Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/R0yFLoljqCNP6eCrRDT9niVYkIo.roa
File: R0yFLoljqCNP6eCrRDT9niVYkIo.roa (raw, json)
Hash identifier: U5C4t5GWshWWoXrVC83DMPGGQtiPpYgS2B8nfqVdj1o=
Subject key identifier: 47:4C:85:2E:89:63:A8:23:4F:E9:E0:AB:44:34:FD:9E:25:58:90:8A
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018CC3B677A2B33A26CA6198EEFDF8A07F32
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/R0yFLoljqCNP6eCrRDT9niVYkIo.roa
Signing time: Mon 01 Jan 2024 06:29:24 +0000
ROA not before: Mon 01 Jan 2024 06:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 27323
IP address blocks: 185.255.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:77:a2:b3:3a:26:ca:61:98:ee:fd:f8:a0:7f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=474c852e8963a8234fe9e0ab4434fd9e2558908a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:3a:19:a9:65:03:e0:9c:1e:22:ec:90:f8:
b1:6a:f1:91:a0:f6:8e:c1:ef:07:c3:3e:78:7b:32:
3c:f6:8c:c8:20:e2:c8:c6:c3:d7:b1:d4:d8:eb:b9:
ee:c8:23:ff:40:82:55:79:61:5e:ff:5a:43:68:6f:
e6:b9:e6:b3:fa:39:76:8e:98:60:fc:8c:58:e2:21:
c5:3f:25:26:c0:d3:bb:d5:f7:6f:11:d7:09:f9:86:
9f:b8:04:8e:28:00:3a:d3:cd:8b:fd:d7:0c:bf:47:
e5:b9:56:f2:f9:f2:49:5a:05:85:31:ed:7c:d4:89:
b0:50:f3:73:5b:39:d6:5e:de:fd:34:ba:a1:9e:d8:
88:55:5b:b1:a9:eb:88:f8:23:be:a5:1a:da:79:7f:
28:c7:37:57:f3:ec:61:10:dd:65:f7:27:4c:53:1f:
55:ce:69:e7:4b:9d:26:38:0e:46:46:f0:3e:67:bf:
49:dc:31:61:58:f7:0d:b7:d6:be:99:39:4c:88:b9:
0c:7a:27:22:45:21:c8:66:74:df:d5:3f:2b:1d:7b:
51:31:5a:5c:2e:1c:f1:84:00:4b:ab:04:f8:c9:5c:
c9:eb:05:31:d4:b5:31:b6:2e:73:42:f2:33:8f:12:
99:73:7a:da:64:a0:90:52:3c:b0:40:ad:99:a3:0f:
63:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4C:85:2E:89:63:A8:23:4F:E9:E0:AB:44:34:FD:9E:25:58:90:8A
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/R0yFLoljqCNP6eCrRDT9niVYkIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.115.0/24
Signature Algorithm: sha256WithRSAEncryption
96:97:7e:55:c9:5d:8d:c8:20:98:28:c7:ad:0a:0d:92:e7:4b:
43:fe:79:a1:1e:bd:be:19:98:11:7d:12:3e:f3:4d:3a:6b:1e:
47:17:df:a2:9e:44:51:87:44:c8:53:2f:75:22:87:fa:b2:06:
80:38:ea:ee:15:10:29:d7:17:a0:6d:2c:f0:69:f3:03:cc:f8:
75:ed:53:32:84:9d:e2:ff:e1:c3:bd:93:51:e3:06:f1:ef:6f:
ca:18:ab:3f:d4:1c:df:2f:b3:b2:c1:25:50:be:a3:9e:35:21:
af:37:ca:a1:50:b6:11:f5:8e:42:4b:ee:53:99:65:87:ec:2e:
09:02:f1:66:78:1f:c9:75:b9:a1:3c:bf:b9:e1:91:b9:18:dc:
b9:8b:b1:1b:58:0c:24:e9:4f:78:20:e6:fc:2f:a5:9f:18:75:
49:19:d0:48:95:e4:21:8e:f3:af:d8:e4:91:c2:31:46:ea:1e:
e7:ba:61:a9:2c:74:24:a0:18:ca:f2:c6:1c:3c:8c:af:c1:3a:
aa:ef:f6:df:ca:f0:f8:cf:75:60:6e:85:82:21:76:b2:4e:83:
34:d9:45:47:1e:ed:78:c7:2d:a1:05:78:e6:4a:b1:13:56:71:
cc:8d:61:1b:34:e7:47:da:38:23:75:21:7d:81:f6:82:08:bd:
48:9e:58:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:13 2025 by rpki-client