Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/DipbQ9dj8pVyxgFLHar69f-upCU.roa
File: DipbQ9dj8pVyxgFLHar69f-upCU.roa (raw, json)
Hash identifier: kkZFmuOp9PNS5N9h/GYFEhk4M6QKrMOC9AAe/Ibc3W0=
Subject key identifier: 0E:2A:5B:43:D7:63:F2:95:72:C6:01:4B:1D:AA:FA:F5:FF:AE:A4:25
Certificate issuer: /CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4
Certificate serial: 018CC2DB50BE7B3940CF87FAD953CCA691D9
Authority key identifier: 12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/DipbQ9dj8pVyxgFLHar69f-upCU.roa
Signing time: Mon 01 Jan 2024 02:30:02 +0000
ROA not before: Mon 01 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41828
IP address blocks: 185.53.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 08:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:50:be:7b:39:40:cf:87:fa:d9:53:cc:a6:91:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4
Validity
Not Before: Jan 1 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e2a5b43d763f29572c6014b1daafaf5ffaea425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:af:b9:b3:dd:00:a6:c7:a2:4d:90:7d:e9:53:
57:f1:c9:88:f5:3d:ed:72:05:13:93:e1:2e:c4:34:
b9:d8:c4:b2:46:48:3d:bf:e3:27:7c:ed:96:18:87:
d6:36:d2:83:83:d1:12:06:ff:6a:a1:93:cf:d5:7e:
64:32:ee:7e:c2:6e:77:92:c1:3e:94:a7:01:2f:bb:
bc:c6:00:74:9a:2d:a9:b6:a5:c3:18:20:de:28:c7:
64:34:7d:60:f5:9a:28:cf:16:10:39:47:15:1a:ab:
e2:3c:c2:4f:fb:d8:87:6a:a6:16:8a:5d:46:b5:c4:
50:3a:d7:8a:bd:89:dd:3c:eb:92:f0:a0:fb:e7:2c:
4e:7e:b6:25:43:5c:88:56:20:fb:70:77:95:29:1a:
af:4d:92:42:3e:5b:44:26:d9:5d:09:b6:69:58:d6:
0d:38:86:63:a0:70:d5:3e:08:99:fe:a4:c3:89:65:
f3:24:6a:39:e6:8a:6b:e0:13:77:0e:db:81:9e:72:
3a:af:fd:b6:88:04:26:04:70:82:06:22:6f:aa:df:
1b:86:25:df:78:97:b5:f3:ce:49:91:04:70:a8:68:
3d:ac:b0:35:96:93:c4:d6:29:f2:ab:46:ee:19:95:
15:92:1c:42:c4:89:91:6b:cd:98:74:b4:b6:b9:a7:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2A:5B:43:D7:63:F2:95:72:C6:01:4B:1D:AA:FA:F5:FF:AE:A4:25
X509v3 Authority Key Identifier:
keyid:12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/DipbQ9dj8pVyxgFLHar69f-upCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.12.0/24
Signature Algorithm: sha256WithRSAEncryption
46:07:22:b0:ef:2c:69:92:cb:b4:5e:90:75:6b:ae:66:74:90:
82:a6:84:fd:49:cb:68:08:2b:4f:c1:ef:25:7a:0c:58:7f:cf:
a4:85:75:48:d0:ca:6c:3e:bd:d8:1e:d0:b0:5b:c2:17:23:93:
0f:4e:27:e9:e3:6a:35:2d:9a:cb:c9:59:09:cb:a7:f8:88:e6:
8c:1c:75:72:97:7b:d5:1d:8a:be:c9:02:89:cb:7a:e8:3f:21:
d3:cc:ed:f9:5a:5f:d8:23:07:e5:61:5e:ac:09:6f:c6:63:3a:
bf:5d:2f:94:a1:1c:21:63:b9:3b:4e:38:60:32:4c:61:a1:63:
6c:c3:75:cb:fc:d3:82:05:bc:19:b8:f1:56:f9:71:85:5a:28:
1a:90:58:b4:e7:f9:8c:a0:a2:c6:39:5b:93:90:2a:83:75:c7:
4d:bf:6c:09:8f:c7:a7:b9:fa:ad:47:e5:09:a3:a0:71:90:d9:
32:29:85:11:1e:30:8d:7e:ad:23:f4:74:ea:9f:57:11:5e:35:
dd:3a:76:cb:fc:f2:64:b4:24:a1:71:37:07:9f:f3:44:c4:c4:
65:f1:c2:b9:e4:a3:08:2c:99:55:67:b5:74:e8:3c:1e:af:5c:
77:68:bf:66:08:b1:77:4d:a5:4e:76:0c:01:10:36:25:1c:a5:
12:b3:1f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:39 2025 by rpki-client