Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/T3OmX6fYRixijJVDFCXqiwRayg4.roa
File: T3OmX6fYRixijJVDFCXqiwRayg4.roa (raw, json)
Hash identifier: qR86wt86guqDozQ+i9IvQs4Js9DTPvG+6whxTcH5qcI=
Subject key identifier: 4F:73:A6:5F:A7:D8:46:2C:62:8C:95:43:14:25:EA:8B:04:5A:CA:0E
Certificate issuer: /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial: 018CC86F639C46485B7841E0BCA983B098FC
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/T3OmX6fYRixijJVDFCXqiwRayg4.roa
Signing time: Tue 02 Jan 2024 04:29:52 +0000
ROA not before: Tue 02 Jan 2024 04:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200020
IP address blocks: 185.102.26.0/24 maxlen: 24
185.102.24.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:63:9c:46:48:5b:78:41:e0:bc:a9:83:b0:98:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
Validity
Not Before: Jan 2 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f73a65fa7d8462c628c95431425ea8b045aca0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fc:6a:cf:23:b6:cd:43:8b:74:d9:2d:ff:ce:
79:dd:76:71:cb:95:85:7f:79:81:1d:7f:58:4b:cb:
3d:4c:05:61:34:45:a7:21:14:4f:94:3d:48:b7:59:
e7:35:82:d2:50:22:76:b3:a2:78:69:3e:ef:4d:e8:
89:a9:ca:8e:11:2e:38:aa:b1:87:58:b1:e6:23:da:
8f:bc:4f:c9:fe:17:53:1c:27:c5:a9:a1:bb:b7:a3:
29:b4:1b:71:9b:07:c3:18:6f:a2:c8:e4:0a:93:10:
9d:f4:d7:3b:fa:d2:81:06:45:fc:b9:db:b3:68:60:
67:31:9f:17:d6:1e:fa:4e:f7:b7:d9:13:74:53:27:
36:3f:0a:8e:99:61:82:f4:a9:5e:73:e9:db:6e:62:
42:6b:a6:18:37:a1:92:f3:5d:55:b8:47:3b:29:f9:
3d:eb:b2:25:0e:e7:06:d2:c3:a8:6c:8a:1a:eb:58:
f6:7a:ce:e4:05:a7:36:bc:44:b2:ad:d8:c1:04:16:
4a:55:c9:76:47:0d:f2:5a:b1:1a:1c:2d:8a:f2:d6:
b2:eb:31:e0:93:9a:ae:29:51:17:19:67:72:77:1c:
94:db:05:98:16:62:66:bc:65:34:58:d1:26:51:9a:
15:30:e1:1e:a1:89:58:89:18:bf:66:2b:70:a0:7f:
2b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:73:A6:5F:A7:D8:46:2C:62:8C:95:43:14:25:EA:8B:04:5A:CA:0E
X509v3 Authority Key Identifier:
keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/T3OmX6fYRixijJVDFCXqiwRayg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.24.0-185.102.26.255
Signature Algorithm: sha256WithRSAEncryption
72:ec:c4:36:9f:93:3c:6a:61:19:b7:0e:8e:c7:42:7d:46:16:
5b:85:f4:00:87:76:a9:72:15:b4:79:96:3f:6d:25:7b:ce:3c:
ab:4d:85:7c:30:30:62:1b:c2:9b:6d:9e:a3:d9:be:10:af:12:
ce:9b:96:c7:3c:99:1c:11:3f:40:54:d0:b7:5f:44:e4:ba:69:
55:15:5a:56:8e:06:e9:32:68:45:07:cc:d1:9f:a5:49:39:2b:
52:2a:0c:0c:5c:21:20:97:41:08:82:a0:dd:23:dd:b5:1d:a3:
46:a0:64:a5:c1:2f:0c:3f:89:4c:65:ad:b9:37:5b:06:94:bf:
35:10:fb:87:b3:cc:bc:59:d1:1d:65:33:b9:2a:4f:f9:cc:69:
51:72:06:8e:e1:21:de:18:ff:3a:4f:00:84:20:d3:60:f0:07:
08:1d:a2:5f:bc:22:01:c6:a1:17:56:42:54:bb:7e:dd:30:59:
a0:3e:41:41:75:df:6a:d2:67:b7:15:64:6e:63:b9:9a:ca:75:
3b:11:42:8d:08:a0:af:31:05:2a:cd:bc:0a:f6:81:09:99:27:
8d:f1:62:a6:b2:7b:58:56:d8:31:50:93:ba:45:7c:b8:d4:e2:
8f:6d:92:5c:37:8c:c3:11:7b:50:80:67:be:ee:1c:34:fa:10:
22:bb:e0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:54:31 2025 by rpki-client