Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/I1zqeWPWUOA-Sk9wqsosH-JWjw4.roa
File: I1zqeWPWUOA-Sk9wqsosH-JWjw4.roa (raw, json)
Hash identifier: CgAMR3pia4HoKKKZ8Sp6iyPLebk4UltN4fCKu9Avd30=
Subject key identifier: 23:5C:EA:79:63:D6:50:E0:3E:4A:4F:70:AA:CA:2C:1F:E2:56:8F:0E
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 0193878CC53FA8F1ABCF30F08E7AEEC80E6A
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/I1zqeWPWUOA-Sk9wqsosH-JWjw4.roa
Signing time: Mon 02 Dec 2024 13:26:09 +0000
ROA not before: Mon 02 Dec 2024 13:26:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.49.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:8c:c5:3f:a8:f1:ab:cf:30:f0:8e:7a:ee:c8:0e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Dec 2 13:26:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=235cea7963d650e03e4a4f70aaca2c1fe2568f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:9b:58:b5:9a:e2:9e:ca:14:c1:bc:7d:f0:
71:38:d3:a8:a4:25:55:d3:2e:ac:15:2e:38:99:47:
d3:79:29:0a:41:ae:80:9a:08:10:6d:1b:91:77:93:
f7:e5:b0:ca:7f:b6:1a:da:e9:05:c5:3f:d6:05:75:
a5:4f:ab:13:36:5e:64:c2:5d:15:93:da:4a:d4:fd:
98:33:66:cf:cf:95:17:2f:a9:8d:b9:69:d6:5f:6d:
42:8c:87:a9:9c:35:52:60:b4:8f:dd:1e:1c:0c:28:
d0:67:3a:65:b8:13:be:33:71:fe:f0:32:ad:61:15:
a1:05:a5:40:36:cb:61:e8:39:8d:e4:0d:42:bb:0d:
8c:79:e0:3d:62:d1:5e:2c:5b:bb:15:45:d8:f8:1a:
9b:98:db:df:04:83:34:92:88:ff:cb:ad:03:21:26:
ec:fb:11:04:00:0b:de:b6:b6:c9:21:b0:f9:5b:3b:
3a:88:ad:9f:90:f0:03:98:fd:ad:b6:75:48:f3:03:
63:9d:fc:67:cd:c8:54:d7:91:f3:52:a3:83:8b:f9:
5b:03:cf:30:46:d7:8b:21:56:8c:8a:0a:27:99:80:
19:8f:df:60:21:d3:68:da:af:f5:ae:0d:e9:f5:17:
d6:5f:89:a7:d2:e2:50:b5:f8:71:a8:2c:43:7a:de:
d6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5C:EA:79:63:D6:50:E0:3E:4A:4F:70:AA:CA:2C:1F:E2:56:8F:0E
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/I1zqeWPWUOA-Sk9wqsosH-JWjw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.105.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:0c:e7:6c:cf:84:91:44:c8:b8:8a:34:4c:37:2d:1e:5a:54:
4b:50:81:dd:48:50:ba:69:12:0a:9e:48:cb:47:d5:ed:1a:fd:
d8:87:c1:04:b0:4b:52:a4:07:8f:ae:cd:5b:c7:46:fb:c4:b4:
c4:6a:28:fd:16:7d:bc:4d:1b:a7:87:50:13:83:33:b5:68:e7:
12:66:ec:d1:38:e6:3e:de:5a:34:43:f8:e5:41:f7:d9:00:ec:
71:f7:7c:ed:09:cb:ee:7d:fb:66:6e:4f:52:c4:6a:9f:79:d7:
c3:dd:56:f3:0b:2d:43:fd:70:ec:c2:e9:24:f9:45:61:22:6b:
66:09:f6:4b:82:6e:0d:6a:a7:f2:a3:69:c5:60:ee:0e:19:08:
04:51:3f:50:8a:aa:2d:46:bc:04:56:31:56:aa:b4:36:f7:2c:
2a:c7:bb:fd:0b:53:1c:ff:60:98:ea:fb:fe:42:09:a3:90:38:
22:32:16:9f:c4:df:59:90:e2:41:2a:c1:ca:ea:23:37:3d:6e:
e1:b0:5c:7b:23:85:f4:7f:44:bd:18:e4:6d:0a:e1:c8:f0:87:
eb:1e:87:dd:6a:50:6e:b3:72:c4:42:17:cc:68:65:45:b4:7f:
3a:b6:ab:42:16:fb:d3:04:77:83:48:6c:93:bf:05:ca:43:e8:
3b:c1:f0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:35:27 2025 by rpki-client