Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/fIL1ORQLx2Zaoz07Z_uoeTvcbFw.roa
File: fIL1ORQLx2Zaoz07Z_uoeTvcbFw.roa (raw, json)
Hash identifier: sQM9HL2JQsviSpwiWNnUbYEMeAhcGnfVWIrkB07TJ6U=
Subject key identifier: 7C:82:F5:39:14:0B:C7:66:5A:A3:3D:3B:67:FB:A8:79:3B:DC:6C:5C
Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial: 018E99780C1E00480A4C72AD82BD61C1910E
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/fIL1ORQLx2Zaoz07Z_uoeTvcbFw.roa
Signing time: Mon 01 Apr 2024 11:42:45 +0000
ROA not before: Mon 01 Apr 2024 11:42:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35586
IP address blocks: 185.249.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 11:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:99:78:0c:1e:00:48:0a:4c:72:ad:82:bd:61:c1:91:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
Validity
Not Before: Apr 1 11:42:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c82f539140bc7665aa33d3b67fba8793bdc6c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:2f:43:ca:10:60:7b:f0:fa:e4:8c:86:41:
f0:1f:41:47:be:6f:93:0e:1e:33:ee:d6:07:d2:29:
91:da:91:f4:2c:4a:7c:9d:65:a4:20:93:de:4f:da:
39:e4:cf:db:c8:57:16:e5:21:85:96:ba:e7:90:ef:
13:5f:1f:75:91:4d:5b:bf:4f:53:79:bc:73:97:c6:
e8:8d:81:d6:62:25:bb:7c:df:d3:19:8a:c7:79:95:
01:e3:55:45:c2:a8:bd:53:27:0e:72:7c:8c:79:6b:
06:47:e0:66:32:0e:05:4d:c1:80:7f:91:cc:6f:8d:
6b:2f:ad:1c:61:d8:10:9a:0f:d1:1c:8a:80:89:19:
43:0b:5c:ad:0f:1a:73:9b:7e:26:40:96:0b:2a:9c:
9a:28:71:2c:0d:95:fe:82:eb:27:7a:eb:17:9f:5f:
f1:67:bc:ba:fa:5a:a4:ab:32:cc:87:b6:e4:14:89:
a1:bc:b1:1a:8b:46:4f:2b:fd:4e:64:5b:8b:9b:31:
ba:e9:d5:ea:3c:0e:8f:54:ea:52:28:c2:15:21:32:
53:f1:04:1d:88:de:2a:4e:96:62:f7:2d:b2:fb:a3:
df:bd:ca:b8:ce:d4:57:f6:86:4b:6e:07:42:f9:47:
2a:9a:b2:5c:8e:ca:61:c0:22:02:f0:cb:38:31:0e:
06:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:82:F5:39:14:0B:C7:66:5A:A3:3D:3B:67:FB:A8:79:3B:DC:6C:5C
X509v3 Authority Key Identifier:
keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/fIL1ORQLx2Zaoz07Z_uoeTvcbFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.162.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5f:26:b7:a2:46:7b:84:b5:f6:de:2c:43:7c:77:a3:40:86:
9f:a7:9a:25:6c:5a:20:4a:68:4b:1a:8e:65:82:e9:8e:f4:a9:
c6:bd:8f:bd:24:a2:d4:e9:71:95:87:9b:bf:fc:b5:7d:a2:73:
c2:87:55:9a:5f:fb:8c:61:14:98:51:fb:49:6c:96:d1:b5:3f:
b7:d9:4b:14:c5:03:10:2a:07:59:0e:29:8f:ff:15:db:7f:b3:
a1:42:55:3f:c4:88:89:b8:19:fe:08:39:c9:8e:23:19:14:da:
6c:c4:27:ad:0a:ef:8e:d4:86:3b:4a:90:43:d1:fd:ec:46:10:
e5:18:50:8d:82:47:27:38:07:62:98:93:ce:b9:ce:76:f1:77:
56:66:34:1e:7a:2e:1e:5c:99:09:38:52:a1:0c:b4:c4:db:0a:
b0:7b:43:db:0d:ff:f2:81:7a:90:48:18:a5:35:fa:50:d8:c6:
28:23:a5:2d:ba:f8:ee:a2:38:07:fc:d6:49:36:8f:18:27:3f:
58:51:b1:3a:c8:9f:79:96:1a:99:46:af:bf:bb:83:b9:06:f2:
fa:79:6d:79:7d:35:a2:2f:18:b7:c4:5d:e6:f6:35:fe:48:db:
c3:02:24:c8:c1:e0:7f:c2:c4:fa:c2:5a:0c:c6:a5:91:2c:f6:
7b:70:36:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:34:28 2025 by rpki-client