Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/h83fMyLqa-Fj8ANc75R81HhQH1k.roa
File: h83fMyLqa-Fj8ANc75R81HhQH1k.roa (raw, json)
Hash identifier: hiyVIG8EQV4S5fPME96wG98c6KO6hcL95kU/7nsiWuU=
Subject key identifier: 87:CD:DF:33:22:EA:6B:E1:63:F0:03:5C:EF:94:7C:D4:78:50:1F:59
Certificate issuer: /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Certificate serial: 0190582D3F08D32E77729D26D0459B7B1A2F
Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/h83fMyLqa-Fj8ANc75R81HhQH1k.roa
Signing time: Thu 27 Jun 2024 05:31:18 +0000
ROA not before: Thu 27 Jun 2024 05:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20634
IP address blocks: 185.213.56.0/22 maxlen: 22
195.170.175.0/24 maxlen: 24
2a0b:83c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:58:2d:3f:08:d3:2e:77:72:9d:26:d0:45:9b:7b:1a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Validity
Not Before: Jun 27 05:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87cddf3322ea6be163f0035cef947cd478501f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:6e:fb:6e:a4:bf:a8:3b:a0:35:94:a5:3f:
55:75:dd:bd:d7:7d:86:b2:1c:7d:19:d5:84:54:f9:
54:d0:72:f3:fd:20:c6:50:9e:ba:3b:21:bb:45:65:
bc:d4:0b:5a:ae:a1:88:f9:47:55:ac:1a:e5:d1:96:
ae:4e:25:bb:77:ac:44:ec:30:8a:38:eb:9b:0c:b6:
93:04:01:69:a1:67:74:a6:cc:15:65:ce:23:8f:16:
47:03:7b:15:25:c9:1d:3d:ef:7b:7a:4b:62:df:d8:
19:05:80:b0:26:61:a5:ea:a2:94:85:e0:42:2f:ae:
eb:ea:21:1c:02:bc:8c:d4:bf:6f:ca:56:a0:4c:59:
98:dd:4e:c8:81:58:8a:b8:0b:a7:9e:15:3c:2e:5a:
da:9e:8b:f3:08:67:ea:3a:6f:64:8c:06:6b:b3:45:
88:9c:56:5c:39:54:6d:9d:c6:43:8b:dc:f6:76:b0:
ef:f9:40:7d:54:1e:76:86:55:1d:6d:1b:75:73:9e:
e5:a5:54:dc:df:ea:bb:8d:79:b2:17:f8:05:5c:45:
88:bf:ef:87:8a:5c:b5:14:4b:82:2b:ba:6a:cd:79:
74:26:8e:73:ce:39:85:ce:05:59:cf:aa:6a:3d:18:
22:0f:ef:f8:19:b1:e8:a5:5b:82:8f:95:6b:fa:3e:
cd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CD:DF:33:22:EA:6B:E1:63:F0:03:5C:EF:94:7C:D4:78:50:1F:59
X509v3 Authority Key Identifier:
keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/h83fMyLqa-Fj8ANc75R81HhQH1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.56.0/22
195.170.175.0/24
IPv6:
2a0b:83c0::/29
Signature Algorithm: sha256WithRSAEncryption
28:b3:57:ac:bd:7b:bf:7b:27:ce:cc:02:04:a2:86:f2:54:4f:
d5:40:ed:cf:41:05:e4:1f:dd:07:d3:bf:9d:91:61:69:03:5e:
0d:d4:78:ba:1d:ed:59:3a:c9:d7:c5:41:63:b7:16:20:b0:d3:
c4:fa:d7:6e:40:93:fb:c4:d8:ca:84:9e:53:db:67:9d:2b:c0:
ab:b6:7d:a9:b5:d3:c3:93:a8:9e:d5:19:e5:14:07:20:d6:69:
4e:55:55:4f:a6:91:31:16:82:86:d2:de:2a:9a:02:9f:36:c7:
5e:66:1a:33:86:84:81:02:0b:82:eb:b9:05:05:d6:79:7c:ab:
ce:d6:b0:08:22:f5:81:16:c0:88:f0:65:72:73:e4:8b:f6:16:
da:a7:b8:80:c9:61:68:23:49:7f:5d:0f:f7:97:c0:7f:ad:d5:
db:d5:9d:05:10:34:23:70:bd:56:17:96:bf:9d:2d:1d:a6:4c:
bb:3a:dc:4a:7b:3c:5e:32:3e:0b:7b:d7:31:08:11:b0:d2:60:
04:23:51:e7:93:d2:3a:72:87:56:08:e1:05:fe:7b:e6:11:30:
49:0c:b6:c7:21:da:78:d1:e2:e4:2e:2c:c1:47:42:c8:61:41:
f5:20:58:38:37:48:d5:c8:8f:a4:19:5f:cd:f0:30:c2:1c:a4:
1d:a5:c0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:59 2025 by rpki-client