Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/7fcEYXioKFasqEugHOKNTDeJTDc.roa
File: 7fcEYXioKFasqEugHOKNTDeJTDc.roa (raw, json)
Hash identifier: 4o34Kwq5N8ucaW82DUOl2unFsv2ot9oT63wIFceSJI4=
Subject key identifier: ED:F7:04:61:78:A8:28:56:AC:A8:4B:A0:1C:E2:8D:4C:37:89:4C:37
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 01942444BC56762C57585B9D49093933CE19
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/7fcEYXioKFasqEugHOKNTDeJTDc.roa
Signing time: Wed 01 Jan 2025 23:47:51 +0000
ROA not before: Wed 01 Jan 2025 23:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 185.167.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 09:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:bc:56:76:2c:57:58:5b:9d:49:09:39:33:ce:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: Jan 1 23:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edf7046178a82856aca84ba01ce28d4c37894c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ad:03:be:f1:db:31:59:5b:47:ee:b9:92:d8:
c5:29:29:a4:15:e5:4a:0e:c0:85:c7:41:30:a9:68:
cc:59:26:b0:a6:a3:b6:07:69:fa:2b:1d:92:31:a5:
53:f6:49:70:55:13:06:c6:9c:35:a1:97:30:d1:34:
d5:3e:f4:00:37:44:77:fd:2d:96:a7:08:f5:1e:19:
bd:f0:d8:5e:50:f6:39:63:6d:df:b2:c9:8b:77:80:
69:ad:01:87:11:87:93:67:ab:3f:5d:78:fe:02:e4:
59:ad:0d:70:dd:6d:ed:a9:4e:e5:3b:1e:4b:06:4b:
0d:42:a4:18:45:74:2a:b4:b4:64:de:a7:87:03:0d:
9f:fa:90:57:8f:84:49:40:25:c5:d2:73:33:bf:50:
b1:47:f1:4b:e6:c2:74:75:aa:88:03:8d:45:5e:b1:
94:e0:2a:ec:22:d4:34:5e:a5:1a:11:44:1a:cf:d8:
a6:7e:06:7a:9e:a0:f3:6b:7b:98:6f:69:c8:d2:b0:
39:ac:bb:cc:c6:d4:39:fb:28:2d:0c:fe:40:f1:de:
ad:14:a9:1c:a4:0a:cf:fd:3e:5c:3b:d2:c7:bc:56:
91:ac:c6:ad:ba:7b:a4:bd:c7:43:5a:7b:1e:6f:1b:
cf:7f:eb:87:bc:13:04:4a:61:78:c0:a2:97:85:0f:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F7:04:61:78:A8:28:56:AC:A8:4B:A0:1C:E2:8D:4C:37:89:4C:37
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/7fcEYXioKFasqEugHOKNTDeJTDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.234.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:ad:92:8d:1b:73:01:ca:e0:62:58:6d:da:98:36:92:02:9c:
ca:c1:eb:b7:d6:54:01:f6:69:93:3b:c0:6c:b2:18:01:8a:83:
e5:71:4f:3a:1b:96:a4:64:d4:2d:86:d9:1c:0c:7d:64:bc:be:
a7:1b:b1:58:e3:dc:e8:e4:c9:28:fb:24:79:0f:1b:b1:3e:32:
3c:c6:6d:78:e9:2f:b8:0c:9d:c6:93:45:bb:cb:ca:36:fa:a6:
fa:69:81:7e:5a:9a:bc:07:08:07:9c:9d:4f:fb:9e:b7:f2:70:
38:88:9c:03:30:9e:89:1a:6a:ea:2f:c2:ed:ec:c3:3a:c0:7b:
12:bb:51:dc:56:36:87:ee:89:8d:3b:83:bd:38:ff:e6:a9:a5:
d4:09:41:6f:4f:75:c6:7b:90:d6:27:e3:4a:b9:ad:4f:36:ec:
8b:ba:d4:3b:e4:c4:e4:77:7c:ec:88:d8:16:2b:61:2b:e7:ca:
25:32:3c:ca:16:50:d8:7f:02:6b:fa:06:5c:f3:15:c1:93:53:
e6:f5:0b:4b:42:61:49:47:db:15:59:38:04:67:be:00:55:05:
a9:44:99:1f:e1:00:17:8e:35:f2:e3:fc:ee:08:19:9b:31:57:
ce:4e:6c:94:c0:0f:a3:80:0d:b3:9b:00:4b:96:de:96:72:e0:
28:8f:d7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 04:14:38 2025 by rpki-client