Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/KQu2nuf3LilfJXkWQxSGIotuoR0.roa
File: KQu2nuf3LilfJXkWQxSGIotuoR0.roa (raw, json)
Hash identifier: cekQ25RGm3op8mIGQZTQj0qtjaBNHCFH3fxXfNxzDpE=
Subject key identifier: 29:0B:B6:9E:E7:F7:2E:29:5F:25:79:16:43:14:86:22:8B:6E:A1:1D
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B93F82238E8F18A018E9D1AAF4821B
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/KQu2nuf3LilfJXkWQxSGIotuoR0.roa
Signing time: Mon 01 Jan 2024 20:31:18 +0000
ROA not before: Mon 01 Jan 2024 20:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199048
IP address blocks: 85.187.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3f:82:23:8e:8f:18:a0:18:e9:d1:aa:f4:82:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=290bb69ee7f72e295f257916431486228b6ea11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ff:6b:25:2c:c9:52:61:62:db:3e:62:10:85:
6f:8b:b4:db:34:89:e5:9d:10:59:be:07:9b:b9:51:
db:e5:86:c4:05:6d:28:75:48:2b:78:d3:98:47:df:
0a:03:5f:cc:86:eb:82:19:8b:13:0d:1d:3a:fc:6f:
d6:35:89:89:66:9f:a7:2d:9f:a2:8f:d6:38:3a:ef:
0b:eb:91:e4:0e:31:ce:72:0c:56:11:a3:d5:ed:ec:
10:59:20:92:11:d4:13:ba:6c:28:60:37:e0:d9:77:
09:14:29:e4:f4:45:b0:5d:bc:cb:d8:02:1f:b3:4e:
db:81:22:24:a5:22:0a:43:43:ec:4f:35:4a:24:36:
9f:b2:f1:58:0b:bb:96:b8:35:aa:be:61:28:fc:7f:
4e:42:34:69:da:7f:28:ea:2c:7b:57:b9:0c:ee:e9:
7b:23:99:b6:e3:0c:7e:c5:85:07:2c:af:bc:c7:a8:
f0:5f:ae:10:cf:bb:5c:04:5c:b9:23:a6:b2:47:7d:
9f:04:1f:08:e9:25:73:d5:76:3f:d6:46:ce:0b:f0:
35:db:2d:84:b3:1a:5e:7d:92:e1:46:f0:b8:ea:ed:
84:72:b0:66:c6:31:48:55:c2:0e:ad:27:ec:13:25:
9a:37:a8:01:ac:5b:21:d4:87:d0:9f:82:14:87:c2:
aa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0B:B6:9E:E7:F7:2E:29:5F:25:79:16:43:14:86:22:8B:6E:A1:1D
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/KQu2nuf3LilfJXkWQxSGIotuoR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:98:71:9e:eb:d9:39:23:59:ef:f6:02:af:88:ee:e2:2a:ef:
e9:a4:95:40:b0:6a:4d:7c:da:21:c5:c7:01:cb:f9:45:a6:6a:
e0:50:9b:16:1b:58:6f:06:ac:ed:09:0e:84:dc:33:f4:6d:c0:
7b:32:9e:72:5f:d9:df:e5:19:a3:e9:91:73:06:5f:d1:35:1a:
9d:30:a0:99:da:1f:76:25:00:2a:db:51:e7:31:23:60:85:18:
3d:d7:fe:4d:84:05:85:dc:cc:36:10:2a:a2:f1:40:98:26:38:
14:a1:d8:8f:59:d8:5f:48:ca:3c:15:9b:94:f9:1f:18:20:82:
96:83:d2:d0:6c:83:38:91:ec:96:6f:94:14:31:ec:30:f4:d3:
76:79:8c:ab:0a:df:bb:01:20:a3:61:08:92:b4:1e:8b:af:ed:
3b:cb:24:48:43:30:22:9f:48:da:25:1e:f0:a8:4c:39:12:51:
95:17:51:43:12:a4:45:57:6a:71:0e:12:36:f7:e6:49:eb:bf:
ce:9c:37:db:02:f8:ae:25:75:ce:da:cc:2b:8b:75:72:b7:47:
c5:1f:b0:f9:f4:6e:25:5c:52:0e:c0:fb:27:c7:49:a6:58:d1:
32:7d:d2:24:2a:78:ef:99:2b:b7:3a:35:81:4a:ad:27:91:e5:
32:53:d8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:02:01 2025 by rpki-client