Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/EwOAipiMEPUFUQrPXuA3afSzbLg.roa
File: EwOAipiMEPUFUQrPXuA3afSzbLg.roa (raw, json)
Hash identifier: nJoP3QnR0ex5FeXzWtN6daduNE0gpGgliTW/4l5Fl+w=
Subject key identifier: 13:03:80:8A:98:8C:10:F5:05:51:0A:CF:5E:E0:37:69:F4:B3:6C:B8
Certificate issuer: /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial: 018CC870F0DAD254FC25ACFC8DCB597C73D5
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/EwOAipiMEPUFUQrPXuA3afSzbLg.roa
Signing time: Tue 02 Jan 2024 04:31:34 +0000
ROA not before: Tue 02 Jan 2024 04:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.185.77.0/24 maxlen: 24
185.185.78.0/24 maxlen: 24
5.180.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jul 2024 15:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:f0:da:d2:54:fc:25:ac:fc:8d:cb:59:7c:73:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Validity
Not Before: Jan 2 04:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1303808a988c10f505510acf5ee03769f4b36cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:fe:1b:d2:08:f9:b8:33:42:b0:0f:5a:2d:
f5:cd:c5:7f:ce:91:50:db:00:e3:cc:45:d2:73:ac:
69:a6:72:65:5f:2e:38:3e:94:87:5d:0f:15:41:c1:
6d:5f:90:f4:76:d1:6c:cd:ea:26:3b:fb:77:12:ec:
7f:4a:71:2c:e9:f2:b6:61:73:5c:0f:2c:ad:5c:c8:
45:63:6d:4d:c0:f0:d3:32:f3:2f:08:17:07:e2:f4:
96:3a:78:7e:ed:92:1b:d3:cc:34:f4:d2:6c:8e:8c:
d7:f9:a6:da:a6:ea:0d:24:c6:35:3d:4c:00:ee:84:
0a:b3:68:46:c9:89:ab:dc:34:25:cc:17:1b:9f:f0:
44:5e:4f:36:db:0b:38:c4:1d:13:3f:c5:57:aa:6c:
30:49:08:5d:c1:6e:5f:cd:fd:84:02:c1:cc:f7:8f:
4f:de:0f:0e:56:43:94:f3:ab:27:bd:03:c9:20:c6:
d4:1e:9a:e3:55:6e:c1:7e:47:a1:cd:eb:a2:09:45:
f6:04:0d:55:7d:bf:8c:cc:56:d7:ca:d8:e0:13:27:
df:91:e8:b3:84:10:ae:69:07:ce:3f:2e:5b:e7:7c:
91:c3:47:f2:8f:ae:83:6a:3e:04:ce:3c:90:33:d4:
77:11:fd:66:64:65:cd:0d:49:ee:4a:cd:44:70:7f:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:03:80:8A:98:8C:10:F5:05:51:0A:CF:5E:E0:37:69:F4:B3:6C:B8
X509v3 Authority Key Identifier:
keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/EwOAipiMEPUFUQrPXuA3afSzbLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.188.0/22
185.185.77.0-185.185.78.255
Signature Algorithm: sha256WithRSAEncryption
99:91:11:99:44:cb:ea:59:5e:44:74:78:2a:72:cb:d1:4e:0e:
99:7f:8a:0a:e9:72:17:11:f5:19:21:f8:a4:aa:5c:65:9e:17:
5c:29:54:84:b4:19:e4:95:b6:3c:2a:ea:1d:bc:27:5f:d8:b1:
ed:c9:73:a9:e4:0a:0b:46:89:cb:b7:cc:d2:95:16:51:42:3f:
5c:c0:e5:65:10:cf:97:55:02:84:80:74:63:ce:d0:2d:39:58:
36:a5:42:0d:8e:42:bd:9e:85:63:c2:5a:75:de:1b:28:f6:00:
b5:45:58:4a:b5:cc:bd:4a:c1:7a:40:d1:16:ec:61:63:2c:ca:
98:2a:7c:b7:4a:16:34:49:59:3f:40:bf:6b:e9:04:51:7f:57:
cf:c8:ed:33:f8:e3:bf:cd:a1:0a:5b:24:d9:f0:84:1c:6b:cb:
a7:7d:e9:30:5f:51:44:29:b7:8d:11:9a:ba:24:cc:b0:cc:14:
f9:2a:af:44:eb:06:62:bb:84:55:37:cb:4d:89:4a:a1:53:3b:
ed:fc:83:ca:42:8a:cf:dd:27:49:c4:8d:09:d0:77:f7:02:bb:
44:3e:f4:5a:d1:37:1f:b4:52:6c:29:33:ae:f8:2c:96:b9:1f:
e7:2f:ac:22:ac:20:4c:2f:50:6d:b3:fe:36:c2:5a:85:f9:ce:
c7:15:d2:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:03 2025 by rpki-client