Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/M5DlHftx_DbbodyQEN9OQYDO4o0.roa
File: M5DlHftx_DbbodyQEN9OQYDO4o0.roa (raw, json)
Hash identifier: tHkcqx5ZLS7bIVzgWWr6qfVJY2OnM0Fvff+n0/FLo20=
Subject key identifier: 33:90:E5:1D:FB:71:FC:36:DB:A1:DC:90:10:DF:4E:41:80:CE:E2:8D
Certificate issuer: /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Certificate serial: 019242A12090D9D7D831C82BC032EFADF24D
Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/M5DlHftx_DbbodyQEN9OQYDO4o0.roa
Signing time: Mon 30 Sep 2024 11:11:48 +0000
ROA not before: Mon 30 Sep 2024 11:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204457
IP address blocks: 185.34.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 15:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:42:a1:20:90:d9:d7:d8:31:c8:2b:c0:32:ef:ad:f2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Validity
Not Before: Sep 30 11:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3390e51dfb71fc36dba1dc9010df4e4180cee28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5c:4c:88:95:30:0f:35:d8:8d:e4:ef:aa:dc:
9f:cd:a1:db:95:40:f3:ce:ee:f5:21:ac:04:e3:dc:
81:33:fe:2d:dd:0c:9f:c3:12:98:35:76:a9:6e:86:
9b:30:03:1a:04:c1:75:3e:f8:21:85:48:8a:8a:a2:
87:39:f6:20:e5:58:88:c2:ee:87:0d:6b:c8:dc:6b:
47:e5:a1:30:2b:43:98:22:8f:22:20:5e:a6:97:03:
bc:3c:22:6f:34:88:b4:07:8f:d1:ad:02:45:55:27:
00:e6:c1:ff:eb:c2:23:3c:d6:7b:c8:17:e6:75:b0:
22:83:1b:f1:29:53:bb:be:3e:b1:d1:bf:74:93:df:
00:6b:ee:88:72:35:f7:b2:08:ea:17:76:5f:ae:ff:
8c:0d:67:c3:33:21:fe:c4:05:a5:23:d1:38:3d:02:
9d:90:ba:b6:40:bc:ce:a5:c6:35:02:bd:09:fd:40:
c8:cf:48:cf:2b:ad:7f:1c:d2:2a:bb:0a:9a:cd:66:
e1:9c:12:74:bc:35:ce:9d:31:2e:6b:f6:ef:9a:6d:
9b:82:0d:7b:68:42:52:b4:31:7a:41:e7:5a:97:62:
80:4c:09:5e:ea:01:11:4b:97:26:de:50:59:89:ea:
16:18:8e:d7:81:e3:0a:d2:3e:ea:db:c9:35:e4:2a:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:90:E5:1D:FB:71:FC:36:DB:A1:DC:90:10:DF:4E:41:80:CE:E2:8D
X509v3 Authority Key Identifier:
keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/M5DlHftx_DbbodyQEN9OQYDO4o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.130.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:89:92:89:b7:56:d2:a8:f5:2a:f3:e6:2b:ed:2c:9f:35:71:
72:40:dc:ea:87:9d:51:a4:9c:59:50:b1:e7:e8:6e:3f:a4:b2:
96:2f:46:3c:90:d7:55:87:90:e8:cc:c1:dd:65:e4:8d:de:b4:
f8:ef:2a:af:8a:71:fa:b9:fa:44:b2:ac:70:dd:86:0f:ce:d5:
dc:7b:7e:04:96:40:f7:f2:ab:ba:ab:9d:11:ea:c9:84:dc:70:
9f:84:2e:cb:ff:62:52:dc:44:18:16:99:7a:51:90:d7:9d:73:
5a:3b:d6:de:19:dd:58:6f:e4:ba:cb:f1:3f:d6:76:85:5a:5a:
99:0a:33:bf:69:8f:e6:3f:c7:d1:4a:8a:19:e8:e8:51:09:5a:
a2:a7:c1:cf:af:ca:7e:ac:e2:88:d1:da:73:1c:fb:0b:51:a3:
8c:1a:1d:64:48:ce:18:16:d8:0e:b5:f5:ca:79:6d:95:9b:08:
4a:55:4c:a7:2b:37:b3:8a:ca:aa:05:50:97:0f:6b:fe:e3:95:
3e:0a:34:7e:1d:f8:d3:47:de:bb:19:7d:8d:4b:c5:9e:09:ff:
54:10:52:65:0c:0d:fd:f5:bf:32:68:d9:1f:d1:0f:0f:4b:2c:
ea:a0:8b:8a:c1:72:3b:80:92:74:9f:ed:13:1a:45:5d:2b:5d:
e5:c5:0b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:24 2025 by rpki-client