Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/eFatOuN3z7w5u-bMANrkAkWJ-Xc.roa
File: eFatOuN3z7w5u-bMANrkAkWJ-Xc.roa (raw, json)
Hash identifier: 37OpkZc/M6pNcBk58mBIXdf2PnfT/euE/jdH8vV6fm4=
Subject key identifier: 78:56:AD:3A:E3:77:CF:BC:39:BB:E6:CC:00:DA:E4:02:45:89:F9:77
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 0193B58092668E4A36937A949EA27BC7A326
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/eFatOuN3z7w5u-bMANrkAkWJ-Xc.roa
Signing time: Wed 11 Dec 2024 11:35:22 +0000
ROA not before: Wed 11 Dec 2024 11:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34380
IP address blocks: 185.162.148.0/22 maxlen: 24
185.162.148.0/24 maxlen: 24
185.162.149.0/24 maxlen: 24
185.162.150.0/24 maxlen: 24
185.162.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:80:92:66:8e:4a:36:93:7a:94:9e:a2:7b:c7:a3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Dec 11 11:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7856ad3ae377cfbc39bbe6cc00dae4024589f977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:b6:95:fd:83:7b:08:e4:f1:6c:fe:c9:e7:
2b:36:90:8c:e0:68:af:76:c6:fa:04:8c:eb:56:c5:
6e:70:4a:e3:9d:b5:c8:10:58:06:3e:57:fe:78:2b:
3c:ba:dd:49:3a:f5:42:1b:6d:16:87:06:e5:b7:47:
04:52:9d:52:b6:9d:7f:80:b0:c1:fa:fa:54:74:6e:
8e:2b:c7:64:76:73:f1:52:c4:a9:df:e3:65:cd:ca:
39:f6:b4:78:c2:44:ba:e2:2b:4d:64:0a:c6:cc:f2:
b1:4d:a2:c4:87:85:ee:3f:98:5d:b2:35:2d:da:fa:
33:ca:2d:cc:7b:f7:28:e7:1a:c1:87:bc:e4:0e:7f:
be:67:23:af:df:14:a3:a7:dc:66:ed:21:9c:17:b7:
fe:56:5b:e3:d0:5b:8d:0a:e1:ce:24:0d:af:df:09:
16:9d:3d:2d:7f:3a:cf:81:f4:25:e7:fa:53:78:93:
39:44:9b:52:4f:3f:aa:0d:f2:49:d2:92:1a:bc:24:
10:08:1a:2c:91:b1:76:42:ff:cd:86:27:47:dc:cf:
c9:08:bc:3d:af:26:61:b3:dd:61:d3:eb:8a:58:ce:
b0:3d:95:76:a0:a5:6f:5e:3f:e4:37:fd:af:8f:26:
dd:ea:89:8f:16:d9:43:b3:a5:df:bb:f3:7d:65:52:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:56:AD:3A:E3:77:CF:BC:39:BB:E6:CC:00:DA:E4:02:45:89:F9:77
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/eFatOuN3z7w5u-bMANrkAkWJ-Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:eb:83:2a:c7:c1:76:1b:68:74:11:d6:20:dc:62:7f:97:da:
e0:6c:53:7a:5e:db:58:22:72:5f:98:f7:d8:df:fd:b8:45:0d:
57:33:d5:bd:0a:35:02:6b:b1:99:d6:8e:35:18:f4:de:9e:9b:
d8:da:97:e5:f1:72:40:f5:ef:1c:2e:03:df:18:a8:e4:a1:ae:
d5:d5:a9:8b:d6:12:04:56:a4:50:68:5e:c9:44:e5:b9:c9:f9:
5e:4d:ab:50:0e:65:a9:a4:55:10:9b:91:4c:43:c5:70:90:46:
3b:dd:e3:40:3d:e4:92:8b:63:c1:b1:6a:6c:c7:99:2c:29:0b:
de:9e:24:b2:b8:8b:54:a5:25:b7:b6:7a:2e:1f:1e:87:0b:2c:
08:9f:ac:f7:63:55:b9:4d:56:24:d4:54:bd:e5:f9:df:ba:d4:
1f:28:73:19:b4:2d:dc:43:d6:d3:83:f3:04:9b:23:04:56:c1:
6a:c7:85:d6:a1:27:55:76:a0:1e:9f:ce:24:59:7b:e2:73:f1:
e4:05:63:dd:cc:55:d1:99:34:4b:3a:a1:28:43:97:e8:91:0e:
2d:6d:c3:61:3a:38:57:03:b4:bf:7b:e0:43:42:ea:37:16:1b:
90:7b:4f:ba:16:d4:f5:95:5c:32:ff:de:0f:f2:aa:8f:14:2b:
ac:b4:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:32:17 2025 by rpki-client