Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/aNsxOxvSBuGfR9JN8bDSthLcT5Q.roa
File: aNsxOxvSBuGfR9JN8bDSthLcT5Q.roa (raw, json)
Hash identifier: JRqGNjGQAw6+Jofcr20dNKuWq5uN1Kl3b74JGMHHGlc=
Subject key identifier: 68:DB:31:3B:1B:D2:06:E1:9F:47:D2:4D:F1:B0:D2:B6:12:DC:4F:94
Certificate issuer: /CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Certificate serial: 0192AA8A33FE68204093A9F591ADB6446FEC
Authority key identifier: 61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/aNsxOxvSBuGfR9JN8bDSthLcT5Q.roa
Signing time: Sun 20 Oct 2024 15:27:16 +0000
ROA not before: Sun 20 Oct 2024 15:27:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212253
IP address blocks: 185.222.22.0/24 maxlen: 24
2a12:e5c0:10::/46 maxlen: 48
Validation: Failed, certificate revoked on Tue 22 Oct 2024 23:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:aa:8a:33:fe:68:20:40:93:a9:f5:91:ad:b6:44:6f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Validity
Not Before: Oct 20 15:27:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68db313b1bd206e19f47d24df1b0d2b612dc4f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f7:6d:79:d7:99:30:8c:42:8e:b7:f2:ce:a6:
25:f9:da:c3:e8:6f:03:6d:fc:16:a4:25:2d:ff:db:
d3:ae:2b:3b:33:3e:b3:a0:72:32:99:01:fa:da:4d:
10:ca:67:ee:21:24:52:7c:12:51:97:5c:1f:d3:ac:
b8:d5:d2:db:35:84:6d:21:f2:8b:2d:25:a8:97:c0:
df:f1:4a:39:04:78:19:ca:8a:6b:ca:de:08:69:92:
79:3a:da:81:32:c4:80:45:da:2a:f8:cd:9a:76:48:
30:cc:52:3b:8e:8f:15:b9:26:48:5e:a9:7d:d8:f5:
14:d8:0b:fb:7a:e4:c6:e4:f9:27:41:b7:10:0f:4c:
3f:90:f8:7c:aa:35:c7:a7:be:74:0a:b9:8a:c7:79:
47:04:cc:d7:fe:a1:7c:f8:64:5a:b2:1a:23:94:09:
a8:b8:31:50:6f:84:32:73:6f:07:61:26:54:d9:c2:
e3:9e:77:7b:ba:1d:8a:e3:f2:74:e9:36:4d:ff:b4:
46:2a:84:5e:c9:95:85:03:dc:05:b5:48:58:4b:e9:
f7:a7:42:74:94:78:45:02:f2:23:6d:84:6d:21:cc:
67:dc:cc:d3:db:54:f0:fd:78:c1:ba:0e:c3:a0:72:
c2:10:35:8b:a3:4b:8c:13:89:24:fb:f9:c1:01:f8:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DB:31:3B:1B:D2:06:E1:9F:47:D2:4D:F1:B0:D2:B6:12:DC:4F:94
X509v3 Authority Key Identifier:
keyid:61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/aNsxOxvSBuGfR9JN8bDSthLcT5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.22.0/24
IPv6:
2a12:e5c0:10::/46
Signature Algorithm: sha256WithRSAEncryption
9e:4c:b6:25:29:9a:8c:39:5d:95:22:b4:5e:65:6f:b3:c2:e0:
81:05:60:06:e2:57:94:b6:3e:e5:0d:5b:c4:b3:16:e6:0c:d0:
62:40:63:e1:97:66:6b:c9:7b:df:a4:db:df:98:e0:f8:19:70:
4a:06:06:2b:8b:64:94:4a:27:57:c1:3e:ac:05:54:00:f8:38:
f6:dd:97:98:32:de:8d:59:aa:43:83:da:69:7d:38:f3:7f:1d:
d4:67:d6:28:90:ef:53:a3:52:93:a2:4f:0f:1e:10:58:3e:b1:
7d:a4:80:0f:d8:91:ab:9f:85:5a:f7:2c:32:dd:ea:c8:40:fc:
26:36:00:86:39:9c:56:d2:f4:bf:be:18:c0:f3:ae:45:a9:c2:
04:11:e1:bd:77:93:86:17:51:0d:00:32:d2:ce:39:4c:3d:a4:
2d:29:a5:c8:94:76:34:11:95:3c:e6:90:f4:5f:87:48:e6:0b:
f6:c8:cc:97:e6:db:12:60:3b:c7:de:94:28:7c:fc:ab:52:f8:
4e:9c:73:65:5f:5a:5b:2c:8b:68:73:e7:87:4e:c3:a2:f9:6a:
6d:45:52:e9:73:bc:43:09:ad:32:81:f6:64:09:49:a7:59:ac:
52:97:18:8c:4b:58:ec:2d:6d:31:58:83:b7:2d:1f:0d:7f:ec:
9a:17:d0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:19 2025 by rpki-client