Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/9_xPRjeJqgXbXNeESq3Eq0erV5I.roa
File: 9_xPRjeJqgXbXNeESq3Eq0erV5I.roa (raw, json)
Hash identifier: wrxOGdxIdCWnMZpI1Vg/Eh2Our4xhqzoDKofbHEhJKs=
Subject key identifier: F7:FC:4F:46:37:89:AA:05:DB:5C:D7:84:4A:AD:C4:AB:47:AB:57:92
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 0190012B85F1201BCADEABAE00D9E6A56004
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/9_xPRjeJqgXbXNeESq3Eq0erV5I.roa
Signing time: Mon 10 Jun 2024 08:02:27 +0000
ROA not before: Mon 10 Jun 2024 08:02:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50597
IP address blocks: 185.181.52.0/23 maxlen: 24
192.161.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jul 2024 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:2b:85:f1:20:1b:ca:de:ab:ae:00:d9:e6:a5:60:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Jun 10 08:02:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7fc4f463789aa05db5cd7844aadc4ab47ab5792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:de:66:ce:ea:33:4b:12:a9:a5:2d:5a:74:94:
fc:4d:4c:44:df:6b:e7:8c:31:8b:7e:f4:64:c3:a0:
db:f2:5a:2f:ee:b8:ef:fa:c3:df:00:41:cc:98:8c:
8e:09:fe:5c:a2:61:38:e6:03:35:94:64:d4:f8:74:
7e:d0:78:19:55:7b:59:6a:ef:2e:3f:c6:41:57:ba:
c8:94:12:5d:68:e4:19:7f:e5:c4:dc:97:7b:06:c0:
f8:cb:19:f3:d0:ed:d1:ec:a6:32:ee:ff:4b:bb:0b:
ee:0c:62:7d:97:b9:8f:16:ae:d4:5c:9c:e1:15:1b:
ea:67:4c:32:e8:e5:cb:83:af:6c:db:6b:9a:4c:e9:
c1:1c:0c:8a:6a:da:70:a5:b1:df:ff:8a:14:59:d6:
14:05:10:13:99:b1:7f:49:38:54:7f:ce:50:0c:89:
92:09:35:b8:ec:68:6d:1a:a5:cb:d8:63:03:9b:3d:
63:50:da:88:f2:9e:93:25:64:6a:1c:ce:fb:1a:37:
f7:96:02:91:75:8d:90:0b:88:26:e6:19:17:ee:28:
32:da:f9:52:c7:c7:0d:ea:d3:bc:7d:74:41:38:5e:
27:02:9c:da:2b:84:52:d3:68:53:c4:8a:d1:26:11:
de:9d:2a:16:a8:6f:25:dd:e1:18:57:64:07:49:87:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FC:4F:46:37:89:AA:05:DB:5C:D7:84:4A:AD:C4:AB:47:AB:57:92
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/9_xPRjeJqgXbXNeESq3Eq0erV5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.52.0/23
192.161.7.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:79:b8:e5:22:49:0e:9d:b0:36:bf:25:5f:55:4f:9f:2a:b4:
12:81:f4:c9:78:f3:6d:2a:56:a2:08:17:39:7d:12:2f:fa:51:
94:76:30:36:3a:cc:6b:25:1a:32:cd:33:49:9d:2a:72:90:11:
fe:38:37:06:3b:3e:90:22:91:7c:c8:df:0b:fe:95:2d:3e:10:
22:cc:80:02:e9:4c:e5:47:1a:4d:95:23:da:c3:ce:6a:a5:74:
84:0c:5e:96:4c:f5:4b:e1:10:1f:02:10:e1:b4:a7:75:c4:81:
79:17:49:ac:9c:db:96:fb:86:fe:c1:d1:e4:1e:9b:aa:92:c9:
9e:d5:99:0d:0b:63:4d:18:16:c3:a1:ea:fd:ed:0d:bd:b5:52:
d9:55:f6:8d:41:e7:76:00:61:90:74:4c:0a:56:b8:20:3a:4d:
77:9a:6c:e3:88:23:25:35:16:98:c8:1b:5c:68:8b:5f:1b:d3:
cc:ea:bc:75:a9:59:0c:d6:e9:fb:ff:05:5e:eb:c8:62:42:6e:
a7:98:93:f3:51:ba:4e:94:70:aa:ca:47:35:49:41:45:fa:44:
cb:22:c0:e2:f2:ca:d8:04:89:52:31:0e:61:05:59:6e:ea:bf:
b2:16:1b:e6:e5:73:11:1c:c8:18:e2:10:85:18:f3:53:43:34:
c4:48:6a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:01:41 2025 by rpki-client