Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/xAgwpn3bObPf6E_YhoS0yf5k_jE.roa
File: xAgwpn3bObPf6E_YhoS0yf5k_jE.roa (raw, json)
Hash identifier: x97Rv4O11FkW8RyAeMLt28J6OBuOZLCsEDIH6gV7kc4=
Subject key identifier: C4:08:30:A6:7D:DB:39:B3:DF:E8:4F:D8:86:84:B4:C9:FE:64:FE:31
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 018E04008B29EF59F632982FC6D7CD6FF967
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/xAgwpn3bObPf6E_YhoS0yf5k_jE.roa
Signing time: Sun 03 Mar 2024 11:08:48 +0000
ROA not before: Sun 03 Mar 2024 11:08:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209147
IP address blocks: 185.88.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:04:00:8b:29:ef:59:f6:32:98:2f:c6:d7:cd:6f:f9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Mar 3 11:08:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c40830a67ddb39b3dfe84fd88684b4c9fe64fe31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a1:01:2a:2f:36:a4:79:21:fe:21:7b:02:89:
50:50:47:fd:87:13:0a:ef:37:63:54:e1:7e:cc:6a:
63:ed:80:5e:b8:77:1c:28:60:b5:1d:20:d0:28:f1:
ea:b7:0d:49:e1:e4:42:2c:36:a6:b2:0c:b4:27:e3:
2f:7c:3a:9f:6a:4a:42:e8:32:f2:7d:cd:2c:ce:b6:
8f:96:2b:ff:d4:32:f9:6e:da:6e:a3:6c:8d:29:e3:
6c:0f:e1:e9:5a:64:51:f1:bc:0f:67:ce:eb:49:5e:
02:e9:92:ce:14:e5:40:a9:df:35:26:1f:a8:61:e6:
5c:09:15:3e:11:0f:81:8f:05:5a:12:b9:2e:11:11:
66:57:8a:d8:16:7c:21:91:17:33:4a:68:87:b1:9f:
e6:e1:51:ed:6d:4c:7b:be:1f:6c:a2:ca:db:fb:7e:
4b:68:ee:23:e0:33:f7:1f:28:49:90:7f:ee:f2:eb:
8b:44:6b:21:fe:70:44:9f:57:fd:c9:0b:1f:df:68:
5e:d8:45:08:25:42:31:23:83:0a:74:f1:9a:91:d2:
7b:d9:d5:5b:cf:12:11:f0:b5:9f:18:29:62:a5:f8:
2a:c5:99:e7:9b:f6:5f:ab:e2:68:fd:7d:bf:4d:c7:
cf:24:b0:e8:51:45:e5:a4:c6:cd:11:a2:2d:10:0f:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:08:30:A6:7D:DB:39:B3:DF:E8:4F:D8:86:84:B4:C9:FE:64:FE:31
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/xAgwpn3bObPf6E_YhoS0yf5k_jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d2:97:cc:49:00:af:12:03:42:5e:b2:fe:9f:10:05:48:af:
60:f6:ab:be:3f:ce:f8:6a:44:45:79:d2:b4:d5:1e:90:00:e6:
b2:a5:3a:80:45:31:e3:24:0e:85:a5:e7:87:86:c2:b5:30:64:
df:84:7f:fc:fd:32:17:a1:84:53:70:e3:19:dc:62:95:14:76:
e3:f7:1b:90:e8:da:6f:3f:a4:58:95:b0:45:ee:d8:b9:33:09:
6c:b5:e8:d7:86:40:79:a4:c7:27:5a:35:e6:c8:3b:24:ec:86:
34:c4:05:ae:2d:2c:c7:51:e4:60:a1:16:a3:77:5b:2e:c2:10:
8a:df:7c:12:98:de:40:7f:bd:c3:65:30:e8:1b:d3:8b:7c:60:
aa:a6:2c:42:23:87:ef:6a:3d:e1:2f:60:d1:56:79:ac:86:c4:
9b:85:32:08:e1:c5:1d:a8:a4:1d:bb:e2:3f:89:9a:e8:f2:50:
6d:12:79:97:ce:4c:66:bf:33:d6:5e:eb:e7:9b:93:4c:28:c8:
aa:74:b5:10:5e:de:fa:49:27:cb:b3:f4:35:d1:20:7d:56:b4:
2b:10:a4:30:f9:e9:64:f2:b7:4f:8c:1f:b2:70:a8:85:bf:7f:
b5:69:22:74:45:74:f0:ed:94:6d:6c:32:5d:85:ad:a1:33:53:
2e:29:30:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:55:10 2025 by rpki-client