Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/aE73chsoBaQ9bz7syJixnr0O5yM.roa
File: aE73chsoBaQ9bz7syJixnr0O5yM.roa (raw, json)
Hash identifier: l9Bebbi1StbJSSHLAt4//a6G8l6TH5xD/Kuiqd3diAU=
Subject key identifier: 68:4E:F7:72:1B:28:05:A4:3D:6F:3E:EC:C8:98:B1:9E:BD:0E:E7:23
Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial: 0194AE6D9C97983AE790DB346C03CEA716BD
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/aE73chsoBaQ9bz7syJixnr0O5yM.roa
Signing time: Tue 28 Jan 2025 19:40:06 +0000
ROA not before: Tue 28 Jan 2025 19:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207024
IP address blocks: 185.79.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 14:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ae:6d:9c:97:98:3a:e7:90:db:34:6c:03:ce:a7:16:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Validity
Not Before: Jan 28 19:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=684ef7721b2805a43d6f3eecc898b19ebd0ee723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:45:e9:0f:bc:3b:f5:2b:f0:b0:aa:60:da:
b6:d6:45:23:01:c3:da:a0:b1:0b:8a:88:c5:d2:0a:
7f:fe:64:c9:2b:01:9e:52:8e:fb:a7:a7:90:c0:dc:
f6:d7:26:6f:4f:f7:f9:0c:a2:07:8e:3f:03:d5:e4:
24:08:da:b1:f7:7d:41:7f:cd:3b:fb:79:de:cf:61:
17:67:62:5f:af:29:33:23:d9:85:83:e7:a3:85:6c:
98:0b:54:32:78:56:a9:28:07:12:b9:51:dd:c4:f6:
44:ef:97:aa:9b:88:d8:10:ed:49:6e:95:ee:ab:ae:
4c:82:2b:52:05:93:bc:04:23:b6:ea:fb:df:f5:05:
5c:1a:7a:10:ff:9b:e6:1f:38:9d:8b:7d:93:9d:77:
1f:64:83:67:4e:31:58:97:f2:fe:3e:e1:55:0e:bc:
01:c4:14:7e:c8:88:54:0b:91:50:38:95:09:3b:f7:
b2:e3:43:39:0f:35:ab:0d:61:20:1f:21:df:37:60:
71:3c:c7:87:5a:d5:fc:4a:48:2f:51:2e:9e:c9:7f:
34:5f:7c:c8:cf:1b:b6:e7:97:25:96:75:a8:44:3b:
9a:fa:5b:0f:ea:55:1a:62:5f:61:96:29:23:e8:d5:
9a:f0:c2:6f:e6:fb:32:3b:7a:f7:70:0a:61:7a:0c:
0f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4E:F7:72:1B:28:05:A4:3D:6F:3E:EC:C8:98:B1:9E:BD:0E:E7:23
X509v3 Authority Key Identifier:
keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/aE73chsoBaQ9bz7syJixnr0O5yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.12.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ec:5d:c9:49:6f:ee:e0:78:3b:dd:6d:c1:af:56:68:8a:a8:
60:1b:34:50:25:c8:f9:a2:12:46:18:6b:5e:ce:e8:b9:6c:cb:
4a:99:09:d1:fe:44:68:37:12:96:90:27:2d:3f:5e:4b:7e:e7:
72:39:7f:0f:cc:05:62:39:be:dc:c6:50:6b:c9:7d:8d:d8:4f:
59:f0:9e:2e:fa:46:d1:b4:66:dc:ab:50:33:97:34:cf:a4:d0:
9c:75:a0:b4:5f:8f:7a:37:04:41:5c:86:6d:e4:dc:0f:80:e1:
28:5c:83:37:68:57:e7:03:0d:17:c6:29:f3:d9:ce:d4:53:dc:
d8:6c:59:49:6b:01:6c:d5:28:83:e4:18:56:79:db:5f:c3:12:
f2:20:83:cb:ab:30:e4:ea:cd:f0:58:ac:56:e7:c3:17:3e:35:
93:4f:fc:5e:6b:d4:b5:01:ed:0d:c0:4b:a2:9b:0e:9d:eb:9b:
a2:27:2f:91:d5:88:6e:e4:b2:bc:33:d3:d5:c1:22:9d:20:73:
cd:c0:06:f3:44:3f:a3:d2:41:6f:57:7d:dc:04:ae:e8:0d:1e:
3d:9e:6e:5c:48:f4:eb:92:2d:d1:6e:f3:28:dd:6d:63:97:f8:
ea:d6:75:12:1f:2d:7c:0d:90:ff:84:57:b9:b8:ed:8e:19:88:
82:78:a8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:53:00 2025 by rpki-client