Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/B332BioYTKIHMt5D-GK05iywK3M.roa
File: B332BioYTKIHMt5D-GK05iywK3M.roa (raw, json)
Hash identifier: k2K15b0GcowRYDiSZUeuHpCOrjXebbqSj2t/NVHTl+I=
Subject key identifier: 07:7D:F6:06:2A:18:4C:A2:07:32:DE:43:F8:62:B4:E6:2C:B0:2B:73
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 0194CC8168E791D59F45799D364939E8FE6F
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/B332BioYTKIHMt5D-GK05iywK3M.roa
Signing time: Mon 03 Feb 2025 15:50:20 +0000
ROA not before: Mon 03 Feb 2025 15:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 185.23.18.0/24 maxlen: 24
185.23.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 16:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:81:68:e7:91:d5:9f:45:79:9d:36:49:39:e8:fe:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Feb 3 15:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=077df6062a184ca20732de43f862b4e62cb02b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:d4:99:10:b4:c5:ee:87:0a:e7:21:ef:80:
33:6c:c1:94:a9:86:e2:65:4b:08:7b:a7:a1:b1:1c:
59:76:7c:9b:e4:29:75:6d:34:bf:4f:06:a7:98:b2:
8c:88:02:16:e0:02:fb:1a:7b:87:90:a1:18:f9:88:
61:91:4f:22:43:9f:9b:6a:97:d6:12:56:52:22:7e:
b6:a1:c0:55:ee:d0:80:78:0b:a6:4b:40:fc:6f:53:
f8:a7:d7:7e:16:d0:54:f5:0d:1e:44:6e:d7:39:f0:
f5:c9:04:76:ef:f3:54:5c:7f:cc:6d:73:4d:3c:94:
fd:c4:78:64:2e:b9:cf:5f:bf:24:ed:71:e9:39:f6:
ce:5d:4c:75:56:ac:01:6b:0e:4a:bd:a6:df:43:81:
22:8f:d6:32:27:24:0f:5b:7b:dd:47:38:d4:75:35:
cb:98:3c:3d:7c:2a:4f:ff:14:09:75:a1:82:cc:15:
be:9e:25:46:ac:6a:d7:37:05:83:7a:73:74:9e:20:
e0:c9:d9:d0:20:27:69:4f:c9:61:b4:78:91:62:46:
e7:2c:19:65:98:eb:ff:7d:f6:01:6f:11:79:68:9e:
68:38:ab:c6:62:7e:a5:5a:38:ea:b0:23:e9:b0:8c:
1e:56:fd:7c:d6:1c:4e:72:a4:69:f1:31:e3:65:3f:
73:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7D:F6:06:2A:18:4C:A2:07:32:DE:43:F8:62:B4:E6:2C:B0:2B:73
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/B332BioYTKIHMt5D-GK05iywK3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.18.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:fd:98:33:06:8b:2f:2d:87:b6:8f:60:57:a4:8a:bc:ab:33:
3e:50:e0:86:59:4a:46:02:f4:7c:8d:79:18:8b:3c:fa:b6:c9:
68:3e:fe:c6:9c:7f:cf:d2:50:fe:13:96:8f:02:7c:86:ff:bc:
2c:4e:9b:95:6f:78:6f:22:0d:d8:af:1f:27:b0:1a:a9:08:95:
21:99:b4:c7:02:73:e6:3d:6f:2e:7d:84:b8:b7:99:40:57:94:
82:71:8a:59:81:45:4a:50:58:82:2d:5d:d0:1a:11:41:9f:0a:
fb:89:a3:77:fe:71:93:7f:a6:ca:1a:dc:3d:64:86:be:64:36:
2a:45:c1:fa:08:06:09:28:d9:f7:5f:a6:49:b8:a5:10:e8:cf:
75:cb:c7:63:b8:a8:4a:06:cd:41:f7:8e:7f:40:01:a0:e5:f4:
61:e7:20:68:90:ff:85:b2:72:73:83:1b:82:a0:c4:e1:1c:69:
3d:78:18:7f:2f:f8:d1:1b:d5:07:c0:69:05:a9:93:c2:d1:5a:
7a:dc:81:67:28:53:3c:4e:3d:80:3c:f1:47:43:69:9b:2a:02:
1d:7b:7c:51:25:96:71:f7:9a:7d:bb:a3:48:e6:8a:b5:99:ec:
01:58:81:03:ff:3e:66:d5:48:40:84:41:29:d1:51:45:e6:47:
1a:6d:ff:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:01:09 2025 by rpki-client