Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/5CjdtwBr-vyfN1ac7CcDDyCkTr0.roa
File: 5CjdtwBr-vyfN1ac7CcDDyCkTr0.roa (raw, json)
Hash identifier: H0vIcxOPLmgs6m36WLwj04ujRDj2lwbR0bMadiliFIk=
Subject key identifier: E4:28:DD:B7:00:6B:FA:FC:9F:37:56:9C:EC:27:03:0F:20:A4:4E:BD
Certificate issuer: /CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Certificate serial: 018CC727328BF73366078FAD723660E27C66
Authority key identifier: 1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/5CjdtwBr-vyfN1ac7CcDDyCkTr0.roa
Signing time: Mon 01 Jan 2024 22:31:23 +0000
ROA not before: Mon 01 Jan 2024 22:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207365
IP address blocks: 185.73.225.0/24 maxlen: 24
2a10:1080::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:32:8b:f7:33:66:07:8f:ad:72:36:60:e2:7c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Validity
Not Before: Jan 1 22:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e428ddb7006bfafc9f37569cec27030f20a44ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:76:80:37:31:e1:87:0d:cd:08:b2:00:c0:37:
2d:58:b6:5f:1c:fa:0c:e0:5a:30:7c:45:ec:9d:53:
3b:9b:68:f9:6e:33:d1:25:75:af:f1:b6:8d:58:36:
41:cb:a7:a3:ba:07:71:8e:4b:f3:0e:13:a8:20:8d:
bf:a3:4c:02:6c:e5:48:88:9f:f6:68:70:81:8e:6e:
b7:db:d4:bb:d7:57:70:02:1a:18:c8:fc:a3:e9:b9:
59:85:7c:a9:fa:71:85:8f:fe:c6:0c:0f:0b:b7:9c:
17:0a:53:18:2a:f2:6f:4f:4f:af:4d:05:6c:d3:20:
70:c5:ae:52:c6:9b:9c:ad:a7:5b:53:54:82:59:83:
ff:0b:b1:69:95:01:66:e7:f8:c8:af:42:35:e5:80:
c8:87:5c:7d:f9:b3:4e:60:66:93:89:c0:d9:19:7b:
e0:7b:be:8b:be:96:fc:66:53:23:f9:91:08:cf:68:
99:8e:67:a0:29:92:84:dc:dc:63:8b:a2:ab:b6:85:
9b:f7:b2:a1:93:64:86:ff:60:c5:d3:bd:ae:35:34:
ba:80:28:bd:de:c5:b4:62:46:16:9c:9e:f8:69:c7:
b6:bf:0f:a3:0e:e2:11:72:08:56:65:94:64:18:88:
4e:4b:66:a4:8c:50:f8:48:92:7c:8d:ac:a5:bc:32:
85:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:28:DD:B7:00:6B:FA:FC:9F:37:56:9C:EC:27:03:0F:20:A4:4E:BD
X509v3 Authority Key Identifier:
keyid:1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/5CjdtwBr-vyfN1ac7CcDDyCkTr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.225.0/24
IPv6:
2a10:1080::/29
Signature Algorithm: sha256WithRSAEncryption
26:d1:2c:95:a5:86:10:04:a3:4b:43:7b:b4:b1:d5:a1:1a:3e:
a8:89:13:87:4f:f4:0d:fd:5f:44:9a:fa:f0:98:d6:82:50:a2:
22:bf:76:f0:00:fe:b9:ba:48:a4:fc:70:55:48:36:f9:2e:e3:
d6:72:37:d1:a7:c7:27:65:4a:b7:3b:b6:96:73:1c:5a:35:2f:
7c:91:15:9f:cc:92:55:05:f3:3f:e4:0a:47:5a:53:1a:77:c2:
f5:74:91:66:d5:51:99:e1:12:16:6e:bf:60:07:74:f6:cb:13:
cb:e9:11:50:5a:a8:de:2f:68:ce:f7:b0:87:6d:8d:6c:0b:0a:
85:60:91:a5:29:ea:06:80:4a:1a:3d:08:ad:87:56:4f:08:89:
34:ea:dc:8d:32:38:5d:3c:81:04:2b:90:40:b5:92:49:1d:b3:
51:29:a6:40:4c:cd:b9:0d:72:80:29:25:fd:30:76:5e:e9:31:
32:80:d8:79:b3:f4:e7:fd:a7:7e:cf:ac:0b:e4:41:50:a7:af:
71:4b:64:f3:6b:16:4a:7c:4d:57:cb:de:da:c6:f8:02:a2:38:
c1:79:fd:f6:f1:cb:4c:fe:af:84:36:a3:27:d2:44:91:63:7e:
49:8d:a7:b0:33:83:ec:4e:f9:db:0c:7b:8a:d3:ac:e0:63:09:
40:77:79:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:30 2025 by rpki-client