Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/jXWFdlYX9sPvuIWoV3uuCglqv90.roa
File: jXWFdlYX9sPvuIWoV3uuCglqv90.roa (raw, json)
Hash identifier: Z8plA067F30P1XlqVItbP9PxmtkVT3bNFcg1I2JmYdI=
Subject key identifier: 8D:75:85:76:56:17:F6:C3:EF:B8:85:A8:57:7B:AE:0A:09:6A:BF:DD
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 018CC8016D9AF725628046665B7423268212
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/jXWFdlYX9sPvuIWoV3uuCglqv90.roa
Signing time: Tue 02 Jan 2024 02:29:45 +0000
ROA not before: Tue 02 Jan 2024 02:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59542
IP address blocks: 193.173.196.0/24 maxlen: 24
145.7.49.0/24 maxlen: 24
145.7.56.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:6d:9a:f7:25:62:80:46:66:5b:74:23:26:82:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 2 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d7585765617f6c3efb885a8577bae0a096abfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:bf:aa:40:94:e7:a2:23:29:80:10:96:e1:
a6:2d:50:75:3e:eb:4f:f1:9c:eb:30:b5:9d:01:2b:
30:30:5c:38:61:9a:48:52:8d:c3:92:de:e7:dd:7c:
73:84:f9:89:63:ed:e0:20:a9:6a:00:1d:8d:83:b9:
cc:0d:03:d4:23:4b:26:b8:cd:6b:cb:f4:d3:55:9f:
28:57:0a:0a:29:1a:05:16:70:ae:8a:18:c6:2c:71:
6c:0f:c5:8e:b1:d2:69:8b:61:aa:9e:22:76:97:a6:
e6:e7:a6:35:44:99:a1:7f:50:ff:03:3e:35:11:1c:
4f:42:41:e5:63:37:75:28:d2:fe:c5:03:7a:4a:f7:
0a:5c:e6:6b:5d:da:b3:fc:52:4c:09:d2:2e:60:66:
ea:85:66:46:3b:e1:ff:05:21:31:69:78:6d:0b:75:
7c:a2:67:6b:90:e2:e6:5c:19:1d:00:65:50:a0:e6:
79:fb:5e:01:64:85:2d:8c:db:e5:74:9b:d1:f1:72:
2e:bf:7d:f1:ae:28:b5:10:e8:03:6f:17:92:70:74:
15:b2:9f:e2:69:b1:44:fe:62:f4:cc:ce:aa:90:28:
bd:9d:83:4a:d4:3d:f8:b6:ad:ad:df:04:b5:27:e4:
3a:87:4e:01:54:5a:e9:ea:14:27:60:1b:1b:61:7e:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:75:85:76:56:17:F6:C3:EF:B8:85:A8:57:7B:AE:0A:09:6A:BF:DD
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/jXWFdlYX9sPvuIWoV3uuCglqv90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.7.49.0/24
145.7.56.0/21
193.173.196.0/24
Signature Algorithm: sha256WithRSAEncryption
22:1b:b4:fe:bc:07:e1:c7:6e:56:a6:28:35:78:35:c2:eb:d4:
d7:2e:61:75:ad:54:d0:08:24:da:69:f6:7f:72:36:e6:d5:f0:
b8:20:63:6d:a2:7d:70:e3:bb:bc:40:5d:43:ca:ae:1f:4b:e0:
19:b4:b0:ed:f3:e4:84:f7:bc:c9:8e:8d:3f:2e:b9:8d:30:f1:
1a:29:20:33:b1:88:36:dd:48:61:eb:da:a5:35:e9:30:dd:1b:
22:aa:06:46:44:93:5b:c1:6c:aa:9b:5b:d0:b6:46:5d:11:8f:
99:1b:f3:ee:fe:52:1a:55:c7:b4:d5:87:fa:11:dc:2e:25:86:
48:1a:d0:a6:fc:29:a1:2c:57:7b:66:fd:e2:f9:86:3c:67:c8:
4a:4e:c5:a2:1e:3e:0e:b3:43:90:f6:93:72:82:a9:4f:3e:6e:
56:d4:f5:37:f7:49:c5:6a:26:ed:13:e3:87:aa:4d:98:1b:6c:
ed:88:0a:88:c6:8a:14:52:60:99:2f:92:9c:1f:03:20:f9:e7:
56:3e:ca:8a:b9:37:17:d4:05:3d:e0:64:af:21:d6:b2:f8:31:
a3:3c:3a:e7:ff:22:c8:dc:24:9a:88:61:47:9b:08:f3:e6:69:
29:8d:e9:a0:ec:ff:8e:68:97:bd:d9:53:09:44:97:7a:b9:44:
74:33:bb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:45 2025 by rpki-client