Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/oH7geS1Hsx0MOjUqy0Byt0lgwmk.roa
File: oH7geS1Hsx0MOjUqy0Byt0lgwmk.roa (raw, json)
Hash identifier: fnZ/J2YMZA0p19fE1dv62l1i6h4216kGRgYpmDK0Pa4=
Subject key identifier: A0:7E:E0:79:2D:47:B3:1D:0C:3A:35:2A:CB:40:72:B7:49:60:C2:69
Certificate issuer: /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial: 018CC64B5BA1810D5DD394B35245598FBE33
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/oH7geS1Hsx0MOjUqy0Byt0lgwmk.roa
Signing time: Mon 01 Jan 2024 18:31:16 +0000
ROA not before: Mon 01 Jan 2024 18:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48206
IP address blocks: 185.142.42.0/24 maxlen: 24
185.142.41.0/24 maxlen: 24
185.142.43.0/24 maxlen: 24
185.142.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:5b:a1:81:0d:5d:d3:94:b3:52:45:59:8f:be:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Validity
Not Before: Jan 1 18:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a07ee0792d47b31d0c3a352acb4072b74960c269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4a:54:50:1f:4d:5e:df:71:16:e8:be:72:da:
1e:68:63:a3:f9:ce:3d:6b:89:1b:c9:01:f1:05:09:
7b:26:f2:35:a0:d3:cb:08:c1:6a:c5:5c:d3:6e:3f:
88:28:c2:ec:28:30:9c:3a:d8:33:3f:9e:b2:50:22:
12:e3:98:19:07:96:f5:b2:b6:0f:60:99:e1:c4:2d:
3e:ba:b7:67:71:8e:5b:ac:47:bd:bc:3e:4b:b6:b4:
88:a1:d9:1c:fe:9d:5f:ac:c0:ee:eb:0f:f5:ab:92:
f2:75:ee:ea:8a:17:5c:e6:75:83:2e:c7:dd:a5:d4:
4b:eb:15:28:a6:4b:58:ee:ba:ff:1f:c5:79:b7:eb:
dc:44:0e:e5:6e:40:8d:02:80:aa:c0:08:8c:64:0a:
51:62:6b:f1:64:6a:c3:54:02:cf:2a:60:65:5d:48:
ac:48:69:e5:07:aa:c5:b9:87:66:ca:97:e3:6b:6c:
3c:0e:c3:ae:77:fe:d6:5f:83:32:cd:4d:74:82:45:
b7:94:d0:90:3f:b7:32:45:ec:5a:67:22:a1:17:c5:
e6:0d:dd:f1:18:25:a6:2a:09:b4:de:fe:ac:05:a9:
f8:c0:15:2d:f3:74:22:6b:b0:f5:98:ee:48:e2:62:
6c:3d:a6:8e:a5:7e:e8:f2:8e:b5:57:ec:a2:0a:9e:
aa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7E:E0:79:2D:47:B3:1D:0C:3A:35:2A:CB:40:72:B7:49:60:C2:69
X509v3 Authority Key Identifier:
keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/oH7geS1Hsx0MOjUqy0Byt0lgwmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.40.0/22
Signature Algorithm: sha256WithRSAEncryption
59:47:59:cd:32:ee:0f:cf:a6:4f:46:bd:ff:b1:cf:a2:5f:04:
2a:e6:a3:e5:e5:46:35:c6:30:d8:00:af:db:1f:a2:7e:6a:7c:
67:c1:f6:fb:0f:5d:07:5b:54:20:8c:ba:5f:94:c5:37:f9:09:
ba:ee:a9:ce:46:a4:a4:8a:89:a9:47:9c:6f:ea:5f:36:a7:be:
c2:d3:32:fc:ca:d7:b8:59:0a:66:70:05:2a:39:15:cc:59:49:
ac:ab:53:57:79:8e:13:34:d3:c1:95:ae:9f:bd:8d:1d:25:31:
f4:f3:30:cd:5f:63:fc:65:e0:8e:7d:7d:a5:1e:62:95:b9:a4:
e6:b7:ac:3a:ea:d0:81:b6:ae:68:d7:25:1c:f9:e4:d0:81:2f:
03:1d:23:34:14:aa:f6:7b:01:ab:bc:9b:03:8a:83:9c:c1:31:
25:d1:94:69:25:f7:ae:35:64:63:05:8b:2c:28:0e:0a:5d:47:
4a:d8:36:f5:34:d9:62:e9:4d:6f:e3:05:b8:1e:b4:94:38:61:
3c:ad:b7:28:97:cd:ff:c8:02:b1:aa:be:0d:ab:27:d5:ed:26:
47:ce:3d:4d:ea:8d:b1:b0:8b:40:a7:3f:64:92:09:e8:22:ab:
94:cd:ba:0c:9b:7a:0d:f1:e4:29:e2:50:f5:5c:a3:95:81:a1:
2d:f2:f8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:37:33 2025 by rpki-client