Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/aeZ-mZwgrcRyT6gBa07XVvZRCk0.roa
File: aeZ-mZwgrcRyT6gBa07XVvZRCk0.roa (raw, json)
Hash identifier: heDe7kDbQ2AB+1NUIyZN2km5JkBwiWxopk6f2yvHOVw=
Subject key identifier: 69:E6:7E:99:9C:20:AD:C4:72:4F:A8:01:6B:4E:D7:56:F6:51:0A:4D
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018DD022A759ECC2B10D4F278B24654B7FE3
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/aeZ-mZwgrcRyT6gBa07XVvZRCk0.roa
Signing time: Thu 22 Feb 2024 09:25:48 +0000
ROA not before: Thu 22 Feb 2024 09:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43991
IP address blocks: 185.42.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:22:a7:59:ec:c2:b1:0d:4f:27:8b:24:65:4b:7f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Feb 22 09:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69e67e999c20adc4724fa8016b4ed756f6510a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:db:fa:f5:7f:ec:3d:58:5f:ff:6d:e5:8c:
30:ce:5d:cb:b6:01:b1:5e:11:6c:b3:d6:ec:1e:47:
28:ea:d6:27:47:8e:15:0d:f0:fe:54:29:35:22:53:
b9:ec:05:ea:35:4b:a0:ae:d8:8c:d0:fa:ab:cc:23:
e7:8d:dd:5f:d6:9f:3f:a6:f6:fd:f6:42:86:54:5d:
cb:fb:09:27:06:ab:30:8f:db:29:52:5b:12:58:b0:
7c:88:ac:fa:c7:93:ba:32:ad:65:e6:e9:d1:45:5f:
47:ee:04:b3:eb:63:ad:71:c4:79:aa:83:de:e3:cb:
bd:86:34:ec:9b:b4:8b:79:cd:e2:57:40:f8:4b:59:
dd:71:28:63:e5:28:6c:7a:dc:91:53:20:88:2b:a9:
ea:8c:46:81:e0:e4:bf:3b:8b:61:0e:85:3c:a2:b6:
5c:d0:73:b7:1d:2e:90:d6:32:ae:86:da:7c:b9:92:
53:f3:29:a1:7b:02:7a:be:b0:2b:9a:02:f6:b5:5c:
27:0c:08:42:2a:cc:5a:bb:99:d2:d2:0c:9c:69:ec:
3d:92:be:f3:54:d7:f1:22:53:f9:bd:cc:06:6b:14:
d2:69:6a:64:6d:17:ac:68:1c:a0:e7:0e:81:7c:56:
51:f1:4e:90:ab:87:a9:5b:6e:31:a7:20:f6:8a:7f:
db:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E6:7E:99:9C:20:AD:C4:72:4F:A8:01:6B:4E:D7:56:F6:51:0A:4D
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/aeZ-mZwgrcRyT6gBa07XVvZRCk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.13.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f5:9e:8f:d5:83:a2:5f:1f:06:f4:0a:bb:b5:b8:da:77:b1:
96:2d:11:2f:41:1e:e3:5e:d1:a6:23:40:ee:39:b7:8c:1f:62:
90:75:60:96:7e:c1:0a:0d:8b:85:c2:c9:19:7f:eb:b7:fe:ae:
3d:34:86:8a:6b:f9:9c:69:65:71:1b:25:50:a5:c2:1e:82:98:
1f:6c:c4:14:d0:2f:2a:fb:f2:2c:ff:db:a2:15:3a:4f:59:a0:
db:6e:3d:88:0c:ab:2c:b3:11:b1:33:c1:08:68:ff:bb:39:8a:
2b:66:8a:67:0e:d2:0e:69:f5:07:e0:e8:aa:09:45:f9:25:7e:
9f:92:49:a4:c9:9d:de:69:91:c9:c5:d5:aa:48:3e:db:e0:b4:
ab:0d:dc:8e:ab:0f:10:3b:7b:f4:f8:9c:17:60:92:cb:4c:47:
a7:a4:a3:0a:74:cc:6a:0d:60:2a:47:63:12:2c:f1:4a:d1:d7:
58:bf:78:4e:4d:6b:60:ee:d5:f0:b2:18:31:19:d9:44:e4:e0:
5a:9e:b6:90:96:11:3b:3c:86:c8:7d:ab:25:bb:b0:3d:ec:da:
2a:22:f9:fd:83:61:d1:39:e6:ea:1b:e9:b2:be:76:c5:3a:29:
8c:18:ad:96:20:45:0e:3f:43:93:d8:fc:87:b4:ca:fe:15:2f:
fa:1f:f5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:14:19 2025 by rpki-client