Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/4_HlJ-f3qxs6jGBXa2oV-KoKH6I.roa
File: 4_HlJ-f3qxs6jGBXa2oV-KoKH6I.roa (raw, json)
Hash identifier: WnDVEMDKOXTWW62MR/Sd1Ct6F5Uq6BiC7YueJGQ/xPA=
Subject key identifier: E3:F1:E5:27:E7:F7:AB:1B:3A:8C:60:57:6B:6A:15:F8:AA:0A:1F:A2
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 0194420740683B0E35593F1E17F347F097D2
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/4_HlJ-f3qxs6jGBXa2oV-KoKH6I.roa
Signing time: Tue 07 Jan 2025 18:29:19 +0000
ROA not before: Tue 07 Jan 2025 18:29:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41327
IP address blocks: 5.183.110.0/24 maxlen: 24
185.198.210.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 08:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:42:07:40:68:3b:0e:35:59:3f:1e:17:f3:47:f0:97:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Jan 7 18:29:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3f1e527e7f7ab1b3a8c60576b6a15f8aa0a1fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:fc:67:c0:af:fe:cf:e4:da:83:31:2a:1b:
b0:e5:6d:9a:71:a1:7c:f0:77:06:71:b1:bc:72:2d:
3f:85:8d:c7:8a:41:96:32:7d:15:0e:7c:1b:10:83:
13:07:ae:75:a9:57:87:4b:f9:ab:9c:29:65:e8:40:
93:ac:d8:38:73:4b:9b:93:6b:ef:67:12:48:9d:b4:
18:91:ee:ba:33:bc:22:68:eb:7a:b8:67:9f:8d:42:
11:cc:ab:54:4c:58:d0:19:67:0c:c2:ec:3f:ac:f4:
38:2d:94:32:f4:f6:0f:8c:56:66:8a:e3:f9:88:de:
17:3e:31:b6:0b:0e:11:06:f9:ed:87:73:c9:69:62:
fd:59:51:53:b0:1b:0a:17:08:1a:79:bd:44:e4:fb:
50:76:38:49:60:f0:55:c2:3a:e8:d9:9d:93:31:78:
b7:cf:4a:fe:ab:9d:7e:90:79:79:ce:2a:64:5e:14:
22:86:19:d8:eb:d3:62:81:42:15:ee:ba:d7:90:a7:
13:a7:50:b0:28:7f:23:15:81:03:b5:ff:e3:3b:8b:
ec:8e:a8:be:94:ce:36:98:75:0e:f8:c7:33:60:b7:
d7:38:8a:a7:8c:dc:3a:f7:a2:cb:f4:55:38:ec:8a:
a1:5b:88:f5:ae:bc:1c:a4:77:ae:bf:eb:4e:06:7a:
02:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F1:E5:27:E7:F7:AB:1B:3A:8C:60:57:6B:6A:15:F8:AA:0A:1F:A2
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/4_HlJ-f3qxs6jGBXa2oV-KoKH6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.110.0/24
185.198.210.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:6f:dd:35:d2:d2:2b:7c:82:8d:c6:6f:54:54:28:c0:56:2e:
5c:bb:70:71:78:55:93:74:9a:bc:42:dc:de:52:08:91:d8:e4:
f9:39:8f:d2:04:c0:96:d3:fc:47:62:e5:c3:0e:66:2a:ee:9b:
68:82:8c:f3:f6:b2:15:e5:5d:b7:32:95:e3:97:b7:7f:38:6c:
d5:05:07:50:49:f5:93:66:0e:bf:94:59:36:8f:6b:f5:7e:b0:
2d:19:98:52:4b:f5:e8:d5:21:47:96:e0:e2:97:e2:da:79:14:
53:e8:0d:a6:3b:5b:0e:7e:77:56:8a:9c:92:ab:1c:22:6e:d2:
2d:19:4c:98:23:97:aa:a0:d3:8a:fe:cf:69:61:73:1e:ae:6f:
1a:a1:e8:bb:78:6c:9a:71:bd:51:a7:93:66:34:46:d0:8b:4a:
d7:58:32:b7:2a:ee:5f:5d:09:84:8e:de:3d:ca:34:9d:45:32:
2d:cc:f5:b8:ff:73:18:1e:7b:35:2f:7e:a9:66:a0:42:ee:77:
0e:1d:ee:1f:40:45:9a:91:c3:a7:93:ba:0a:82:ae:cf:3b:3d:
7e:3d:4b:74:6c:d9:bb:d3:cb:f2:0d:95:f2:b3:e9:f7:ca:0f:
ae:f7:fd:d5:5e:ba:04:2b:6e:c0:ca:2f:f1:c0:60:fd:ca:70:
27:5b:c9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:14:05 2025 by rpki-client