Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/R8GlQAFMt5cpAmXNlDfENYKHCIc.roa
File: R8GlQAFMt5cpAmXNlDfENYKHCIc.roa (raw, json)
Hash identifier: ceBXl002b3LH7gmQT/JP5ZYhbXqvk9+LWnSDJsuCiZE=
Subject key identifier: 47:C1:A5:40:01:4C:B7:97:29:02:65:CD:94:37:C4:35:82:87:08:87
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 01929EEC91ED8996910B53DF2B98CABE7F10
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/R8GlQAFMt5cpAmXNlDfENYKHCIc.roa
Signing time: Fri 18 Oct 2024 09:19:16 +0000
ROA not before: Fri 18 Oct 2024 09:19:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51221
IP address blocks: 185.34.164.0/22 maxlen: 22
185.34.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Oct 2024 11:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9e:ec:91:ed:89:96:91:0b:53:df:2b:98:ca:be:7f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Oct 18 09:19:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47c1a540014cb797290265cd9437c43582870887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:af:32:a2:9b:6b:8a:d5:85:4f:7c:7f:13:
5b:76:cb:4d:7e:d6:71:c1:85:4e:58:cf:40:37:33:
17:47:16:0b:30:06:4a:fe:4f:74:2c:30:92:22:89:
7c:cd:93:a8:3a:77:a5:1d:91:9d:bf:27:1b:fd:04:
fd:92:cb:37:99:6d:9b:71:2b:30:dd:63:b7:e0:07:
14:35:4a:d1:20:57:bf:7d:9d:2c:e2:9c:44:14:c7:
c3:47:6f:88:d7:b2:64:d6:9e:88:92:96:7c:6b:a6:
ee:30:eb:2d:a8:2e:91:40:3c:b1:71:76:74:90:04:
d5:8f:7a:9e:be:45:69:29:35:56:7d:42:2d:7b:04:
82:f1:11:47:92:c8:55:10:9f:f5:db:26:2c:c2:49:
24:8e:ca:ba:02:5f:42:e0:41:54:bf:3b:2a:2f:85:
1a:35:82:c8:6b:08:67:b8:e6:63:4c:e5:11:b4:ae:
c6:41:88:b3:ad:d8:36:ec:17:58:56:b8:f3:77:1a:
4d:c4:4d:1c:0e:fa:94:da:ff:8e:98:c8:03:51:03:
9e:11:54:e7:50:24:2e:95:0c:cc:09:0b:b6:32:9c:
a5:d4:13:40:b2:4b:58:4d:6e:50:27:d8:3c:37:3b:
b9:b9:de:73:01:8e:da:6b:90:0c:b1:62:6c:fd:c9:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C1:A5:40:01:4C:B7:97:29:02:65:CD:94:37:C4:35:82:87:08:87
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/R8GlQAFMt5cpAmXNlDfENYKHCIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.164.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:9f:60:76:2a:6e:9b:ef:07:d1:4b:36:b8:e8:d5:a9:95:6c:
b7:57:d8:db:15:7a:f6:89:e2:bd:25:f6:9b:cf:00:3d:b3:5f:
e9:9c:23:12:9e:fb:5e:8e:88:5a:4b:e0:ee:11:e0:51:79:14:
57:ef:23:9e:ab:d6:d1:10:72:74:35:17:76:76:17:dc:ec:a4:
31:83:eb:92:71:14:31:6f:6a:b1:d5:bd:3b:24:93:2b:d2:cc:
9c:2c:f4:17:33:b2:67:23:f6:c9:f3:ae:1f:a5:25:82:20:39:
f7:57:94:29:96:bb:2b:bf:56:75:72:ed:8f:8c:ed:42:80:56:
ac:66:90:a7:c1:c0:9b:54:81:c5:80:af:2b:15:38:6c:99:ef:
a1:d1:70:a9:da:ea:8d:96:b2:70:49:53:2e:f0:a7:b7:23:fc:
91:42:e1:31:8d:7a:2b:ff:78:1a:44:6c:da:48:b8:17:3b:f9:
9e:2f:12:b7:ee:d7:22:f9:94:3a:50:8a:3b:95:b8:0c:94:49:
ac:ee:d1:6d:e2:a8:45:6b:2e:52:05:10:87:42:01:f4:83:b9:
79:cb:e6:b7:f1:14:c2:50:f6:ed:c2:03:9c:cb:9b:a6:60:9b:
46:39:ab:3f:7c:a6:0a:51:57:be:ba:93:ef:d8:b3:b2:56:89:
d2:40:51:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:01:49 2025 by rpki-client