Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/s_AS8GMbLo8HP4Ixz9C_1dr50pU.roa
File: s_AS8GMbLo8HP4Ixz9C_1dr50pU.roa (raw, json)
Hash identifier: t419i0r0P0RuTby3lMQOMk1qP1otdeanF4uk7K6aiiE=
Subject key identifier: B3:F0:12:F0:63:1B:2E:8F:07:3F:82:31:CF:D0:BF:D5:DA:F9:D2:95
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 018E3D1D77CBC163ABE748887F731A3B08FF
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/s_AS8GMbLo8HP4Ixz9C_1dr50pU.roa
Signing time: Thu 14 Mar 2024 13:18:45 +0000
ROA not before: Thu 14 Mar 2024 13:18:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16347
IP address blocks: 185.117.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:1d:77:cb:c1:63:ab:e7:48:88:7f:73:1a:3b:08:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Mar 14 13:18:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3f012f0631b2e8f073f8231cfd0bfd5daf9d295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:58:ec:bc:14:16:ca:23:9c:42:d8:d6:9a:
2a:fe:13:b9:2b:0c:4b:83:e2:04:8d:bb:13:22:14:
28:20:55:36:80:81:f8:31:78:4d:f9:dc:51:77:85:
21:94:f7:04:f0:e8:1a:16:c0:74:c7:f4:c0:3c:26:
1f:ae:84:71:18:34:fa:b3:82:74:df:16:86:e6:77:
f3:88:b0:b4:49:ed:d4:a9:71:a4:d2:34:ce:c0:4d:
0a:db:43:c2:c8:c0:3b:2c:35:42:1d:6d:83:97:7a:
cf:10:ce:ad:e6:c1:00:8b:47:11:90:70:13:85:94:
ef:12:62:87:a2:e1:eb:9f:ab:a5:39:4a:f4:53:c7:
ff:f2:b3:6f:05:53:eb:43:a3:4d:8e:d7:da:5c:0e:
1e:78:21:38:43:cc:c2:16:ba:77:89:4d:27:ac:ba:
aa:eb:e3:95:c9:1b:b4:a4:0d:62:88:dc:ad:e4:59:
a2:6c:9b:b0:a1:2e:8b:34:e0:ef:e0:d4:08:b7:92:
8a:53:db:86:a0:b3:df:92:33:d4:c3:04:33:43:15:
cc:7a:48:3b:dc:2d:e4:2f:ac:f1:43:89:c4:6d:1b:
14:c5:20:c2:91:f4:be:11:94:ad:29:36:4d:1d:e3:
99:2d:3a:37:50:60:2e:94:57:22:21:af:06:d3:65:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F0:12:F0:63:1B:2E:8F:07:3F:82:31:CF:D0:BF:D5:DA:F9:D2:95
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/s_AS8GMbLo8HP4Ixz9C_1dr50pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.92.0/22
Signature Algorithm: sha256WithRSAEncryption
88:a4:29:4c:db:53:4c:e7:5d:a5:1c:ca:0a:f8:e7:aa:37:b1:
f8:bc:96:df:a6:96:04:26:7b:26:48:20:78:34:c6:b3:c0:11:
d4:3e:09:95:54:30:ce:91:27:0a:00:41:a1:41:81:2c:44:14:
8c:60:0e:13:63:54:a1:90:71:36:c3:ff:33:e8:ca:c4:dc:ad:
2c:4b:e3:a7:d9:69:d9:fa:29:c0:30:99:3a:19:d5:fa:53:0e:
a8:15:3b:54:e3:58:60:77:2f:0c:c4:e8:83:56:52:50:ae:ef:
73:c7:8d:e8:8c:7d:f5:cf:8a:a2:74:7b:79:e3:49:0a:a8:7c:
c5:f6:bb:95:2a:4a:fc:1c:96:59:7c:52:55:cd:de:eb:00:d0:
7c:9d:04:f0:9a:de:31:e2:62:30:4e:c1:fc:1c:23:da:9e:0e:
06:49:78:75:cd:8d:da:d2:77:6b:17:ac:53:1c:a5:76:a0:0c:
e3:a3:b2:85:a6:12:6a:45:28:1c:8f:77:a9:52:f3:9d:8e:ea:
45:7a:b1:41:a7:6d:82:ce:26:c1:83:60:e8:27:15:2e:33:d3:
94:26:c0:ea:3e:43:b2:7e:9a:ea:cd:f4:7f:d5:68:89:41:23:
1e:d0:89:7e:c6:c6:ba:29:71:ff:5a:e1:56:6c:fe:5d:d4:4d:
66:41:61:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:54:31 2025 by rpki-client