Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/rdze9Zv042BVayVkaMi6-VNsjOI.roa
File: rdze9Zv042BVayVkaMi6-VNsjOI.roa (raw, json)
Hash identifier: f0dIssrGqRKlh5kAdAh1rttAlOvFq2hoSJOwx6POELA=
Subject key identifier: AD:DC:DE:F5:9B:F4:E3:60:55:6B:25:64:68:C8:BA:F9:53:6C:8C:E2
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 0192D7895F3E7248963EEFCBE65469161427
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/rdze9Zv042BVayVkaMi6-VNsjOI.roa
Signing time: Tue 29 Oct 2024 09:09:17 +0000
ROA not before: Tue 29 Oct 2024 09:09:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208006
IP address blocks: 185.97.116.0/22 maxlen: 22
185.143.232.0/22 maxlen: 24
193.176.240.0/22 maxlen: 24
2a0c:a7c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 07 Dec 2024 08:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:89:5f:3e:72:48:96:3e:ef:cb:e6:54:69:16:14:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Oct 29 09:09:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=addcdef59bf4e360556b256468c8baf9536c8ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5a:fa:02:9c:47:b1:a2:5f:b3:4f:26:c6:f4:
b7:93:d9:42:78:1c:71:a9:ea:dc:41:b0:a0:14:41:
d4:a3:a8:f2:11:42:21:52:87:fd:c7:b7:37:1f:4a:
a5:ac:22:72:b0:9d:0e:11:dc:ab:83:60:4f:53:75:
94:26:f5:71:45:33:51:64:34:9f:30:00:7e:37:bf:
af:96:6a:e5:03:da:35:6b:ac:40:1f:3d:c1:39:f2:
b1:c7:2e:11:cb:1e:69:20:11:f6:ab:2b:1f:ba:0d:
32:8f:f6:dd:e2:84:2a:4f:36:37:f4:e8:77:d7:01:
e1:1a:6b:39:22:4f:ab:d8:13:c0:39:80:86:a8:a7:
79:30:21:b7:93:9d:7a:53:e4:bf:4f:20:3d:d7:f1:
d5:e6:bd:8e:ae:7f:1a:90:6b:79:49:50:f9:cb:12:
f4:91:bc:a8:af:19:a2:56:5d:fc:bd:13:f0:57:d7:
3e:7a:14:ff:84:cb:01:22:48:4b:b5:d6:2b:6b:82:
95:3b:68:9b:86:56:5c:f6:17:fa:ed:26:3b:56:f9:
39:42:68:30:ca:35:50:88:ff:29:ba:55:c4:12:22:
38:25:3a:c4:0e:b6:25:61:d8:e4:e1:38:80:b9:50:
f1:78:76:c5:b0:1b:cb:60:ac:51:c3:f9:a3:62:8e:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DC:DE:F5:9B:F4:E3:60:55:6B:25:64:68:C8:BA:F9:53:6C:8C:E2
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/rdze9Zv042BVayVkaMi6-VNsjOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.116.0/22
185.143.232.0/22
193.176.240.0/22
IPv6:
2a0c:a7c0::/29
Signature Algorithm: sha256WithRSAEncryption
63:a4:bf:fa:fe:37:52:28:82:04:75:d9:40:8b:61:23:25:cc:
35:a8:2b:40:82:29:18:bc:86:ce:1d:6d:c3:07:5e:ba:c6:a4:
12:e4:10:e4:5e:19:c0:46:a6:ab:ab:fb:27:52:f4:85:c4:6b:
58:0e:ba:ea:f8:93:03:0b:bf:05:e9:ea:db:ab:f6:b8:5c:71:
4b:49:96:82:49:d3:93:3a:8d:f5:89:64:71:98:24:92:88:48:
da:1a:22:3a:b8:0d:91:c0:bf:d6:c1:7f:14:89:6d:07:9a:1e:
e2:9d:9c:7d:c6:e5:fb:67:c8:88:3d:03:31:18:ab:d6:ad:9b:
bb:77:2b:7e:d6:5c:15:47:a8:88:6b:c2:15:c2:04:e8:57:61:
14:51:fb:95:5c:e0:0c:2e:0a:4c:af:9f:d2:e0:92:4b:02:bf:
fe:fb:c2:94:e7:0c:c1:24:c5:28:10:d1:4c:15:12:e1:55:7b:
82:fa:42:16:35:d8:9b:e5:67:de:2f:02:04:d6:cc:cf:47:65:
da:6f:fb:a0:e2:ed:fd:ad:0b:aa:50:73:56:44:6d:32:53:5c:
f3:eb:60:bd:a3:91:e2:bc:f8:7a:f7:df:46:9d:50:95:ae:33:
0c:1d:6c:53:a2:cc:8c:7f:5d:18:12:bd:de:36:ac:e2:b7:05:
78:85:87:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:45 2025 by rpki-client