Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/9mO7V0uUG99RRR_XfNV7Acy_4iU.roa
File: 9mO7V0uUG99RRR_XfNV7Acy_4iU.roa (raw, json)
Hash identifier: NFiuO8mhXN9nZ89gjQmJiZZnXaDiUFRxCUwxkC2kZlM=
Subject key identifier: F6:63:BB:57:4B:94:1B:DF:51:45:1F:D7:7C:D5:7B:01:CC:BF:E2:25
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018F82257BB4BDE4392E01AF39A67DF90B03
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/9mO7V0uUG99RRR_XfNV7Acy_4iU.roa
Signing time: Thu 16 May 2024 16:04:05 +0000
ROA not before: Thu 16 May 2024 16:04:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 85.117.243.0/24 maxlen: 24
185.236.11.0/24 maxlen: 24
194.110.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Aug 2024 11:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:82:25:7b:b4:bd:e4:39:2e:01:af:39:a6:7d:f9:0b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: May 16 16:04:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f663bb574b941bdf51451fd77cd57b01ccbfe225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a1:f7:f7:ea:99:ae:a7:54:7a:26:56:41:66:
29:5c:b0:9f:46:6a:6d:d2:b3:38:63:7f:21:29:6a:
a0:be:04:17:d4:3b:76:5d:50:6a:02:9e:2b:9d:54:
1b:05:1a:7e:cf:aa:08:e0:ec:14:99:09:bd:86:0d:
5e:06:09:bc:87:b1:b4:6a:62:ac:d5:4f:db:6c:aa:
7d:5e:78:cf:42:c6:22:32:e1:bd:c8:b6:5d:c2:cf:
09:e4:87:a7:70:e5:a2:62:86:2f:ed:7f:92:ee:7d:
33:35:db:a7:4d:32:76:cf:b5:db:43:4a:7f:3e:df:
a1:3d:0f:ed:40:62:a9:f3:df:2e:52:61:48:d3:1b:
2b:cc:91:09:ce:0f:2b:94:03:83:61:c5:fa:22:af:
54:aa:a8:f7:50:0b:be:46:a3:f0:ba:e4:20:6e:72:
ae:40:b4:5c:4a:39:39:3a:b1:41:86:46:ce:a8:e9:
8e:10:50:e6:ca:f2:10:b2:3b:ec:81:e7:8e:bb:de:
fe:74:38:d8:e2:3f:14:6e:0a:04:ec:7c:54:51:ec:
f8:b6:d2:da:da:8e:bc:28:7b:97:d9:de:78:e2:b2:
af:2f:62:18:84:c8:ef:fb:08:5e:3f:14:d0:4f:46:
c8:ed:df:da:12:3e:3c:db:85:df:a0:3f:d9:2c:0e:
8c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:63:BB:57:4B:94:1B:DF:51:45:1F:D7:7C:D5:7B:01:CC:BF:E2:25
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/9mO7V0uUG99RRR_XfNV7Acy_4iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.243.0/24
185.236.11.0/24
194.110.174.0/24
Signature Algorithm: sha256WithRSAEncryption
82:62:96:55:a3:ef:f8:0d:89:3f:40:86:ee:7b:67:80:26:e9:
4f:3f:06:ad:78:fb:64:0f:ee:fa:51:a3:36:4d:bd:34:a8:95:
25:15:2a:1a:2f:6d:d1:49:32:b8:c2:80:54:66:0f:39:46:0d:
c6:6c:6e:d9:a0:90:2d:ef:7c:fc:e9:48:60:9d:b2:39:bd:70:
bc:67:c0:c2:66:b4:e2:e4:bf:a0:84:e5:40:54:d9:89:db:1e:
57:69:6a:d2:73:59:1a:fa:59:25:5e:88:79:75:e7:7a:a9:cb:
be:22:1a:7e:96:f7:18:04:0d:3d:ba:30:53:3f:f9:70:a6:d0:
a7:28:3e:11:aa:9e:d1:56:b4:82:f5:90:14:ec:91:43:ac:c4:
38:00:f8:96:92:4b:07:b8:56:bb:91:16:03:41:65:ac:ea:e3:
ad:4b:8b:61:39:4e:21:41:38:3e:84:1c:4b:6f:00:5a:04:9e:
94:f9:6b:95:5e:1c:cf:55:cc:66:bb:b8:b5:e3:98:30:3b:66:
f0:93:8a:a5:44:8a:dd:60:b4:0c:b0:d0:66:a5:be:a0:e9:10:
33:25:fa:7a:75:5e:ef:ca:c4:29:d6:7c:78:b3:87:81:54:76:
62:1c:5b:c7:92:80:18:25:06:31:4e:dd:bc:04:a9:d9:21:29:
aa:14:4a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:07 2025 by rpki-client