Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/9B002sMw23yP4QaByu7eq_1mxUM.roa
File: 9B002sMw23yP4QaByu7eq_1mxUM.roa (raw, json)
Hash identifier: 0XAXppu8XCMpVQe/fmQimjeUuz6WhpyweNd9n6KusS8=
Subject key identifier: F4:1D:34:DA:C3:30:DB:7C:8F:E1:06:81:CA:EE:DE:AB:FD:66:C5:43
Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial: 018CC424982F0A096AF5BDBC0CEFD329BB83
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/9B002sMw23yP4QaByu7eq_1mxUM.roa
Signing time: Mon 01 Jan 2024 08:29:41 +0000
ROA not before: Mon 01 Jan 2024 08:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6898
IP address blocks: 185.155.176.0/22 maxlen: 22
2a00:bd00::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 04 Feb 2024 23:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:98:2f:0a:09:6a:f5:bd:bc:0c:ef:d3:29:bb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
Validity
Not Before: Jan 1 08:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f41d34dac330db7c8fe10681caeedeabfd66c543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:23:fd:a0:1f:db:e7:9c:f6:83:06:03:97:
0e:4c:b6:b5:2d:26:0a:b8:46:4c:82:03:96:83:c2:
13:1c:9e:fe:17:34:b0:f9:56:ee:b7:4b:62:a4:83:
be:90:d1:58:78:a3:08:6c:0f:bb:6b:b9:af:67:de:
08:f9:60:6b:4c:02:f2:3b:cd:8a:4d:21:e7:d4:5a:
55:07:9d:cb:69:3d:f8:a5:e8:40:d2:07:f8:9b:ed:
ec:b8:03:ef:7c:e5:76:56:74:90:10:c9:87:dd:f3:
97:5d:e2:c7:00:e3:8d:33:92:60:82:a9:09:f5:c3:
ae:b9:45:ee:88:23:d0:3e:d9:ad:84:76:06:c1:d8:
c0:5e:06:16:20:b8:02:50:5b:87:d2:2a:7e:cf:fc:
be:31:64:da:34:ca:49:b4:8e:76:fc:75:b1:40:38:
89:fc:0a:bd:b3:11:18:2c:02:79:f8:da:b4:53:78:
3b:b4:ea:f0:0e:84:a7:78:fd:74:1a:65:db:60:57:
3e:71:9f:bd:7f:53:00:97:b4:13:1e:e8:63:61:ce:
e9:34:72:1f:b9:08:92:f1:27:26:4d:45:93:b0:98:
a3:0c:4f:32:9b:5b:a6:31:e1:ff:49:89:ab:15:43:
b4:8d:18:70:94:60:bf:96:e4:ee:69:87:ac:41:87:
23:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1D:34:DA:C3:30:DB:7C:8F:E1:06:81:CA:EE:DE:AB:FD:66:C5:43
X509v3 Authority Key Identifier:
keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/9B002sMw23yP4QaByu7eq_1mxUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.176.0/22
IPv6:
2a00:bd00::/32
Signature Algorithm: sha256WithRSAEncryption
ab:59:7a:c3:85:15:1f:43:35:52:ae:5f:73:4c:aa:e4:22:ba:
12:f8:95:26:c0:dd:c2:54:04:db:6f:e7:06:40:04:78:07:8d:
c3:32:dd:69:9a:dc:ff:14:f5:08:43:42:69:28:48:e3:0a:92:
4c:a1:c2:23:b3:a3:d0:c6:3b:93:92:03:d0:a9:77:e0:88:ad:
ad:69:7b:8d:41:2f:00:0c:83:3c:13:d4:ff:65:2a:17:37:37:
09:b5:7b:b0:5c:79:2d:0e:95:59:10:8e:13:6f:a8:cb:cc:74:
d4:18:c9:ad:5f:d8:f1:f9:ec:5a:5f:bf:18:8a:5b:49:60:a5:
bb:fa:3e:2b:6f:cf:5d:e4:74:13:d0:95:2e:11:d4:03:a2:ec:
17:80:34:7d:2d:ca:19:04:23:a2:9f:24:3b:b4:fb:18:89:2b:
ff:60:3c:bd:bc:84:52:05:ed:9e:80:0c:3b:27:2f:88:ef:3b:
b1:97:53:69:22:0c:da:1c:a9:58:da:a4:0f:d0:88:28:c2:01:
f2:fb:cd:8a:2b:68:20:a5:60:99:b7:33:ad:fd:93:a5:7e:20:
d0:2e:c5:e3:1c:4e:8f:ff:d4:29:e0:3c:c6:0f:2f:9a:e5:68:
35:42:a7:04:e5:9e:b8:f7:6d:5f:ed:8d:96:e0:ba:0e:be:f2:
95:3f:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:45:23 2025 by rpki-client