Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/dG7AlYOCYSTVTXBJ1Yko328mYCY.roa
File: dG7AlYOCYSTVTXBJ1Yko328mYCY.roa (raw, json)
Hash identifier: M9lfBW7mnPIXM4CdeE2K+EHbOwvZO4hBcqDbhUla1QU=
Subject key identifier: 74:6E:C0:95:83:82:61:24:D5:4D:70:49:D5:89:28:DF:6F:26:60:26
Certificate issuer: /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial: 0193547CDEDC339D906299B8602ED9D59363
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/dG7AlYOCYSTVTXBJ1Yko328mYCY.roa
Signing time: Fri 22 Nov 2024 15:28:09 +0000
ROA not before: Fri 22 Nov 2024 15:28:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1267
IP address blocks: 185.54.32.0/24 maxlen: 24
185.54.33.0/24 maxlen: 24
185.54.34.0/24 maxlen: 24
185.54.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:7c:de:dc:33:9d:90:62:99:b8:60:2e:d9:d5:93:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Validity
Not Before: Nov 22 15:28:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=746ec09583826124d54d7049d58928df6f266026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1d:85:f9:de:20:62:28:85:a9:e9:69:8b:ea:
fe:4e:19:11:1c:6e:51:73:f5:75:78:54:73:6b:f4:
b9:de:23:94:77:37:f7:13:92:fd:4c:61:e2:06:20:
65:05:20:16:a4:23:9e:3c:b8:24:4f:57:c8:a9:89:
63:3e:a8:f5:6c:44:e2:44:cc:a8:fe:ff:42:09:fc:
bf:66:48:91:fb:a5:7b:56:c4:b7:f8:eb:12:02:26:
fe:74:db:96:df:fc:91:d7:14:d2:da:36:b8:b8:2a:
96:c0:0f:97:2a:5e:57:f0:c2:27:98:51:92:0b:40:
da:25:36:6a:fa:09:f8:1b:fa:03:3a:fc:ea:06:64:
5c:ce:e9:e5:06:35:a1:6a:31:bd:eb:f6:9f:30:ea:
40:15:ba:ac:ff:8b:e5:72:77:9c:7a:26:89:d9:e2:
58:2a:24:c8:dc:81:69:42:23:6f:77:e7:c7:3c:15:
d4:3a:77:e2:23:c4:3b:29:ed:97:20:4c:9c:5c:36:
fe:7c:dc:94:a8:cb:bb:04:c9:29:0a:c2:5a:af:a2:
b8:79:76:94:df:4d:1e:b8:bb:a6:a0:32:e8:37:83:
0a:79:c5:f9:7f:e9:3c:b5:59:02:9c:d2:5f:e9:d4:
da:c2:a6:3e:70:83:6c:28:fb:6c:29:7e:79:25:f2:
df:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6E:C0:95:83:82:61:24:D5:4D:70:49:D5:89:28:DF:6F:26:60:26
X509v3 Authority Key Identifier:
keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/dG7AlYOCYSTVTXBJ1Yko328mYCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.32.0/22
Signature Algorithm: sha256WithRSAEncryption
22:7c:d1:fb:c0:7e:df:cd:66:32:09:fc:8b:82:e0:7b:32:db:
18:f0:44:83:ba:f8:04:51:4c:3e:bf:a2:bd:bf:6a:59:32:78:
5d:0d:33:33:88:40:09:dd:d9:38:7c:07:11:ec:54:73:76:6e:
01:14:2f:07:b8:46:1f:4b:4e:fd:07:cd:2e:8f:f0:26:0a:be:
77:0c:14:ed:12:99:8d:9f:4b:1b:7f:39:ed:11:2b:6e:1b:b7:
91:41:a8:56:dc:1b:2b:9e:00:43:8c:c4:57:e2:91:71:b5:48:
c4:32:48:6e:86:95:45:dd:7e:e4:4a:10:b4:e3:b7:5d:60:74:
4e:e2:0b:c9:99:72:54:a4:c0:e7:e9:f0:ef:8b:98:97:90:e5:
3a:14:b0:0e:5e:a3:5d:b9:a9:4c:59:fa:4c:ce:99:49:90:5b:
86:5f:d2:41:2b:9d:4c:4c:a7:0f:5b:19:8b:4a:c4:9a:8d:93:
e4:f3:31:82:71:08:52:54:d1:33:56:9c:64:f9:70:9b:8f:90:
bd:a4:a3:49:bb:fd:27:90:2d:be:60:77:87:3d:20:1e:94:ea:
28:f4:44:2e:40:88:70:a5:44:ec:8e:29:ed:a6:f9:c8:45:a9:
a4:ba:e5:49:b3:92:db:3d:b2:d8:36:05:e2:f2:3c:11:5d:04:
8a:25:60:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:20:35 2025 by rpki-client