Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/S2yAylcJrJZo1RSUz6uOY-MOReg.roa
File: S2yAylcJrJZo1RSUz6uOY-MOReg.roa (raw, json)
Hash identifier: 0giq36rmSxP+q5rz6VJXNTsdLIQnHYHlR2bIbc2W73E=
Subject key identifier: 4B:6C:80:CA:57:09:AC:96:68:D5:14:94:CF:AB:8E:63:E3:0E:45:E8
Certificate issuer: /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial: 01944CC83DDA2AADBAD29BB95B522E738DF1
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/S2yAylcJrJZo1RSUz6uOY-MOReg.roa
Signing time: Thu 09 Jan 2025 20:36:18 +0000
ROA not before: Thu 09 Jan 2025 20:36:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197937
IP address blocks: 185.7.172.0/24 maxlen: 24
2a13:83c0::/29 maxlen: 32
Validation: Failed, certificate revoked on Sun 12 Jan 2025 19:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4c:c8:3d:da:2a:ad:ba:d2:9b:b9:5b:52:2e:73:8d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Validity
Not Before: Jan 9 20:36:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b6c80ca5709ac9668d51494cfab8e63e30e45e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:6a:24:ec:b3:f7:97:e8:cc:6b:68:cb:e3:
06:92:4b:3d:77:f4:bb:b7:a7:9b:56:b2:3d:42:3a:
e9:98:42:4d:dc:0f:b7:56:5a:b4:0e:54:ee:24:5d:
87:9e:87:22:66:dc:ed:17:35:64:f3:b5:0b:dc:40:
5f:a3:d0:f4:39:24:71:bc:45:f0:a1:ea:ee:de:52:
72:ea:cc:ba:ae:b5:b1:9e:94:2e:28:fd:53:e2:67:
76:a6:5c:32:be:2e:22:62:da:8e:64:15:43:c7:5f:
90:f8:73:e5:18:c1:0b:5d:19:15:40:fb:56:79:db:
cd:bc:bd:0b:c8:36:a8:82:bd:91:c1:3b:ae:68:2a:
7d:7c:f6:c6:5e:48:df:2b:af:7e:80:41:62:35:47:
8d:09:1b:c2:03:3e:70:0f:d3:54:75:8e:59:0e:d5:
4a:14:3f:b8:6d:5a:24:8e:65:e9:4d:a0:f9:95:f6:
c4:2c:bb:9e:ad:17:19:c6:73:4e:40:7c:39:dc:34:
ac:3c:4a:90:ca:95:dc:d6:12:a5:10:12:10:e2:9d:
c3:1d:a9:0c:d4:27:e1:41:2a:ed:27:89:1c:a3:a9:
2d:c3:da:90:69:1a:af:16:17:95:1a:06:f8:10:ca:
29:4d:50:00:25:2b:bb:bd:a7:a0:02:9a:e0:58:ba:
5e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6C:80:CA:57:09:AC:96:68:D5:14:94:CF:AB:8E:63:E3:0E:45:E8
X509v3 Authority Key Identifier:
keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/S2yAylcJrJZo1RSUz6uOY-MOReg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.172.0/24
IPv6:
2a13:83c0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:58:55:91:ce:d0:d1:55:ce:10:ba:15:13:94:c5:2e:7e:49:
da:99:ba:5e:d3:ce:0b:fe:09:50:e1:ff:b4:77:94:29:4f:3d:
eb:4f:03:39:49:fe:45:f0:e0:2b:aa:df:8f:08:26:64:b2:c9:
a7:1e:c4:af:26:d6:2b:10:f8:ff:45:7c:ce:18:1f:22:c4:d9:
df:06:6e:5e:65:80:63:9c:29:ac:ba:95:2c:90:bb:1a:75:b8:
9f:4f:4a:07:f9:8a:31:f7:23:75:89:e5:ef:9c:c3:88:a5:d7:
d6:27:17:70:c2:3a:7a:84:8a:02:90:78:2b:3f:c7:12:74:93:
88:99:ef:07:9d:e3:8c:f4:0d:45:78:6b:9b:9a:95:25:f0:6d:
09:6b:ce:cd:3d:f8:a9:0c:3e:96:a6:70:a9:20:fb:2d:97:9f:
8d:52:ca:40:d2:c3:85:cb:45:a8:2a:42:8a:45:58:5d:c9:7f:
c4:17:de:52:bf:56:75:f4:eb:1f:c1:f8:06:cc:42:12:ac:66:
ae:de:e8:ad:6f:52:06:09:48:91:7e:63:88:b0:ef:39:21:5f:
f4:73:91:af:47:3d:4f:66:02:ef:48:a7:dc:fe:b4:eb:2a:34:
5c:75:0c:fe:c0:21:6e:f2:a2:49:7b:7f:f5:cf:98:ae:d1:15:
69:84:bf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:17 2025 by rpki-client