Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/Rd-nrCNw5lV3eFyFdWaQFgNDwR4.roa
File: Rd-nrCNw5lV3eFyFdWaQFgNDwR4.roa (raw, json)
Hash identifier: I5vg9pCcCDRr/Ay2CVuDzxI0d+QuF0aNA/6saroqEaY=
Subject key identifier: 45:DF:A7:AC:23:70:E6:55:77:78:5C:85:75:66:90:16:03:43:C1:1E
Certificate issuer: /CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
Certificate serial: 01936FCAECE227AA1E0A4D786EB59D2E4B9F
Authority key identifier: 9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/Rd-nrCNw5lV3eFyFdWaQFgNDwR4.roa
Signing time: Wed 27 Nov 2024 22:43:10 +0000
ROA not before: Wed 27 Nov 2024 22:43:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213796
IP address blocks: 185.163.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6f:ca:ec:e2:27:aa:1e:0a:4d:78:6e:b5:9d:2e:4b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
Validity
Not Before: Nov 27 22:43:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45dfa7ac2370e65577785c85756690160343c11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:ec:e3:01:b8:ab:37:a1:73:c3:ca:02:d3:
07:55:ea:a2:53:37:a8:60:ae:01:54:9a:b5:bc:ab:
3a:bd:04:48:b2:26:57:0e:f4:d0:40:21:ae:56:59:
f9:71:16:a2:4b:e0:ba:d4:56:1f:13:19:c8:cc:6e:
7b:df:39:2f:9a:ce:43:f1:83:d5:a9:52:bc:05:e6:
a5:97:42:1e:79:77:86:56:72:29:a6:bf:b0:4e:bf:
9f:de:c2:6b:6c:c4:af:bc:c0:6d:a9:75:96:3e:d3:
55:bb:12:c9:49:bf:bd:c7:20:99:7a:3f:53:3f:05:
60:3e:62:f9:49:1d:de:37:a2:a3:3b:d0:39:90:76:
b2:cf:9b:9c:1c:68:66:08:64:3c:65:21:07:f3:c3:
42:16:a2:1e:84:24:29:8a:54:2f:2d:b4:e5:79:c5:
66:ab:ad:79:a5:2a:86:e6:d0:0d:6f:7e:f4:47:a0:
3e:95:79:14:c6:aa:52:47:9e:86:0e:f5:d5:d0:dc:
77:3a:a6:d7:63:2a:5a:5c:69:ab:bb:a2:4e:eb:6b:
ba:bf:8f:3a:c1:71:df:21:04:a2:fd:27:1b:d7:42:
be:0a:40:68:83:42:aa:6a:86:ee:ba:ec:ba:23:ef:
d0:32:84:cd:e6:fe:4f:58:dd:ed:b5:66:3b:a2:27:
2a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DF:A7:AC:23:70:E6:55:77:78:5C:85:75:66:90:16:03:43:C1:1E
X509v3 Authority Key Identifier:
keyid:9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/Rd-nrCNw5lV3eFyFdWaQFgNDwR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.128.0/24
Signature Algorithm: sha256WithRSAEncryption
58:19:44:2e:81:72:6f:31:67:90:27:55:24:f2:3d:d1:0f:db:
f8:10:68:71:d8:d1:a4:6e:22:90:1b:01:49:6a:57:27:24:a6:
f5:9e:0f:79:5b:22:f8:e2:54:49:c1:53:cc:75:6a:13:f6:e9:
bd:50:3f:4c:a8:fb:c7:4d:9c:56:1f:0f:51:ed:cb:3f:f5:05:
c6:8c:02:21:48:16:56:c6:95:2b:7a:6e:aa:20:b0:42:d2:6b:
97:0f:05:39:9b:49:53:20:9d:3e:26:15:fc:94:ba:07:fa:87:
68:7b:db:75:39:86:41:12:df:f7:28:bc:a4:8b:4a:79:e4:ea:
76:f8:56:7a:d9:db:bc:79:a9:79:01:75:ff:af:c5:c6:23:71:
45:d3:0a:8d:32:5a:8b:6d:24:c8:f0:84:a2:15:e7:5f:a5:4e:
bd:b4:0f:8a:01:37:25:f1:ec:17:4f:db:70:56:31:48:82:69:
1b:32:7e:17:13:a1:53:38:e9:de:e1:52:e9:fd:63:32:33:9c:
b5:0c:c3:3b:16:72:d2:28:69:b3:63:c2:5d:ef:d1:89:50:8a:
85:6a:53:d3:3a:52:21:e2:44:a5:06:ee:3f:7b:f4:1b:5a:d8:
07:be:f7:40:0f:d8:40:41:4d:5a:8f:ea:89:a3:79:db:b4:8a:
2c:c2:e6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:41:05 2025 by rpki-client