Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/dWQbQV-Fr0w2weWX_oteu-B0rvQ.roa
File: dWQbQV-Fr0w2weWX_oteu-B0rvQ.roa (raw, json)
Hash identifier: ceUaNNZR5fRIeeMM3KbBfcPIEtj2Ph8SO9ORMhCrdhg=
Subject key identifier: 75:64:1B:41:5F:85:AF:4C:36:C1:E5:97:FE:8B:5E:BB:E0:74:AE:F4
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 01929F5B59CEFCCCBFD5041904B613BE6CE9
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/dWQbQV-Fr0w2weWX_oteu-B0rvQ.roa
Signing time: Fri 18 Oct 2024 11:20:17 +0000
ROA not before: Fri 18 Oct 2024 11:20:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51221
IP address blocks: 185.34.164.0/22 maxlen: 23
185.34.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9f:5b:59:ce:fc:cc:bf:d5:04:19:04:b6:13:be:6c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Oct 18 11:20:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75641b415f85af4c36c1e597fe8b5ebbe074aef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:a7:70:9f:3a:b2:86:fb:be:c8:74:6e:9c:
72:e6:c6:a6:54:b5:f4:2d:7c:dc:1c:fb:2c:ef:f7:
31:9f:da:cf:d0:20:a7:dd:e1:d3:79:cd:a5:dd:88:
60:97:0b:05:40:8b:aa:2c:0d:0c:b8:fb:3a:76:39:
5f:f8:e4:95:0a:82:44:95:b7:49:ae:2f:89:0b:3b:
09:6b:08:bf:a0:70:ba:fc:1c:84:78:ae:59:30:87:
56:a3:18:6f:c6:df:88:33:e3:d9:f4:91:d0:0e:79:
27:4a:a0:25:53:8a:c2:d6:07:fb:72:00:db:66:ae:
dc:d4:1f:a1:b0:8e:f4:28:65:ee:0a:b5:02:e9:fa:
9d:dc:ab:97:c7:2c:15:04:e7:71:5c:88:36:1b:4e:
1a:8f:85:5b:c1:e8:84:d8:45:1d:74:d0:be:06:5f:
5c:48:d3:8f:ea:57:55:dc:08:46:24:7b:37:30:45:
66:b2:a3:9c:92:1e:64:57:44:50:02:3d:24:73:0c:
22:18:78:a4:fe:ac:7b:a5:f5:e1:cd:6f:8c:bb:b8:
14:5c:e9:ff:f3:e6:8c:06:68:0c:40:ea:21:89:fa:
b0:3f:78:32:eb:4c:ee:35:ca:17:92:43:7c:7a:9b:
25:15:96:48:b2:70:71:87:fc:c9:83:bd:cb:ba:44:
c7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:64:1B:41:5F:85:AF:4C:36:C1:E5:97:FE:8B:5E:BB:E0:74:AE:F4
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/dWQbQV-Fr0w2weWX_oteu-B0rvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.164.0/22
Signature Algorithm: sha256WithRSAEncryption
12:cd:5d:63:54:61:2b:e8:31:da:69:e2:3b:7a:4c:9e:3f:78:
a7:2b:f2:c1:5d:a0:8a:f3:74:4e:19:66:fe:80:c1:be:09:62:
ca:9e:80:3b:d7:6c:62:91:ce:f5:1e:1d:f4:4c:a4:a4:98:6e:
0c:db:de:e7:91:71:8d:4a:ce:d8:66:0f:eb:74:a9:14:8b:9c:
56:34:f7:43:07:92:8c:88:1d:57:c0:21:93:6e:8b:ae:d6:b4:
f8:4c:9c:8f:14:6d:2b:fd:36:6a:89:06:59:a6:ab:a1:41:b1:
58:9c:fb:ab:2b:06:2d:03:d5:e2:b4:dc:44:9a:56:a9:6f:90:
61:5a:fa:0e:f3:f8:9e:11:21:e7:ba:8d:3b:0e:b8:3d:3a:4a:
15:9c:c4:90:76:16:27:00:1e:06:fa:09:c5:55:5c:a1:c6:96:
66:e6:f7:b1:0f:00:70:58:33:ec:92:0e:a9:a9:23:2f:dd:36:
a7:e1:2f:fd:d2:ee:f1:d7:6d:c7:2d:cb:10:6f:d1:2c:da:8c:
d8:8a:00:1f:bc:4f:9b:78:92:04:96:16:75:4a:67:80:b5:54:
df:75:55:1e:75:77:96:01:9b:7e:13:a2:e0:38:af:43:c9:1f:
d3:38:62:58:81:bc:29:9e:2b:ef:ef:db:7b:0b:a3:d0:f4:b4:
82:4a:93:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:04 2025 by rpki-client