Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/cuQ2lKX0hzozu1yhRextk7Nbg7w.roa
File: cuQ2lKX0hzozu1yhRextk7Nbg7w.roa (raw, json)
Hash identifier: sp3HCP2wRu+5s9bnjAohdT+SDka8Zo4W6woFA1GUVFo=
Subject key identifier: 72:E4:36:94:A5:F4:87:3A:33:BB:5C:A1:45:EC:6D:93:B3:5B:83:BC
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D66C72C8B1810C6D3DEB17A2F5456
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/cuQ2lKX0hzozu1yhRextk7Nbg7w.roa
Signing time: Mon 01 Jan 2024 00:29:58 +0000
ROA not before: Mon 01 Jan 2024 00:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202843
IP address blocks: 185.60.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:66:c7:2c:8b:18:10:c6:d3:de:b1:7a:2f:54:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72e43694a5f4873a33bb5ca145ec6d93b35b83bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4b:a4:53:06:ce:ca:a7:18:37:42:f0:ca:e3:
c5:15:be:12:39:2f:74:93:21:1e:e4:8e:c8:bd:8d:
6c:ff:ba:5e:85:8a:9e:f7:20:5b:81:d8:b5:09:da:
fb:b7:41:13:2d:fe:76:ed:dc:37:8a:be:1c:a6:cc:
3f:5f:58:16:2c:37:57:d2:ab:9e:b9:d4:a6:fa:dc:
52:2c:f1:a1:bf:6c:06:bc:c1:bc:16:10:dd:f4:d8:
8d:6c:f4:5c:f3:5e:35:47:fc:e5:f5:36:4a:55:5e:
2e:52:07:bc:b9:b0:16:5f:fb:51:41:01:f9:2d:a6:
6c:11:35:80:84:62:76:a6:46:c7:ab:38:28:d5:f4:
07:52:4d:af:48:b2:c4:72:e0:b6:44:2e:7d:30:b8:
f6:96:13:19:42:e9:63:b4:27:28:63:2c:03:d5:b7:
75:23:c0:7b:b1:a4:72:7b:08:5c:19:73:62:87:f4:
dc:8a:95:8b:10:bf:21:06:de:c5:8b:13:f5:7a:9a:
e6:09:d0:39:95:dc:2e:65:f6:6e:19:48:30:6b:13:
d4:f7:65:13:da:61:e8:33:0e:ac:e9:99:90:83:0c:
58:1f:df:6e:1f:07:3c:75:9c:57:88:3f:a2:00:71:
06:e4:88:9c:94:0c:96:09:3b:bd:5b:69:15:36:d2:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E4:36:94:A5:F4:87:3A:33:BB:5C:A1:45:EC:6D:93:B3:5B:83:BC
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/cuQ2lKX0hzozu1yhRextk7Nbg7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.64.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9a:3e:a6:92:c6:68:12:59:cd:75:56:21:1d:5b:8f:75:7a:
7a:01:52:c6:9d:04:c6:5a:54:22:11:42:1c:5e:69:8f:09:1d:
50:2f:b3:83:29:dd:8d:4d:1d:2c:ea:90:f6:d5:ea:f5:2c:02:
7f:4c:b2:a2:ae:da:d0:d6:a5:f7:17:1a:d0:8c:37:1d:6b:8f:
44:25:e1:a6:a2:15:6f:32:ca:7d:0e:b6:0c:dc:fb:a3:40:b7:
89:f8:c9:80:5e:ce:f5:93:50:f2:20:37:96:5a:f4:79:70:67:
19:62:0d:96:11:45:75:b4:d2:fa:1a:f8:e5:e3:46:68:09:10:
5b:75:69:77:aa:87:06:03:a6:8d:71:64:57:4f:60:ca:53:dd:
2a:93:79:9e:f6:2c:d8:48:20:0c:e7:c4:d3:e2:c1:5d:91:dd:
46:20:41:73:dd:d3:1d:8d:df:e4:42:d9:d5:3a:34:69:4f:36:
1f:87:d1:8c:b0:d4:bb:d8:0b:b9:e0:5a:5a:7f:ce:f1:63:da:
d8:81:30:78:75:11:d3:08:b7:6b:a6:31:25:db:9e:34:a6:97:
6d:dc:40:58:c8:2e:a9:02:0a:31:33:9c:89:dd:b0:77:e7:0c:
42:43:2b:ab:5f:58:41:d3:00:9a:75:3f:91:e4:75:2a:04:21:
9c:d3:a8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:15 2025 by rpki-client