Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/dzc9c1bV1t3yIgLLDd6XwMk8U3o.roa
File: dzc9c1bV1t3yIgLLDd6XwMk8U3o.roa (raw, json)
Hash identifier: Rg0ozvWn+eY1mk3HFE3dkPjFkdRdKk+WeULNQ9x2dRQ=
Subject key identifier: 77:37:3D:73:56:D5:D6:DD:F2:22:02:CB:0D:DE:97:C0:C9:3C:53:7A
Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial: 018CC94E705B591E3A18C699031C4FC74C3A
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/dzc9c1bV1t3yIgLLDd6XwMk8U3o.roa
Signing time: Tue 02 Jan 2024 08:33:30 +0000
ROA not before: Tue 02 Jan 2024 08:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 185.130.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:70:5b:59:1e:3a:18:c6:99:03:1c:4f:c7:4c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Validity
Not Before: Jan 2 08:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77373d7356d5d6ddf22202cb0dde97c0c93c537a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:a6:5c:66:81:06:e2:4f:ae:c7:20:62:8f:
08:01:08:bb:08:02:03:e9:37:13:4e:22:33:49:c4:
39:9f:ba:a8:bb:7c:0d:2a:c7:45:5f:7d:2f:35:7d:
1e:18:0d:cb:0e:d3:50:8c:e4:e0:dc:26:81:a9:7a:
4a:9f:ae:2d:1f:50:71:5a:3e:ee:01:5d:ac:eb:82:
0c:d7:da:d7:da:63:eb:53:e0:04:89:bf:33:60:ae:
cc:94:0c:cd:ae:90:4d:fe:5a:d1:50:01:cb:d5:dd:
8c:82:9b:22:92:6b:15:02:db:bd:2c:f3:61:80:91:
3e:1e:db:df:c9:4b:ab:e9:f0:72:05:9f:b4:8c:e6:
7d:6d:5b:b2:38:52:25:e5:4a:ca:0c:30:f6:8d:17:
25:63:2d:b0:26:33:30:59:f1:ea:a4:c8:96:7c:c5:
7b:52:0b:77:8a:bb:8f:4a:9b:bb:87:0e:31:c0:4f:
e9:65:da:f0:6f:57:b4:e9:04:5e:2c:32:a8:67:58:
b0:53:cf:2e:f8:a6:54:61:f8:d0:21:f4:54:39:5e:
6e:26:39:e5:6e:e8:62:fa:31:a0:55:99:d9:2b:2e:
7e:45:ce:48:8c:f7:9b:6f:7b:81:47:21:83:79:ea:
ea:cf:bd:8b:94:14:70:cd:f1:38:89:57:64:9d:2f:
c8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:37:3D:73:56:D5:D6:DD:F2:22:02:CB:0D:DE:97:C0:C9:3C:53:7A
X509v3 Authority Key Identifier:
keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/dzc9c1bV1t3yIgLLDd6XwMk8U3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.46.0/24
Signature Algorithm: sha256WithRSAEncryption
83:9a:88:50:d1:af:18:18:65:76:23:22:8d:3b:8d:c8:cb:a4:
08:ef:05:3e:84:aa:f2:fb:3e:95:b8:36:86:e0:2c:08:ae:ee:
5f:01:c2:6a:62:97:7d:76:60:07:59:52:97:29:a5:dc:ad:59:
59:07:f0:50:72:12:88:bf:20:6d:20:f2:29:91:7f:2d:5d:2a:
d4:e3:e6:99:9f:83:ad:55:44:9e:e7:2f:5f:67:bf:66:67:dc:
9c:76:59:7d:ac:5f:de:fb:fc:eb:92:fe:18:b1:df:a3:b0:bf:
39:f5:cc:c8:08:f0:98:69:9d:47:2f:21:45:4b:a6:ce:28:18:
cf:73:45:e5:62:20:cd:d6:73:54:b3:44:0e:b2:ce:aa:b8:17:
52:bf:d5:80:96:39:95:70:5c:5f:81:ca:b9:a4:70:35:a2:de:
6c:d6:9a:0f:47:56:01:9e:56:f7:a7:72:94:c4:54:81:4b:89:
a8:0e:37:de:3e:5b:58:29:95:f8:8c:7d:99:76:16:ec:d7:d6:
73:00:f9:da:85:53:ad:0a:cb:20:eb:60:7c:ef:30:75:1e:b1:
df:d8:ba:6e:48:2f:85:c8:da:fe:20:1f:33:08:8d:5a:97:3c:
5d:b9:92:8b:c6:5c:8e:56:95:d9:1a:15:b6:fb:b5:fc:e9:c7:
cd:2f:af:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:19 2025 by rpki-client