Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rRFI_fBlZSFTtfTqLWTkK4YQzWM.roa
File: rRFI_fBlZSFTtfTqLWTkK4YQzWM.roa (raw, json)
Hash identifier: FiOrh/ZRopxCjmjYAI1KCMQtbwkQ/SNl68Ls2OJ3y9Y=
Subject key identifier: AD:11:48:FD:F0:65:65:21:53:B5:F4:EA:2D:64:E4:2B:86:10:CD:63
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019423D8014C546DED553E419DB037539C43
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rRFI_fBlZSFTtfTqLWTkK4YQzWM.roa
Signing time: Wed 01 Jan 2025 21:49:06 +0000
ROA not before: Wed 01 Jan 2025 21:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215813
IP address blocks: 185.229.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 18:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:01:4c:54:6d:ed:55:3e:41:9d:b0:37:53:9c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 1 21:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad1148fdf065652153b5f4ea2d64e42b8610cd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:9a:46:9c:19:68:2f:93:4b:b8:3d:23:60:
cb:cf:54:87:b3:3f:a9:9c:02:8c:b9:8f:5b:5f:7c:
18:75:62:14:84:4c:2b:cd:6b:f3:5f:c6:29:d9:ed:
79:41:e9:d0:07:33:14:f6:99:7c:70:8a:a6:61:9e:
86:07:be:c6:88:82:43:b2:cc:36:30:ec:58:ee:a2:
4e:6f:1f:b4:8d:2c:8c:b3:8f:aa:5b:e8:09:2b:13:
d2:9a:64:25:a0:e3:a3:c8:a8:2f:bc:0c:0b:48:95:
da:f5:6d:68:a6:72:60:58:d1:a5:d3:45:c9:e0:bf:
5d:69:45:ad:fd:65:27:94:90:aa:5d:f1:e7:c1:5f:
66:64:58:e3:d3:21:7f:b6:de:9b:f6:66:17:42:96:
57:ad:b6:52:aa:76:76:15:41:81:e9:9f:b4:af:da:
bd:c0:93:7c:4f:a2:e6:3c:1b:57:60:aa:9e:20:a3:
c4:07:19:09:2f:93:b5:89:df:89:be:99:7f:c1:f4:
46:55:8d:c6:68:44:05:b4:b8:43:93:5d:f5:08:36:
8b:aa:10:a8:09:09:e9:95:50:63:91:15:2b:ae:01:
09:06:c2:3e:a8:89:c0:9e:a5:bb:2c:1e:c0:e3:00:
ec:48:5d:a4:c0:47:a3:5e:80:b8:ef:f8:2b:2b:ee:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:11:48:FD:F0:65:65:21:53:B5:F4:EA:2D:64:E4:2B:86:10:CD:63
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rRFI_fBlZSFTtfTqLWTkK4YQzWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.220.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:43:94:82:14:5b:18:1a:de:34:6e:2a:31:ae:fb:0b:12:a3:
19:7a:27:b0:55:29:c9:e6:37:ce:92:df:fd:f1:d9:9e:26:97:
5e:ad:d8:64:df:ce:4d:66:f2:64:7e:71:17:14:4e:a5:ba:48:
b9:de:23:48:c3:88:54:c6:ee:f9:e1:c5:df:9b:3d:e5:b8:74:
91:f7:18:d8:31:c3:e8:17:0e:fa:0e:ad:f6:57:39:dd:c0:69:
9b:fc:be:ed:bd:66:40:ae:0a:db:52:40:3c:f5:48:10:26:80:
ef:46:1c:20:5c:ef:a6:a9:28:34:61:28:dc:33:35:c1:f6:a1:
b6:8a:b5:a7:91:45:a1:5b:77:95:33:5a:d9:ff:93:b5:6b:c7:
7b:b0:1c:af:4c:65:03:63:19:c7:90:5a:97:55:dc:d1:91:c7:
ee:05:e3:3f:1f:17:49:fc:a2:ea:dc:e6:ec:0d:4e:5a:d1:38:
05:76:3e:7e:6f:31:9f:79:9d:67:02:09:23:b3:1d:a9:93:cb:
16:8b:e7:85:20:2f:47:52:64:ba:bb:49:21:90:0c:8f:28:f2:
59:cd:1d:67:33:3b:4b:29:a6:a1:c4:6a:9b:93:25:4c:a6:83:
bd:ed:6d:b0:a2:bf:49:fe:a6:51:3f:16:d2:42:33:f5:05:18:
45:6e:49:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:52 2025 by rpki-client