Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/oQSFbYwvlvLJpmdVDjNeisx1__o.roa
File: oQSFbYwvlvLJpmdVDjNeisx1__o.roa (raw, json)
Hash identifier: DZBFaVAIWMFQEsDeJUabOX9wdmINWNCaQuCxwqPLYNQ=
Subject key identifier: A1:04:85:6D:8C:2F:96:F2:C9:A6:67:55:0E:33:5E:8A:CC:75:FF:FA
Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Certificate serial: 018CC500965F38076ADB006F97D5246D996D
Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/oQSFbYwvlvLJpmdVDjNeisx1__o.roa
Signing time: Mon 01 Jan 2024 12:29:59 +0000
ROA not before: Mon 01 Jan 2024 12:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12703
IP address blocks: 185.71.100.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 09 Jan 2024 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:96:5f:38:07:6a:db:00:6f:97:d5:24:6d:99:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Validity
Not Before: Jan 1 12:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a104856d8c2f96f2c9a667550e335e8acc75fffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:50:07:9b:7c:bb:fe:fd:4a:f3:70:24:33:9b:
e4:14:34:b8:ae:87:af:9b:65:41:77:1b:d5:ef:3e:
01:8c:a7:71:ed:cb:6d:9d:de:3c:79:20:2c:5c:c4:
de:a7:b3:cf:f9:95:6f:80:a0:a2:61:10:52:91:2b:
80:3c:f8:2d:50:1c:dc:05:69:e5:b9:30:99:b8:07:
1f:f2:cf:ad:f6:1a:fc:9d:92:93:c7:cb:c3:cf:80:
74:0a:0f:f9:ba:51:00:ae:88:77:a6:73:26:bf:4e:
96:63:5d:a5:a7:35:59:bb:a2:6a:50:99:32:5a:98:
6a:6f:81:96:5d:ef:3e:91:6a:e9:76:0d:2f:bc:38:
75:4b:f4:45:27:5b:aa:06:5b:9e:aa:36:ab:cc:a8:
f8:3d:7c:5c:0e:52:59:b2:c6:04:a5:1e:55:0f:50:
f8:1b:26:0a:7a:d2:f7:b3:79:46:9e:28:ac:aa:00:
4d:e5:c0:ee:6a:2d:d6:73:0f:27:64:3b:30:88:82:
b6:a6:8e:51:03:5f:a1:2e:c7:63:a1:a8:2a:ca:64:
ac:e7:40:f0:88:33:79:e6:ad:f3:0e:04:8d:61:c6:
61:13:9a:4a:48:54:e8:07:c1:74:1b:44:14:98:cf:
38:75:a0:7f:95:9f:dd:54:8c:8e:2a:f8:ea:13:7b:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:04:85:6D:8C:2F:96:F2:C9:A6:67:55:0E:33:5E:8A:CC:75:FF:FA
X509v3 Authority Key Identifier:
keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/oQSFbYwvlvLJpmdVDjNeisx1__o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.100.0/22
Signature Algorithm: sha256WithRSAEncryption
38:7a:78:f6:1c:35:4c:83:ed:2a:1e:55:12:c8:b8:b5:a5:c4:
c5:29:d7:bd:8c:41:6b:fa:63:67:51:fd:ef:58:ca:25:0a:56:
34:a5:fc:5c:4b:78:b7:0d:43:94:b3:51:01:4e:6f:81:97:ac:
6f:fa:1c:9c:1d:24:cf:dc:47:92:1d:97:af:af:c1:9d:ea:1c:
4d:04:85:93:e2:87:aa:ae:54:3f:e9:e4:e3:e0:51:9a:68:af:
14:4f:fa:df:f2:2e:39:c6:4e:d2:35:34:83:5c:0d:d9:07:3b:
4a:03:a5:b7:88:fa:cc:cd:7c:6b:6b:ce:02:f3:96:83:60:63:
c9:5d:4d:32:27:bd:b2:c5:f5:84:70:b5:08:e6:c4:67:5b:f8:
b2:ae:a4:3d:b2:e8:1f:8d:2a:e7:1e:90:ee:d0:c2:03:5c:15:
d8:a6:df:1c:8f:9d:54:72:aa:d2:30:a4:52:51:ff:0a:c9:08:
61:2d:80:cf:07:8e:cf:3d:a2:56:5c:13:81:7e:d1:bd:73:da:
53:e3:be:7f:17:44:6a:c2:e1:e2:de:cb:49:af:13:fa:00:06:
41:a5:15:99:94:3e:4b:78:96:26:3f:6f:3b:45:5c:09:c0:b1:
c6:05:08:14:3a:c5:23:09:43:9b:dc:1f:ec:d4:7b:f1:89:b8:
3f:10:c8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:39 2025 by rpki-client