Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/xToraGrCI0WvdukYS6tBW_DRE7s.roa
File: xToraGrCI0WvdukYS6tBW_DRE7s.roa (raw, json)
Hash identifier: 2IaQp3wKgTDmXK0K4hmwFMyV98htIBrptT01FaHB+h0=
Subject key identifier: C5:3A:2B:68:6A:C2:23:45:AF:76:E9:18:4B:AB:41:5B:F0:D1:13:BB
Certificate issuer: /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial: 018CC9BC0457AEC5AF607AFB2C962DA063D3
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/xToraGrCI0WvdukYS6tBW_DRE7s.roa
Signing time: Tue 02 Jan 2024 10:33:11 +0000
ROA not before: Tue 02 Jan 2024 10:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50254
IP address blocks: 185.145.124.0/22 maxlen: 22
185.145.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:04:57:ae:c5:af:60:7a:fb:2c:96:2d:a0:63:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Validity
Not Before: Jan 2 10:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c53a2b686ac22345af76e9184bab415bf0d113bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:1c:0f:f2:3b:82:32:08:36:57:59:37:31:
61:d1:3a:07:3e:05:dd:03:27:70:5f:e8:f5:7f:8b:
bd:3c:fb:e1:18:13:ea:dc:d7:c9:c9:9a:90:cc:bc:
00:b0:22:73:f4:f4:38:e6:95:8e:12:cd:1b:e7:eb:
ae:7c:6d:fd:82:c0:81:85:c1:0c:74:c0:1f:6e:06:
03:11:18:ec:01:82:24:d8:14:81:f7:04:bc:e7:68:
c3:d6:95:2b:35:5c:b5:98:15:3c:0c:68:b4:57:91:
17:e5:c3:8e:5a:e8:e4:00:e1:2e:96:21:9e:a0:24:
50:18:66:f8:6a:20:89:61:20:05:ae:c8:ee:ca:79:
15:81:46:2c:5b:4c:cf:9c:dc:b1:9d:6d:54:ac:94:
df:84:3f:0b:88:0c:01:fe:ec:7a:f1:8c:fd:8c:a3:
65:76:e9:85:57:5d:3e:18:a7:46:8e:4d:e4:c8:85:
14:71:cb:33:f7:ac:05:c7:0e:62:c6:b5:41:e1:20:
99:dd:52:e7:81:1c:85:47:7c:0c:ce:f6:12:56:98:
13:8a:cf:de:f8:4c:85:f1:ed:bb:b6:6b:b9:4c:53:
6a:f6:0e:ab:e3:20:5d:07:70:12:a2:98:a0:bb:ad:
80:5b:93:70:b4:06:ad:a5:1e:7e:16:8d:0a:14:f0:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3A:2B:68:6A:C2:23:45:AF:76:E9:18:4B:AB:41:5B:F0:D1:13:BB
X509v3 Authority Key Identifier:
keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/xToraGrCI0WvdukYS6tBW_DRE7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.124.0/22
Signature Algorithm: sha256WithRSAEncryption
05:11:87:2c:00:79:1e:0f:39:f9:38:15:97:30:a7:0a:62:61:
81:4f:29:24:ba:67:8f:6f:cc:a2:77:aa:e8:94:81:39:a6:21:
f4:34:90:e8:2c:7b:2b:75:b6:7a:3d:f1:b6:09:7b:1c:75:b2:
90:fa:51:65:a4:00:8f:5e:e6:3b:4a:00:79:d9:e5:c5:d3:7c:
1c:d0:9a:6f:f7:6d:69:5b:27:6e:72:d1:86:b0:af:1d:58:f9:
cc:c4:7b:8d:1f:32:db:55:0f:3b:6c:80:7e:36:b1:c9:e4:c8:
01:34:3e:ea:a3:bd:8d:65:f3:77:56:2f:74:ed:5a:79:7f:9c:
80:b0:0b:8a:e5:a4:5f:33:87:dd:d1:72:a8:c1:99:90:60:e7:
fb:ae:f2:54:81:6d:48:46:b7:e0:0d:57:50:ab:54:45:ab:f0:
3e:0c:f2:61:d2:b3:f9:5c:a6:4c:99:0b:dc:c8:c4:fe:dd:79:
80:fd:92:4d:4c:77:36:fe:ca:d5:4a:92:31:90:e4:18:f1:a5:
ab:e3:0d:24:ee:d4:46:59:a6:ee:61:57:99:b1:63:35:4c:1a:
28:b0:a8:1f:bc:0e:c4:b1:1a:00:a4:17:8b:b2:bf:76:c2:17:
eb:c3:75:af:fa:f2:ca:af:d8:94:10:90:77:f0:e6:21:1d:68:
36:79:7e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:50 2025 by rpki-client