Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/mX0HL5iLnO6qCwEvHqy4uoiXiyQ.roa
File: mX0HL5iLnO6qCwEvHqy4uoiXiyQ.roa (raw, json)
Hash identifier: 2u1Y+a4oofL1y/RSphN8OK1pWPh4aLhFqYpgV/+pyIE=
Subject key identifier: 99:7D:07:2F:98:8B:9C:EE:AA:0B:01:2F:1E:AC:B8:BA:88:97:8B:24
Certificate issuer: /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial: 018CC9BB97D2A94FBF1D254BB3332B953094
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/mX0HL5iLnO6qCwEvHqy4uoiXiyQ.roa
Signing time: Tue 02 Jan 2024 10:32:43 +0000
ROA not before: Tue 02 Jan 2024 10:32:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201901
IP address blocks: 185.204.184.0/24 maxlen: 24
2a0e:c940::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:97:d2:a9:4f:bf:1d:25:4b:b3:33:2b:95:30:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Validity
Not Before: Jan 2 10:32:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=997d072f988b9ceeaa0b012f1eacb8ba88978b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:1e:92:d2:3b:28:a4:0d:30:80:b2:3e:d5:
10:20:e1:50:4c:d1:94:c0:1b:59:c2:17:fc:40:11:
ef:e7:64:90:e1:58:87:a4:30:e6:cf:36:50:ac:0f:
a5:9e:54:41:d9:40:b5:f0:29:91:de:48:35:13:43:
60:5b:d8:39:26:47:10:5c:c8:c1:09:48:17:26:7a:
bb:2b:e4:7a:83:3b:81:90:6b:6b:e7:6d:49:17:90:
af:ed:99:91:07:1d:a6:43:e0:4a:8f:bd:9e:85:28:
c4:fa:39:d4:9e:bc:c2:94:76:ee:27:76:23:17:8e:
49:f9:73:81:e5:96:08:e3:77:08:02:c1:ee:6a:8d:
57:5e:8d:56:03:2b:8f:cf:a7:2c:89:6f:15:07:3c:
30:3c:75:e8:db:be:5c:71:22:e1:0a:f1:7c:15:fe:
7d:c1:1c:21:bb:e2:d5:42:50:81:c4:68:00:79:8d:
f0:23:7a:00:40:49:d7:8c:33:10:16:b0:7a:4e:38:
58:9d:c2:87:4a:3d:23:3a:ee:51:fd:c4:98:6d:71:
d2:ee:ea:1c:f7:60:69:ea:d9:4d:37:2d:58:d4:28:
26:85:4d:cf:6e:c6:be:bc:71:10:42:34:94:da:da:
cf:b3:c9:3e:59:39:b2:4b:4f:36:f8:25:2d:5e:c6:
06:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7D:07:2F:98:8B:9C:EE:AA:0B:01:2F:1E:AC:B8:BA:88:97:8B:24
X509v3 Authority Key Identifier:
keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/mX0HL5iLnO6qCwEvHqy4uoiXiyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.184.0/24
IPv6:
2a0e:c940::/29
Signature Algorithm: sha256WithRSAEncryption
23:94:85:56:ec:6a:cf:94:fe:c1:2e:df:7a:2e:92:5d:b9:02:
1e:80:c2:e7:94:50:ca:66:4f:3f:8b:df:c2:09:f7:4c:5f:1d:
07:74:cd:e3:c8:29:0f:50:77:7d:a2:ea:74:44:e2:39:d1:ab:
c5:d4:41:a9:9a:36:ca:1f:d1:96:88:57:6d:18:59:1d:db:8f:
9b:d5:f0:9d:12:2c:02:98:c3:60:f5:1c:8d:9c:dc:5d:be:15:
45:72:8b:53:66:0e:66:80:3d:2b:40:3b:27:ae:6c:69:3c:7e:
4f:ec:b4:b0:ad:37:c5:66:1f:be:af:b0:7c:58:6e:34:8e:c9:
4c:24:e3:6e:08:2c:87:a3:23:5d:cb:f1:06:dd:71:8b:1d:0d:
26:13:c0:5b:74:42:da:d1:51:cc:84:7c:7f:b7:46:6a:46:11:
c9:86:63:49:36:66:6c:33:e7:c4:ba:91:c0:b3:e6:fb:d7:6b:
bc:7d:7d:dd:a7:55:74:d5:b1:99:67:a7:b9:f6:12:44:e7:5a:
0f:93:03:34:40:24:48:ae:d3:80:34:ed:fe:70:67:2b:9d:e1:
3b:d0:16:f0:31:34:7f:b4:93:3f:83:c2:48:fd:84:88:e5:4a:
13:ca:a7:0d:98:64:0e:3d:cf:0f:96:1c:66:8d:78:6a:81:8c:
c6:7c:11:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:06:51 2025 by rpki-client