Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/3wcNaRL5EY3sI6ZCiC1PuGDDpVY.roa
File: 3wcNaRL5EY3sI6ZCiC1PuGDDpVY.roa (raw, json)
Hash identifier: viAA19CNEnQz0SmHNBBWJjqlckgEnQH/fjmcCzkAGkM=
Subject key identifier: DF:07:0D:69:12:F9:11:8D:EC:23:A6:42:88:2D:4F:B8:60:C3:A5:56
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 019381D88154764DBC1DF3F604C6E5C8CAB8
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/3wcNaRL5EY3sI6ZCiC1PuGDDpVY.roa
Signing time: Sun 01 Dec 2024 10:51:09 +0000
ROA not before: Sun 01 Dec 2024 10:51:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215938
IP address blocks: 185.49.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Dec 2024 13:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:81:d8:81:54:76:4d:bc:1d:f3:f6:04:c6:e5:c8:ca:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Dec 1 10:51:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df070d6912f9118dec23a642882d4fb860c3a556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1e:85:62:b4:ea:7a:75:14:4d:de:e3:ae:23:
66:87:2c:54:4a:0e:a9:50:7f:a2:28:44:95:47:a5:
ff:98:77:15:94:f3:5e:33:24:99:fe:1f:83:27:2b:
e4:41:65:5e:f2:72:05:7e:bf:6a:8d:e8:73:b1:51:
df:3c:49:1a:7d:57:5f:73:a8:c7:b9:68:e5:aa:b2:
22:4b:0d:53:80:d5:c1:1c:4d:cb:80:12:08:37:f6:
0b:4f:30:0f:6e:13:e4:d8:3a:5d:2e:8b:81:30:23:
14:d1:1b:6a:8f:e4:c0:61:5b:52:f5:10:89:55:74:
5c:4e:55:2b:f7:5e:70:0b:a0:ef:0e:7b:ae:36:7c:
d1:23:4d:d8:6b:29:0e:73:ba:9d:29:75:a1:9c:d0:
81:4b:c0:c3:6a:4a:56:a6:69:c5:79:9c:b4:66:9f:
81:47:d4:e0:ce:23:7d:41:3f:e5:19:12:1f:5e:19:
9e:12:e7:e2:1e:5a:f6:ec:7c:42:c5:7c:78:52:c1:
e2:d5:2d:0f:f3:bb:ae:1f:05:c7:26:ba:11:4f:9e:
87:f3:14:c9:22:bb:de:90:a0:a6:d3:67:9b:f9:11:
bd:bf:03:c9:74:c6:22:d0:54:cf:8d:d4:7e:17:24:
d4:00:b5:2b:4e:0f:6c:95:83:bb:d8:b2:3c:2d:e7:
83:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:07:0D:69:12:F9:11:8D:EC:23:A6:42:88:2D:4F:B8:60:C3:A5:56
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/3wcNaRL5EY3sI6ZCiC1PuGDDpVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.105.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:df:0f:49:47:57:c5:8f:70:31:12:06:45:ed:a5:55:ff:26:
4e:70:9b:35:5a:ed:17:60:2f:14:40:06:1c:8a:db:be:67:c1:
84:43:04:fc:28:10:07:8a:30:ed:25:09:ac:1a:d2:20:b8:f2:
47:ae:9b:79:9d:77:3d:67:e6:74:18:b1:35:fd:e4:f4:20:f3:
78:28:ff:b4:3f:9f:a2:77:15:73:60:60:6f:73:59:ee:cd:e5:
c4:6a:63:40:22:d7:ba:c0:26:61:34:30:65:43:9e:43:cd:a7:
d8:60:95:47:10:25:42:81:fb:c1:ce:87:70:66:1a:a3:10:9c:
e6:14:3e:26:2e:36:9e:ba:23:89:0d:54:41:e7:3b:83:fa:4e:
b0:a2:be:5a:90:7e:40:9f:a8:50:35:72:84:62:9a:d3:c7:e8:
86:23:a7:b0:fb:6b:29:5f:d0:a9:80:21:b8:d5:2e:07:04:62:
17:3c:03:b2:ce:54:72:f7:22:e2:ce:76:a9:6f:0b:fa:5f:a9:
56:bc:4a:2f:c0:14:b4:1f:d3:52:5f:d5:37:42:40:da:c1:95:
03:47:89:71:0b:ab:93:12:98:f2:6c:4d:b6:43:16:96:5b:52:
36:de:5f:01:4d:2b:68:46:07:6d:d8:f5:11:d8:cc:25:66:3c:
a4:cb:75:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:14:31 2025 by rpki-client