Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/_NmPzW6RdI9nyrcuLO6XJ63ofag.roa
File: _NmPzW6RdI9nyrcuLO6XJ63ofag.roa (raw, json)
Hash identifier: UABiZL0U+ydkcfAi+Uq3xpIPRcdxGLCJ/5NxJC9s9U4=
Subject key identifier: FC:D9:8F:CD:6E:91:74:8F:67:CA:B7:2E:2C:EE:97:27:AD:E8:7D:A8
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 018CC3490C83DBFF52C077177B5CAA45E5D1
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/_NmPzW6RdI9nyrcuLO6XJ63ofag.roa
Signing time: Mon 01 Jan 2024 04:29:53 +0000
ROA not before: Mon 01 Jan 2024 04:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204154
IP address blocks: 185.50.75.0/24 maxlen: 24
185.50.73.0/24 maxlen: 24
185.50.74.0/24 maxlen: 24
185.50.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jan 2024 09:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:0c:83:db:ff:52:c0:77:17:7b:5c:aa:45:e5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jan 1 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcd98fcd6e91748f67cab72e2cee9727ade87da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:2b:74:25:e2:89:13:db:c1:50:b2:55:2e:
1d:96:5e:87:54:65:e8:26:99:b4:8b:a1:97:96:bb:
cd:62:95:04:0b:4b:de:d6:7a:44:7f:88:4c:8f:47:
a0:d6:d3:2b:97:35:ea:79:4d:1a:e9:70:d0:d6:ed:
ec:ba:91:4d:26:11:a5:74:af:b7:ea:93:26:8f:0a:
10:44:5a:bc:47:f7:c0:ee:c2:38:dd:1e:d5:56:d0:
48:ca:80:b4:96:d8:f1:f0:0b:00:d4:65:74:e4:8f:
2f:2a:74:52:c6:1b:6f:4e:bf:8a:26:63:c8:9f:65:
29:af:ef:0d:94:c8:e7:6f:83:20:c1:e2:22:8a:4d:
82:07:e7:b0:a5:dd:ff:dd:02:fe:dc:39:42:ee:86:
28:96:6c:2f:0c:8b:f2:b1:a9:97:90:b3:c9:0d:b8:
12:df:8e:99:82:4c:65:6c:16:24:2c:20:40:35:78:
b8:db:a8:d4:c5:f7:16:31:a2:66:4f:ea:6f:a6:e0:
c1:ff:6e:58:cd:74:35:b6:a5:0e:72:f3:ef:c0:f6:
b3:cc:05:58:61:71:a0:8b:b7:2b:08:aa:ab:2c:66:
4e:8e:1a:80:ef:f5:18:8a:11:d8:b6:53:e5:ff:a1:
72:6f:43:38:ff:56:c0:db:b8:3b:ea:34:8b:3f:ff:
89:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D9:8F:CD:6E:91:74:8F:67:CA:B7:2E:2C:EE:97:27:AD:E8:7D:A8
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/_NmPzW6RdI9nyrcuLO6XJ63ofag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.72.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:5f:34:9e:ae:fa:db:50:40:d1:6b:76:a7:06:a5:94:b1:e4:
1c:a9:44:0b:4a:d7:01:65:6d:2d:e8:33:26:7f:1c:81:24:09:
c4:18:07:ad:60:b0:3a:e4:64:97:19:70:ac:15:6b:4d:d1:31:
86:d8:24:59:19:9c:a1:9e:38:6d:56:85:75:4f:44:b3:48:d6:
03:a3:ac:ca:10:b6:b5:6f:b0:cb:dc:5e:4c:f0:43:80:e6:c1:
37:88:75:1c:18:f8:d0:0c:64:b1:a3:32:47:91:bf:1e:78:a8:
29:ba:75:8e:b0:e9:e1:22:15:b0:27:6d:f6:a1:6f:fd:98:38:
ba:82:4a:b1:a9:f1:c4:a1:39:05:fd:a1:75:d4:3c:04:4f:aa:
15:93:4a:0d:5c:15:b7:1c:96:7c:f4:64:c9:b8:de:a3:25:c4:
1f:21:8c:6a:2d:36:59:3f:90:93:05:bb:58:5e:fd:b1:7c:f6:
0b:af:9b:79:df:57:27:b2:54:eb:ed:3a:a3:4b:dd:41:04:79:
4c:53:bf:3d:09:e7:35:42:03:e7:51:47:dd:f7:bd:fb:6b:8c:
6d:5c:fa:d1:07:d2:5f:3e:e2:02:a3:f6:a1:c3:94:36:8e:49:
fa:e1:47:40:d7:1a:d4:b4:c1:00:cc:38:f4:40:2f:5c:47:fa:
78:38:3a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:06 2025 by rpki-client