Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/CR7AN2bk-JypThpTSCUNN_tQQ6w.roa
File: CR7AN2bk-JypThpTSCUNN_tQQ6w.roa (raw, json)
Hash identifier: hGSsrwRHgkQ1InXfYJm4ytxk/EK0K2nh4iFPnNNwKCA=
Subject key identifier: 09:1E:C0:37:66:E4:F8:9C:A9:4E:1A:53:48:25:0D:37:FB:50:43:AC
Certificate issuer: /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Certificate serial: 019422FC20219DC72335DEC279700C583A41
Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/CR7AN2bk-JypThpTSCUNN_tQQ6w.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 185.167.181.0/24 maxlen: 24
185.201.4.0/24 maxlen: 24
185.204.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 11:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:20:21:9d:c7:23:35:de:c2:79:70:0c:58:3a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=091ec03766e4f89ca94e1a5348250d37fb5043ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:99:f2:3d:1f:8f:e3:7d:3e:49:eb:05:ab:
4a:d4:79:ff:27:c4:5e:87:d6:e6:85:b5:1f:54:3c:
df:e1:11:ce:43:28:5f:ff:14:b2:b5:b3:59:86:2a:
c1:92:59:90:14:2a:ef:06:d1:06:f3:7d:ee:80:ff:
30:a4:9f:0c:d7:fb:a2:15:4f:f5:48:ee:03:11:46:
ee:e7:75:7c:80:c3:18:00:28:33:c9:cc:c6:e0:00:
4e:74:10:71:c0:e0:15:d8:66:05:6e:d5:9a:40:5a:
6a:8d:68:b9:0e:9c:dd:ac:82:96:ac:a0:fb:4b:86:
6b:69:f7:b7:c4:13:e6:fe:2c:1e:a3:73:10:82:a5:
eb:4f:f3:0a:87:04:0e:e0:e6:14:ec:16:ce:32:27:
cc:4a:d5:13:1e:42:d6:3e:fc:3e:10:7b:ff:e8:e7:
6c:cf:91:b8:c0:c5:31:54:9e:d4:33:05:37:09:12:
55:1f:be:2f:23:e1:d8:1c:75:54:77:c9:bc:44:f0:
67:3c:6f:36:7a:36:10:cb:7b:d8:46:f7:b7:79:20:
ba:f1:e7:4c:c2:c8:df:3d:f8:70:97:9e:ba:2a:8d:
3a:73:b4:20:90:ac:cd:d0:32:29:70:ee:b6:29:ba:
e4:9d:e5:c1:b7:ba:0d:4a:64:d0:a3:e2:21:ef:c8:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1E:C0:37:66:E4:F8:9C:A9:4E:1A:53:48:25:0D:37:FB:50:43:AC
X509v3 Authority Key Identifier:
keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/CR7AN2bk-JypThpTSCUNN_tQQ6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.181.0/24
185.201.4.0/24
185.204.203.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:0e:52:5e:36:ad:3e:c3:b4:c1:c1:19:1d:9f:cc:eb:e0:6f:
fb:84:c1:30:b7:6e:de:65:7d:3f:e9:f7:5a:38:29:7d:d0:b9:
7c:4d:62:a8:73:9e:7d:61:f5:b3:1b:eb:44:85:83:c0:15:b8:
5b:87:35:27:cd:66:c6:60:90:b9:ae:54:8d:2c:5a:86:31:d2:
ad:ff:83:d8:3d:8c:b6:25:d9:9d:0c:38:51:b7:13:e9:8d:bd:
81:a5:e2:20:cb:3a:c5:5d:62:63:58:df:08:93:58:7d:69:e9:
17:cf:da:62:c1:91:84:3e:b6:46:71:7b:05:5a:47:67:c5:a5:
66:24:9d:e1:2b:97:a4:c4:ed:e1:29:18:3d:14:af:ff:3f:70:
6b:54:99:79:61:a8:84:51:4c:5f:e5:f7:aa:01:2b:38:eb:23:
12:04:c9:44:cc:e6:b6:dd:5a:2b:48:cc:17:1f:9f:7b:21:3d:
5f:0e:9f:8a:ac:55:25:83:84:ed:ba:10:ef:34:3d:ce:cf:ed:
89:7e:27:dd:72:20:14:86:b9:52:89:43:d2:32:67:e8:79:f2:
69:ff:3f:a9:c8:c6:fc:97:24:e4:b2:25:fc:0c:52:df:0e:8a:
2a:e4:9f:88:79:47:9f:53:b0:c7:12:9b:28:6c:52:e7:0f:c9:
16:2f:64:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:50:13 2025 by rpki-client