Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/931VYjgxQrrltaU2Uu--8MkqSAg.roa
File: 931VYjgxQrrltaU2Uu--8MkqSAg.roa (raw, json)
Hash identifier: q6Tj7m3/LVTOzZwNazy1At42C/O/AShuLSh543Gku20=
Subject key identifier: F7:7D:55:62:38:31:42:BA:E5:B5:A5:36:52:EF:BE:F0:C9:2A:48:08
Certificate issuer: /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Certificate serial: 0193D00C45EBA7762044589EA28468B873C7
Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/931VYjgxQrrltaU2Uu--8MkqSAg.roa
Signing time: Mon 16 Dec 2024 15:18:05 +0000
ROA not before: Mon 16 Dec 2024 15:18:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 185.167.181.0/24 maxlen: 24
185.201.4.0/24 maxlen: 24
185.204.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d0:0c:45:eb:a7:76:20:44:58:9e:a2:84:68:b8:73:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Validity
Not Before: Dec 16 15:18:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f77d5562383142bae5b5a53652efbef0c92a4808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:6a:64:1a:26:9f:26:90:77:2d:1c:36:6d:
77:24:be:e7:98:80:16:1b:1b:cf:08:60:1b:5c:05:
f3:58:b3:21:f9:e0:16:fa:2b:cb:bb:48:a1:10:3e:
65:aa:af:fc:27:02:47:84:df:7e:2e:f8:75:e1:b6:
bd:37:ab:e2:8a:49:78:fb:42:b8:a1:25:ad:3d:eb:
ce:97:43:14:16:82:1a:51:c6:e0:53:2f:fd:14:21:
1d:5c:60:af:81:f0:f3:81:fa:7e:4f:42:b3:89:e4:
bc:a4:ba:5b:82:aa:1d:36:f0:fb:c4:89:e3:9c:23:
b6:91:08:98:c5:fd:15:3e:ff:74:39:93:1c:4f:eb:
b5:83:fb:a3:b1:d5:a4:08:35:ed:bc:56:b9:e5:c0:
10:cf:a9:f2:93:64:ef:5d:c4:6e:a7:16:10:e3:1b:
a9:5a:53:ee:4a:81:6b:7f:fb:ef:6f:5a:b9:0f:50:
67:10:ea:d7:1f:3b:fa:39:86:97:5a:b0:43:9d:e2:
73:c2:ce:c2:03:66:5d:8d:d5:59:cb:38:d1:0e:59:
86:0c:c8:7e:02:ec:24:49:8c:c7:91:fa:83:3a:f6:
1b:b2:b0:8c:d0:59:64:16:4c:e1:89:b2:b7:2c:e5:
ed:58:cc:19:d1:ef:9e:63:74:5d:61:11:19:b5:f9:
b6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7D:55:62:38:31:42:BA:E5:B5:A5:36:52:EF:BE:F0:C9:2A:48:08
X509v3 Authority Key Identifier:
keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/931VYjgxQrrltaU2Uu--8MkqSAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.181.0/24
185.201.4.0/24
185.204.203.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:47:41:c2:50:3a:5d:8a:1c:89:67:b5:5b:e5:8a:a3:e9:e4:
4f:7d:27:c9:75:2a:11:e9:5a:fa:80:21:d8:c6:52:80:b1:fe:
87:a5:2f:de:dd:73:ca:e9:08:25:6c:cf:35:12:f4:46:3c:87:
f4:ec:8f:f0:78:ee:6e:35:86:30:5d:30:fb:51:cf:b1:ea:02:
6a:00:af:c6:91:fa:6d:28:4b:9b:cd:9b:51:1f:ee:9f:56:ce:
a0:09:86:d1:71:4a:6a:8b:0b:4d:7c:5d:eb:9f:b3:09:82:95:
fb:90:75:fe:b5:ec:de:88:1e:0b:14:2e:a3:0a:7c:51:be:74:
09:27:2e:9e:3a:45:06:93:09:88:62:60:08:7c:d0:3d:3c:7d:
86:4d:11:1d:9a:b8:9d:17:2f:14:4f:c2:b5:e1:47:d6:2a:ae:
24:a9:0f:33:04:1b:0f:ba:1c:fd:2c:9f:4d:73:31:10:e5:af:
ad:e0:f5:10:4d:86:d5:09:46:e8:4d:6f:b0:57:cc:b9:36:e6:
00:8a:c8:1e:83:2c:76:f1:51:da:4c:12:b6:d1:7e:27:1e:d3:
76:b3:b6:09:ad:0e:74:57:5f:77:ae:c6:28:6d:99:96:65:86:
7f:d2:bc:f1:a9:a6:77:f1:5c:89:8d:1d:fd:8b:26:28:85:80:
db:ad:cd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:35 2025 by rpki-client