Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VoVrromQto6IIixcjvuGDvuTgjo.roa
File: VoVrromQto6IIixcjvuGDvuTgjo.roa (raw, json)
Hash identifier: L+L4OUhYYy8u4Ri2dLNeFOLG/RDPtHnNzuyNUnEzpCs=
Subject key identifier: 56:85:6B:AE:89:90:B6:8E:88:22:2C:5C:8E:FB:86:0E:FB:93:82:3A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193AA571162FF6B38AD73DA1F3919D538C4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VoVrromQto6IIixcjvuGDvuTgjo.roa
Signing time: Mon 09 Dec 2024 07:34:12 +0000
ROA not before: Mon 09 Dec 2024 07:34:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 185.155.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:57:11:62:ff:6b:38:ad:73:da:1f:39:19:d5:38:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 9 07:34:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56856bae8990b68e88222c5c8efb860efb93823a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:db:c6:e2:48:eb:62:15:2c:f2:49:4f:cd:
f9:ea:1b:90:46:48:75:f3:08:33:b2:ad:03:b1:e8:
e7:45:5b:69:00:0a:c6:5a:11:ab:d7:bc:a7:90:76:
52:e1:6e:35:81:fb:db:d2:8f:ef:af:2b:0d:68:cf:
22:51:dd:10:68:62:a6:3b:76:29:55:d1:87:ab:53:
d6:2b:d8:57:a6:58:07:2a:3f:ad:b5:dd:7b:2f:ee:
1c:a4:56:8f:5b:cf:b0:e0:be:7c:f0:a6:6b:8b:e0:
77:04:5f:5d:91:6c:a2:59:9a:5f:be:ce:21:7c:2e:
0e:45:db:f7:2d:af:ba:7f:9f:6c:d5:95:5b:81:e4:
1d:23:ef:ff:31:1e:8a:31:55:0b:f3:3f:3f:7d:49:
e9:7f:c6:7a:8f:75:ba:7a:fb:80:1d:20:5c:d4:a2:
85:cd:ef:f8:9c:f4:ca:d4:dd:7f:8b:52:03:19:08:
fa:42:33:0a:c5:ad:5a:a5:6b:6c:3a:5c:82:e5:5a:
94:4d:aa:bf:97:6e:86:0a:a4:1f:29:93:9b:6a:bf:
8b:6c:ba:3e:4a:b3:df:78:24:85:3c:30:9d:75:ae:
b6:53:5d:05:7d:37:6d:2a:c6:05:dd:7a:de:cd:7c:
5b:c7:d7:4e:a0:82:87:e1:6a:39:9d:c4:46:ab:62:
d1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:85:6B:AE:89:90:B6:8E:88:22:2C:5C:8E:FB:86:0E:FB:93:82:3A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VoVrromQto6IIixcjvuGDvuTgjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:c3:f4:c2:7b:e1:98:a7:ae:66:00:c2:65:5c:fc:d3:d2:12:
0f:71:99:41:d6:81:fa:33:68:67:dd:c5:ec:e4:ce:e7:e0:b6:
80:03:57:84:8e:78:45:8a:c6:20:57:32:5b:ee:0d:6f:bb:55:
ad:f5:58:74:d1:6f:88:ad:81:37:30:17:e3:bf:9e:7f:dd:da:
ba:2a:62:27:64:c4:04:60:57:1e:26:97:79:b9:fa:c9:b0:39:
fa:46:3d:61:c1:51:f5:bf:a3:84:9d:a5:18:59:96:db:e9:5a:
cd:f3:1d:5f:30:30:84:fc:2e:e3:d4:13:22:d3:57:51:ff:e9:
19:53:a7:fc:78:16:27:42:7c:a2:47:0e:a6:c0:7e:18:aa:c6:
38:a7:5a:a4:0c:e1:80:80:4a:29:df:4c:2c:65:95:20:3d:53:
34:45:40:19:39:70:a9:f1:4a:e5:a7:d7:22:83:71:06:86:17:
7a:c8:a8:5f:01:26:00:f8:b9:ca:96:7c:ee:71:3c:37:31:3e:
4e:6f:18:34:0d:df:5c:4c:06:6e:c9:a6:4a:28:3c:4d:58:e2:
70:ec:05:d8:41:75:5a:b0:ce:43:e2:e3:3b:a6:d5:e5:4f:1c:
4c:9f:9b:8e:3e:9c:80:08:f0:44:df:95:c0:fa:01:04:97:ca:
ce:37:20:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:59 2025 by rpki-client