17:42:28:67:08
Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Certificate serial: 018CC424C5067531783773897CE7761B4B12
Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/v-w4rbxmsxYucRnfnG08F0IoZwg.roa
Signing time: Mon 01 Jan 2024 08:29:53 +0000
ROA not before: Mon 01 Jan 2024 08:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25516
IP address blocks: 185.49.16.0/22 maxlen: 24
185.49.16.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:c5:06:75:31:78:37:73:89:7c:e7:76:1b:4b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Validity
Not Before: Jan 1 08:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfec38adbc66b3162e7119df9c6d3c1742286708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:d2:36:43:fd:30:6d:b7:fb:61:84:d1:59:
c7:8a:0f:39:b4:6a:7d:02:63:99:34:0f:b4:f8:65:
56:df:02:6c:6d:81:bd:6d:c2:67:68:5a:ea:85:40:
32:4a:f1:fe:1b:80:c7:83:22:44:35:82:ae:21:3e:
65:c0:1d:13:59:7a:8c:84:c2:37:b0:c1:d0:e0:70:
77:d4:ec:61:59:3b:3d:38:99:25:80:58:44:76:4d:
3c:c2:b2:a2:3d:45:de:9d:88:e2:56:78:90:63:02:
2d:1e:e4:8d:69:06:e9:d9:9d:18:97:f8:a5:b2:52:
ef:d8:b1:15:c3:68:ca:3d:8d:08:f5:cc:b2:85:c3:
fd:4f:fa:68:9c:9e:8a:62:4f:e9:1f:51:ab:99:46:
a1:4b:d9:e5:d7:1e:18:05:f6:ad:52:52:77:1a:c1:
a3:ba:92:23:f0:af:4f:c3:e3:ed:8c:75:9c:72:f3:
9c:38:ca:e2:c3:5b:2d:ea:82:1e:ed:df:b8:e7:d0:
de:4f:82:68:d1:a2:79:90:84:45:4e:59:29:9d:85:
fc:1b:01:81:fd:cc:2e:e9:39:ef:6a:02:fa:67:82:
c6:9c:65:3e:e0:90:ce:7f:56:5f:fb:da:6d:8f:5b:
47:be:c0:ed:d1:d2:56:1f:1b:0d:8c:e4:2d:b1:ab:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EC:38:AD:BC:66:B3:16:2E:71:19:DF:9C:6D:3C:17:42:28:67:08
X509v3 Authority Key Identifier:
keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/v-w4rbxmsxYucRnfnG08F0IoZwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.16.0/22
Signature Algorithm: sha256WithRSAEncryption
43:8a:fe:b6:23:85:81:ec:fc:b9:c7:87:00:cb:77:8e:21:d3:
81:22:81:c1:a4:75:76:fd:02:7b:2c:97:ad:3f:d8:bc:01:10:
8d:62:fa:33:21:79:70:0a:74:f5:96:38:41:d0:60:02:64:ed:
58:a3:7f:63:91:5a:38:b1:9a:23:aa:e3:16:fb:ef:53:1f:c7:
9e:5f:4c:62:66:fb:37:ac:73:22:d2:ea:53:62:e4:e5:91:e8:
2a:b5:43:e2:a2:b8:69:28:13:93:83:0b:40:9d:68:01:5d:5f:
fe:a3:37:ff:34:2f:bb:23:1a:c6:29:e3:f0:de:8a:55:44:8b:
d1:96:a2:e5:37:cd:3a:06:6d:13:16:5a:ec:7e:39:e7:db:42:
91:06:c3:03:cd:b8:5e:c8:3d:ec:4a:9c:af:5b:d4:4e:02:8e:
d2:78:29:a3:56:a2:5c:b8:e7:8d:50:af:23:cd:ae:5c:a5:d8:
5c:47:fd:05:af:40:8c:82:d2:de:9f:d8:6b:d5:f1:0b:83:fb:
b5:e3:40:c2:ac:ca:72:f4:5f:0d:7d:7b:64:3c:7f:4b:7f:78:
7c:84:3c:36:34:cd:16:3d:db:70:fa:a6:31:43:e4:83:d0:51:
6e:74:7b:82:59:12:71:49:cb:56:dc:13:39:3c:f6:2a:d1:66:
18:68:eb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:15 2025 by rpki-client