Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/RSfxoK9ix4jOpDhyzjnfnGuGCjI.roa
File: RSfxoK9ix4jOpDhyzjnfnGuGCjI.roa (raw, json)
Hash identifier: Ep6FQwS+Jf0uDU4f5dp/Is4u2Vm0RkxFnIjTDo/ZKTc=
Subject key identifier: 45:27:F1:A0:AF:62:C7:88:CE:A4:38:72:CE:39:DF:9C:6B:86:0A:32
Certificate issuer: /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial: 0193529979681F1E2B1DD15709A40240E51C
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/RSfxoK9ix4jOpDhyzjnfnGuGCjI.roa
Signing time: Fri 22 Nov 2024 06:40:09 +0000
ROA not before: Fri 22 Nov 2024 06:40:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31382
IP address blocks: 185.85.65.0/24 maxlen: 24
185.85.66.0/24 maxlen: 24
185.85.67.0/24 maxlen: 24
185.140.84.0/22 maxlen: 22
2a04:c7c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 22 Nov 2024 09:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:99:79:68:1f:1e:2b:1d:d1:57:09:a4:02:40:e5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Validity
Not Before: Nov 22 06:40:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4527f1a0af62c788cea43872ce39df9c6b860a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f7:aa:1a:4b:23:c6:ce:07:0c:b1:cc:60:94:
f2:98:98:78:53:5c:8d:b8:b9:23:8b:f9:18:03:b5:
00:f3:bc:59:95:71:be:b0:7a:ec:e5:20:02:88:73:
db:63:db:c4:96:e5:97:48:87:7f:a7:fe:dc:ba:84:
6a:36:0b:bf:6e:3d:ef:94:b5:02:68:e1:cb:ce:8d:
ac:fe:bb:35:dd:71:41:fd:93:41:94:77:6b:1c:cf:
ed:db:02:ea:13:57:f4:17:0f:bc:49:e0:07:ef:d6:
bc:e1:37:ad:44:d7:6d:cd:62:e2:e9:1d:b3:ff:88:
04:ac:dc:94:df:ed:94:51:e5:1d:04:48:ff:8e:4b:
68:bf:6e:a2:96:b1:e6:34:91:d5:05:b2:00:66:c2:
d9:1e:4f:88:70:55:e7:2f:70:77:3f:21:f3:e9:98:
16:ee:02:3a:e5:90:1d:ef:d7:e1:50:0c:fa:3b:dd:
6a:5a:ea:16:42:12:d5:b9:1d:af:9c:f4:7e:ee:02:
20:43:25:74:ad:b1:d3:75:73:86:21:65:21:a5:98:
7e:12:39:07:c4:e2:54:4a:68:2a:fe:34:e0:d7:f8:
e3:fc:9e:31:53:da:1e:46:bf:ba:7c:c6:92:e7:88:
19:ca:b5:df:4d:74:55:f4:6b:5d:7b:7f:ad:08:79:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:27:F1:A0:AF:62:C7:88:CE:A4:38:72:CE:39:DF:9C:6B:86:0A:32
X509v3 Authority Key Identifier:
keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/RSfxoK9ix4jOpDhyzjnfnGuGCjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.65.0-185.85.67.255
185.140.84.0/22
IPv6:
2a04:c7c0::/29
Signature Algorithm: sha256WithRSAEncryption
1f:b7:39:dd:b3:6c:37:43:4b:db:43:33:9b:c9:4d:ad:49:55:
27:bb:c8:47:c0:d9:86:77:c9:49:96:30:a4:e6:1d:17:81:b2:
5f:bf:df:54:6d:bd:52:dc:07:0e:52:7e:bf:c9:72:6d:df:e7:
f6:f2:a0:07:7b:41:c6:b5:a3:10:60:fe:5e:49:37:45:3e:4c:
40:f6:76:52:2f:ff:f8:be:a1:f0:2b:14:87:52:73:ae:31:91:
2b:d4:f6:6b:9e:6b:de:10:18:3b:80:c5:b8:87:87:9f:af:db:
cb:06:91:5a:5b:cd:25:d6:33:99:48:81:08:ef:92:db:52:d1:
44:c4:2b:cd:34:a3:5f:90:75:5c:a6:78:ae:8b:7c:54:ae:a5:
76:1f:31:3e:94:16:27:f1:d9:68:e8:3a:7d:1c:e0:c0:27:3a:
81:d2:b6:12:23:d6:6f:56:d7:7e:d0:be:ba:47:9d:c0:9f:5e:
d7:17:af:d3:be:a9:4d:8a:ea:23:37:f5:77:95:39:20:22:8d:
fe:b8:52:4e:59:9d:83:b8:8a:26:43:e7:a5:9b:82:3a:59:63:
0f:8b:07:22:32:5f:22:ff:fd:45:a8:b3:72:95:72:5e:bf:fe:
4b:2d:e8:b2:50:ea:2f:57:1c:d8:6d:63:b9:6f:ed:36:98:8c:
d5:5e:30:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:20 2025 by rpki-client