Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/5bIxkTT4ZuVKHmsUf2LjqOCQ8cM.roa
File: 5bIxkTT4ZuVKHmsUf2LjqOCQ8cM.roa (raw, json)
Hash identifier: r5XUfzzHcur/gnxXxGhTGluWLHJHqVgpbyQJEnNA4VE=
Subject key identifier: E5:B2:31:91:34:F8:66:E5:4A:1E:6B:14:7F:62:E3:A8:E0:90:F1:C3
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 018CCA29C1D96E70291065C16B49B88119E6
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/5bIxkTT4ZuVKHmsUf2LjqOCQ8cM.roa
Signing time: Tue 02 Jan 2024 12:33:03 +0000
ROA not before: Tue 02 Jan 2024 12:33:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60785
IP address blocks: 185.25.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c1:d9:6e:70:29:10:65:c1:6b:49:b8:81:19:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Jan 2 12:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5b2319134f866e54a1e6b147f62e3a8e090f1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:68:8b:59:66:eb:58:58:e3:9b:85:19:cb:97:
58:2f:18:22:e0:5a:c6:d1:b5:9d:1a:0c:eb:91:91:
26:b0:62:db:78:99:82:cb:4a:91:b7:e9:27:ed:40:
6c:5f:a4:c2:74:06:80:5b:b1:01:3f:3b:87:18:1a:
48:ae:3a:ed:94:11:b8:63:de:85:5b:0d:c3:bc:ea:
38:70:d4:a2:49:2d:c5:12:4f:1a:3c:d8:d2:f7:87:
34:39:35:7c:36:b6:f6:2e:9f:73:d1:33:41:20:27:
a5:77:ad:16:cc:d4:34:0a:8c:07:5e:50:4a:48:e9:
c8:d3:0d:6c:6f:da:4b:68:2c:6f:cf:4e:ec:2f:4a:
8f:75:4b:51:fa:6a:41:2f:50:6a:29:57:fb:ea:60:
70:30:24:18:9c:c4:e7:80:3f:c5:02:46:95:47:24:
c4:f1:7c:0b:db:7d:a5:36:03:a3:b5:5d:0b:59:b4:
0f:d0:f0:ee:c5:48:73:b3:61:6b:c8:f6:7e:21:62:
9e:97:f1:fe:1d:a9:bb:e6:05:da:23:1e:4d:24:8e:
bf:38:f9:2f:98:46:76:df:74:f5:eb:d3:8b:77:ea:
f2:00:7e:d7:02:c1:41:b1:d4:c2:de:5f:0f:3b:b8:
d3:18:e7:9d:ea:6c:7c:54:22:70:0e:06:08:93:14:
9a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B2:31:91:34:F8:66:E5:4A:1E:6B:14:7F:62:E3:A8:E0:90:F1:C3
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/5bIxkTT4ZuVKHmsUf2LjqOCQ8cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.224.0/22
Signature Algorithm: sha256WithRSAEncryption
16:54:9d:ba:2a:aa:62:ed:bd:b3:c8:e4:8c:7d:26:86:a6:69:
70:21:44:cd:2c:b2:20:8a:f6:b6:93:dd:9e:dc:f4:da:e7:d2:
b8:25:9e:67:b8:64:2e:7e:17:02:14:c4:bd:a1:b3:53:f8:f3:
46:3d:5d:f0:af:a3:10:a0:de:ca:72:d3:fe:1b:ab:7b:39:b7:
f3:28:79:92:6b:c8:a8:9a:75:64:79:fc:c3:e7:a3:87:21:7d:
4b:99:a9:4a:23:cc:b5:16:12:2f:d3:b4:ed:71:14:59:7c:e7:
5e:c1:cb:97:d2:a5:ea:4f:29:c8:8c:a0:18:9a:bc:33:a5:c6:
d4:67:44:a1:8a:5e:7a:a8:e3:9a:cb:89:40:6d:79:7c:68:7f:
a8:ce:dc:16:35:04:fa:88:e2:1f:a7:0c:65:f4:51:f8:c3:b0:
04:b4:40:70:90:af:59:ab:94:41:d8:24:ba:e1:19:89:27:5f:
11:09:a2:db:a0:c2:32:f1:6a:d5:43:54:74:89:f7:eb:28:e6:
49:06:3e:d1:dd:30:c9:f7:86:57:43:21:ef:d1:8d:19:cd:6d:
54:67:f5:3f:66:c6:8d:6b:e6:ec:5f:d9:e7:9f:37:ac:8c:7c:
12:3e:0d:8b:6d:e2:d0:1d:c2:b3:11:ef:4b:cb:f8:40:4f:d4:
17:b9:15:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:26 2025 by rpki-client