Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/diZhoHJwvSDvOlHIyHrc8k046Jc.roa
File: diZhoHJwvSDvOlHIyHrc8k046Jc.roa (raw, json)
Hash identifier: n+aOmPp6mwEMRDH1NS8XcKY3QoDe94b32HT2FU56mas=
Subject key identifier: 76:26:61:A0:72:70:BD:20:EF:3A:51:C8:C8:7A:DC:F2:4D:38:E8:97
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 018CC4924D2B05E30EBCF6A6D6E111761018
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/diZhoHJwvSDvOlHIyHrc8k046Jc.roa
Signing time: Mon 01 Jan 2024 10:29:31 +0000
ROA not before: Mon 01 Jan 2024 10:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41059
IP address blocks: 185.1.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:4d:2b:05:e3:0e:bc:f6:a6:d6:e1:11:76:10:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 10:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=762661a07270bd20ef3a51c8c87adcf24d38e897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:7c:06:88:05:3f:92:a3:01:7e:7d:04:4b:
a5:75:62:a0:bb:c0:8b:3d:b7:bf:46:ca:ae:12:1c:
ce:a8:19:a0:80:76:18:2b:5c:00:c5:e7:d8:53:c9:
7f:c2:4a:93:2c:34:d7:96:e8:53:6d:d4:a9:1b:29:
b2:75:7e:b9:87:c2:6a:9b:e1:b6:2f:19:de:16:79:
0c:80:ed:7b:cb:4a:6b:f2:cc:e2:dd:b2:89:b7:c2:
ad:89:ea:89:f2:8f:6a:c6:5c:1c:91:80:98:fb:cb:
28:67:6e:c3:53:95:e8:0f:8d:83:23:7b:8a:bc:f4:
04:c0:11:34:56:5c:ed:96:9a:ad:bf:79:38:b9:ad:
7e:c0:26:ea:9c:70:dd:4a:81:a1:37:86:c3:dd:b5:
d4:d2:d2:59:2a:bb:cd:c3:e6:8c:d7:13:74:fa:de:
91:1e:a5:d3:dd:fb:4a:d7:7f:b4:e5:d1:3c:90:e4:
14:ab:a0:a0:61:94:dd:db:09:14:31:00:e5:dd:cb:
0d:86:3a:b3:24:80:24:69:36:d9:ad:ab:d3:9f:52:
33:2f:95:3f:6a:d2:cc:ec:3b:cd:e3:8e:68:b9:1b:
37:38:23:56:63:08:3d:f8:74:5d:8b:64:55:22:af:
ca:09:47:2e:09:d9:f5:f1:8d:5f:5a:95:39:39:8e:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:26:61:A0:72:70:BD:20:EF:3A:51:C8:C8:7A:DC:F2:4D:38:E8:97
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/diZhoHJwvSDvOlHIyHrc8k046Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.40.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:88:29:7c:80:cc:4a:7d:50:a0:5b:1b:bf:1f:ad:ae:80:e4:
60:bb:71:85:a7:2d:47:b3:1d:f2:be:51:24:38:64:6f:ae:52:
de:10:15:d7:07:12:d1:a4:1e:5e:c6:93:7d:0c:d9:53:d3:43:
e9:5e:a1:a6:0b:02:e1:12:0b:37:ba:d1:6e:d6:ab:b1:e3:d7:
73:7c:15:d7:28:60:43:5a:eb:cc:05:ec:69:f2:ff:7c:ff:e7:
43:0e:47:fa:74:40:87:c8:71:a4:ee:94:4c:25:8c:84:0a:44:
3a:4b:b8:51:6f:06:50:f5:e2:95:f5:a6:d4:b0:d0:a1:d4:f6:
92:dd:c4:b3:95:0f:c8:60:89:b1:44:c7:24:56:39:87:61:f8:
63:d6:b7:95:d0:d6:cb:64:17:1a:88:dc:e4:70:d0:77:e6:76:
cf:dd:93:84:dd:6b:a2:de:a2:a2:7e:56:26:9e:42:c1:f0:28:
5f:20:06:a9:f3:71:3f:69:99:81:8a:78:4d:88:f6:bc:2c:86:
c4:b6:34:d5:f5:68:39:0a:7f:46:19:8b:40:a9:48:f2:fa:83:
85:ed:72:30:99:4f:2c:f5:f9:ed:d4:21:c8:c9:d5:8e:4a:21:
a3:66:31:0e:0f:23:15:9e:4b:cb:97:4d:7e:86:31:ba:d5:ee:
25:21:08:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:03 2025 by rpki-client