Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/T1YWcENJppTESeXuL9-LDTUVJWI.roa
File: T1YWcENJppTESeXuL9-LDTUVJWI.roa (raw, json)
Hash identifier: PI1Rl75yGgLnqyFZvUhTo0ckfwWxj5TRUx7UB5OW9iY=
Subject key identifier: 4F:56:16:70:43:49:A6:94:C4:49:E5:EE:2F:DF:8B:0D:35:15:25:62
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0193BB48FB17644753AB24F61531FC010D23
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/T1YWcENJppTESeXuL9-LDTUVJWI.roa
Signing time: Thu 12 Dec 2024 14:32:22 +0000
ROA not before: Thu 12 Dec 2024 14:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215523
IP address blocks: 185.210.170.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:48:fb:17:64:47:53:ab:24:f6:15:31:fc:01:0d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Dec 12 14:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f5616704349a694c449e5ee2fdf8b0d35152562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:aa:59:ad:f2:13:9c:6a:9f:8d:c6:ca:b1:
7d:6a:a8:ac:08:29:95:55:e0:e4:5b:60:60:fa:53:
f2:31:e8:16:15:f1:30:5e:d5:4e:69:78:3c:16:46:
39:a1:64:2e:38:8b:23:c5:2d:6f:69:68:97:f5:95:
33:eb:d5:26:1e:e9:cd:ac:49:b2:63:b2:44:aa:df:
4e:61:33:28:7b:b3:32:61:d9:6e:5e:1c:31:68:48:
89:5f:69:b0:57:03:c7:82:b0:7e:e7:a4:1c:eb:eb:
e2:24:bb:55:86:81:aa:06:c3:fa:a3:51:76:25:8a:
07:40:de:42:db:2a:b0:5b:fa:2c:71:3c:73:c6:f6:
46:73:ca:a4:fc:f6:3b:16:59:c2:6d:75:8a:cd:12:
f3:03:70:3b:86:8c:37:01:68:56:49:a5:0d:4c:fc:
4f:02:0e:64:06:d6:0b:6f:88:48:b1:85:c2:6d:28:
e7:a6:fb:f9:05:9a:ff:b7:0d:69:28:a2:39:1c:60:
05:57:b6:d6:78:db:96:52:29:6f:bf:2e:c3:0d:99:
5b:fb:d0:ed:ae:69:ff:0f:dd:3c:9b:e0:55:d6:fe:
32:ca:ac:65:23:5f:d8:33:29:fa:d9:a6:03:04:d2:
e3:ef:3d:1c:8c:09:dd:d5:80:f8:cb:29:da:b1:e8:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:56:16:70:43:49:A6:94:C4:49:E5:EE:2F:DF:8B:0D:35:15:25:62
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/T1YWcENJppTESeXuL9-LDTUVJWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.170.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:f3:28:b4:d7:0c:dc:dd:4e:7c:84:69:13:77:98:53:81:56:
66:50:8e:0a:79:d6:06:45:9c:96:48:dd:f0:34:71:c9:41:a2:
5e:76:b7:d5:ce:08:ab:04:b1:bf:0f:f5:a4:12:99:17:36:3b:
0c:e2:85:66:39:87:68:29:9d:53:49:1a:3f:92:2f:3b:8d:c9:
e1:dd:9f:b3:26:82:34:b8:e2:49:e7:5e:f7:71:cf:86:52:b7:
e4:de:55:ae:01:7c:d3:ad:0e:02:43:ea:d4:cb:8f:f0:34:b9:
ff:f7:7a:82:bb:68:fe:57:3b:e8:fd:a1:4f:32:48:2e:d0:1c:
8e:42:26:ff:56:98:79:63:64:3a:7c:9c:9f:b9:9a:1d:4b:6c:
87:54:30:62:67:72:35:39:52:44:db:68:ae:c3:fb:e0:48:3d:
bb:77:5a:21:cf:4b:48:64:4d:db:ab:8b:4b:68:b2:e7:d8:2b:
e5:50:3f:69:25:f4:30:0d:ae:7d:6c:e3:7d:ac:54:46:a3:ae:
7d:4b:e0:56:22:03:99:a7:a2:39:ad:80:0d:14:c7:eb:cb:90:
1f:98:77:c7:83:be:8a:66:d9:20:ed:1d:78:de:5b:d7:65:7e:
96:f2:69:8c:4a:fc:30:11:fd:3d:14:3d:7b:03:e7:07:dc:c3:
85:ad:35:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:33:54 2025 by rpki-client